Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
File: Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft (raw, json)
Hash identifier: H5kqONvkZN4vIJYlhPcfdkZR/ZLwbJmhHEBkXajkiL0=
Subject key identifier: 6B:A9:A0:35:0B:90:FC:0B:F1:3D:01:34:1E:1C:E9:4D:F1:EC:EA:EA
Authority key identifier: 45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
Certificate issuer: /CN=45ed111630e05297795dddd298ea1fb29e695c53
Certificate serial: 019A1AD1784D8AE9DFC54C162E8DB613BA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
Manifest number: 0DD5
Signing time: Sat 25 Oct 2025 10:02:06 +0000
Manifest this update: Sat 25 Oct 2025 10:02:06 +0000
Manifest next update: Sun 26 Oct 2025 10:02:06 +0000
Files and hashes: 1: FdZc5w6NQTxVaX5pVim2SXSRdFw.roa (hash: 3yS2WlAT7COs2QdB7b8/iS1aVVb5UF5pqjux+yVKvWo=)
2: Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl (hash: KsDE8HcjhUF7XYdw/oQATTL2pTW1TRv737vQMOCYpKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d1:78:4d:8a:e9:df:c5:4c:16:2e:8d:b6:13:ba:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ed111630e05297795dddd298ea1fb29e695c53
Validity
Not Before: Oct 25 10:02:06 2025 GMT
Not After : Oct 26 10:02:06 2025 GMT
Subject: CN=6ba9a0350b90fc0bf13d01341e1ce94df1eceaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:42:79:b0:7c:39:a9:9a:b4:10:24:8a:df:
08:a7:b8:11:0f:ae:02:9b:0f:30:db:07:6f:6f:4c:
1d:72:18:56:cb:82:c1:e8:57:b2:62:de:55:92:2e:
02:fe:db:04:d9:8b:81:38:5a:77:d6:a0:09:5a:0b:
63:00:71:3f:b7:22:31:d2:b3:d6:39:ab:74:a1:32:
41:74:58:b9:19:40:9a:dc:d9:b2:6e:0a:23:71:bf:
3f:56:ef:e2:4d:0e:23:c3:b7:36:da:e6:b4:71:40:
24:6d:bc:f7:f7:82:bb:4b:05:71:86:bb:8b:66:41:
93:24:f4:83:70:76:c1:5d:29:c0:cb:42:92:ad:7a:
79:e9:e6:ce:7e:31:0c:48:27:85:4a:21:e7:8a:0a:
54:07:78:46:20:b6:97:11:74:9d:73:e8:6d:70:92:
28:6a:8c:99:9d:e5:18:4a:d5:04:95:e8:a5:31:50:
ce:26:21:95:b3:18:ff:26:c0:07:5d:0a:09:25:b3:
64:80:16:f4:a3:23:d4:3d:28:98:23:3f:7e:e2:e3:
c1:22:2e:fb:c6:ae:d4:7e:cf:90:c3:6c:7b:fe:b3:
32:82:c5:bd:1d:3b:ee:92:c2:87:52:cc:9b:94:2e:
d5:1b:62:20:80:b4:c5:26:9b:e1:81:1c:97:64:5b:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A9:A0:35:0B:90:FC:0B:F1:3D:01:34:1E:1C:E9:4D:F1:EC:EA:EA
X509v3 Authority Key Identifier:
keyid:45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:2e:19:69:b5:ce:28:03:c3:28:bc:07:c9:62:e4:19:46:c0:
32:dc:23:df:dd:73:74:60:74:9e:8d:aa:68:f8:01:59:02:a4:
54:1a:e8:9e:8c:93:89:90:93:ea:84:69:7e:b1:a4:4b:1e:96:
0e:c8:70:9f:d6:95:cd:06:2b:e9:51:4d:d1:13:ed:64:db:3e:
87:f6:34:11:e2:e5:6f:e3:f4:fc:fa:0b:1b:29:92:7b:15:be:
32:0a:8e:8c:cd:a2:63:d1:ad:f8:c3:3f:75:6f:48:0a:45:3b:
59:e0:5d:5c:07:ec:64:42:32:33:0c:6b:c6:11:3b:de:c7:ca:
bb:2c:ec:02:37:c2:25:0f:92:e9:e4:0d:b1:15:4f:cd:8e:0b:
42:64:1b:b4:04:f7:68:ee:d8:4a:8a:04:73:c5:b0:d4:81:6a:
75:f2:71:f0:81:29:cf:c1:61:32:cd:c7:4b:68:46:cd:bd:8a:
cd:52:87:01:07:9c:90:bd:1a:4a:6e:1e:17:dc:29:40:93:fb:
d7:2a:03:d0:e6:81:42:7d:87:e7:fc:b7:f3:9f:0e:96:dc:3e:
ed:74:8a:11:67:20:e6:f5:77:a5:21:6e:f7:a8:d7:c9:a3:76:
41:01:b5:39:e7:2e:87:f5:c0:0c:b7:4d:92:ab:76:fb:00:d9:
94:a6:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:33:38 2025 by rpki-client