Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
File: Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft (raw, json)
Hash identifier: pwF7okQSZv2l8TIDJjyfSuLDY/3YZmYRQjFMBeXhQlg=
Subject key identifier: 47:4D:B2:A0:A0:56:9C:5D:0C:F5:DC:E5:81:46:83:79:F0:B5:23:3D
Authority key identifier: 45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
Certificate issuer: /CN=45ed111630e05297795dddd298ea1fb29e695c53
Certificate serial: 0197469E696E902424DCA4ABF8253675D782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
Manifest number: 0C5E
Signing time: Fri 06 Jun 2025 19:01:16 +0000
Manifest this update: Fri 06 Jun 2025 19:01:16 +0000
Manifest next update: Sat 07 Jun 2025 19:01:16 +0000
Files and hashes: 1: FdZc5w6NQTxVaX5pVim2SXSRdFw.roa (hash: 3yS2WlAT7COs2QdB7b8/iS1aVVb5UF5pqjux+yVKvWo=)
2: Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl (hash: Oncu7avwruRpjSs6UHKmN1r1TFNlPyiySMtBWiPoxtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:69:6e:90:24:24:dc:a4:ab:f8:25:36:75:d7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ed111630e05297795dddd298ea1fb29e695c53
Validity
Not Before: Jun 6 19:01:16 2025 GMT
Not After : Jun 7 19:01:16 2025 GMT
Subject: CN=474db2a0a0569c5d0cf5dce581468379f0b5233d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:e3:a2:a7:ed:73:e5:17:b7:69:2a:a9:23:
14:7f:4f:39:f3:23:d7:43:57:d6:57:d8:19:c2:c7:
f7:e6:06:91:d9:15:dc:97:6b:37:fc:cc:a0:b1:17:
6d:e3:ea:56:27:4b:06:0a:b1:d6:6e:8b:f0:6e:07:
55:27:f7:bf:4e:7a:30:72:f5:ed:81:e6:76:aa:49:
3f:93:84:96:32:f9:54:9f:9c:19:b1:51:d9:7c:3b:
d0:c7:7a:f7:34:7f:84:40:da:c6:95:ff:c2:d4:bc:
71:1f:53:3c:3f:37:52:c5:cb:d1:33:45:02:8b:fd:
f7:df:7c:c1:c1:50:e3:36:86:6e:86:be:dd:22:39:
e6:dc:d8:55:64:77:4f:5b:b5:d4:c1:96:00:b3:69:
1a:cd:a2:92:47:92:d2:e6:d7:c3:7b:7c:2d:2b:cc:
8b:40:9f:99:97:27:66:ac:3d:27:35:69:e7:d8:37:
b1:8f:3b:b9:68:9d:e0:fc:c7:c8:96:1c:8f:7b:ff:
20:17:fd:b7:82:38:f4:92:97:6d:b7:9e:ef:f8:a1:
72:f3:8f:32:71:5d:1a:a5:4b:70:7b:d3:19:a1:03:
de:ee:27:0f:7f:76:50:de:a5:89:f6:53:98:5f:de:
7e:08:92:1c:e1:28:3e:ef:c1:3f:70:19:c8:ce:59:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4D:B2:A0:A0:56:9C:5D:0C:F5:DC:E5:81:46:83:79:F0:B5:23:3D
X509v3 Authority Key Identifier:
keyid:45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a2:2f:93:d7:16:ec:55:3c:b2:48:97:3b:9c:9e:66:4f:a0:
65:45:86:4c:7e:dc:20:06:5f:1b:9c:60:d3:b7:aa:72:61:d3:
14:c2:91:84:cc:a6:00:05:44:e5:ef:b7:ff:bd:8d:a5:73:85:
99:cc:44:f9:a7:03:8c:ae:85:10:dd:6a:db:23:b8:67:29:da:
23:a1:64:40:f1:74:f5:70:80:eb:48:4c:12:d2:6a:06:c4:ae:
ed:59:df:5d:37:ad:d9:35:a5:75:eb:9f:26:0e:ca:16:8a:ee:
51:54:06:6f:22:bf:36:25:44:ef:3a:13:d9:b0:1d:5f:ad:83:
3a:b8:dc:6a:b3:2f:f1:bb:45:10:31:cf:ee:f3:1a:1a:3a:bc:
dd:58:35:2d:dd:9f:96:33:81:ce:af:17:0e:89:79:1e:aa:73:
2f:4c:aa:a7:2a:d1:3d:40:e9:2b:62:8a:b4:7b:0f:93:37:97:
5d:70:62:70:ff:a8:5e:af:72:98:5c:22:05:7e:ab:a5:18:83:
a4:7d:34:e7:93:38:7f:26:2b:67:73:98:4f:06:18:d6:cd:6c:
a4:a3:ca:21:b3:84:29:dd:59:8e:99:3e:98:81:c6:e2:fd:2f:
5a:44:b1:e7:b4:79:b0:6e:86:c9:bd:1d:bf:91:58:52:7e:6e:
a3:c8:1a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:08 2025 by rpki-client