Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
File: Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft (raw, json)
Hash identifier: nUvAhtQKfHYPY7w1JcO0BrslMtwtpXK+xmmgJTnEG7w=
Subject key identifier: 3D:8A:12:F8:AE:A0:B2:91:74:64:A9:AF:02:D5:CF:29:22:86:54:4A
Authority key identifier: 45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
Certificate issuer: /CN=45ed111630e05297795dddd298ea1fb29e695c53
Certificate serial: 0199296A764FE5342B84A0E1BD13ECA4765C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
Manifest number: 0D58
Signing time: Mon 08 Sep 2025 13:01:06 +0000
Manifest this update: Mon 08 Sep 2025 13:01:06 +0000
Manifest next update: Tue 09 Sep 2025 13:01:06 +0000
Files and hashes: 1: FdZc5w6NQTxVaX5pVim2SXSRdFw.roa (hash: 3yS2WlAT7COs2QdB7b8/iS1aVVb5UF5pqjux+yVKvWo=)
2: Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl (hash: Tixh1wXhEPRtZ0ZDTXB6aBJ6T6H880jSw5jd2bSk/dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:6a:76:4f:e5:34:2b:84:a0:e1:bd:13:ec:a4:76:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ed111630e05297795dddd298ea1fb29e695c53
Validity
Not Before: Sep 8 13:01:06 2025 GMT
Not After : Sep 9 13:01:06 2025 GMT
Subject: CN=3d8a12f8aea0b2917464a9af02d5cf292286544a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:76:60:e4:cb:af:1e:82:3e:11:01:4b:73:
62:1f:e2:31:56:34:61:d8:89:42:d1:72:ab:32:71:
a1:44:1f:81:b2:9d:f0:f1:ff:cb:92:71:84:11:c3:
d8:cb:9b:40:f1:f7:a8:b0:e0:4f:08:7d:64:9d:9f:
9e:ef:22:37:42:e9:ff:8e:47:4c:cf:59:1f:63:a4:
36:37:78:ca:a8:5b:58:52:62:40:09:c3:f6:a1:22:
bb:62:c6:ff:32:6e:a0:8b:79:f7:20:ad:91:1e:e7:
15:9c:8b:0f:dd:0c:fd:ae:86:a3:64:93:0f:f6:bf:
fd:64:0a:50:82:c4:c9:0d:79:66:39:e6:81:c0:3d:
79:9b:d3:46:9c:d6:cb:04:8b:27:ac:53:41:d4:72:
69:76:74:28:30:7b:fc:cf:64:da:15:d9:55:01:49:
19:82:8b:a9:d7:50:5d:c4:97:67:f0:68:e9:32:65:
9d:a8:1f:e3:f7:68:9d:e0:4e:c7:a2:bd:3c:60:83:
01:16:9c:60:1b:d7:be:48:2c:79:3b:b5:de:95:ff:
15:73:26:1e:1e:13:a0:9d:bf:bd:b5:a4:8c:cd:f5:
3a:c1:0e:76:f7:43:d8:c2:de:1a:a5:99:b6:b7:00:
47:55:7a:7f:38:c9:0f:38:a8:c5:9a:1d:b2:c8:35:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8A:12:F8:AE:A0:B2:91:74:64:A9:AF:02:D5:CF:29:22:86:54:4A
X509v3 Authority Key Identifier:
keyid:45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:23:81:27:c6:9b:7a:8d:69:62:0c:be:0b:ef:82:8b:64:43:
6e:ee:a7:5f:9e:84:68:c9:03:fa:6d:93:7c:c6:ba:7f:0f:fc:
3b:fb:82:5a:a9:82:ec:41:68:58:f6:54:19:b9:ed:11:dc:9c:
b8:91:c0:9c:c5:2d:c7:2b:e3:99:ad:fb:d4:a1:67:2d:fe:43:
20:63:34:c9:f1:33:d2:60:39:90:7c:0e:65:c8:60:f5:85:13:
79:7d:f4:84:fa:0d:f8:f8:0e:0e:c1:2d:66:5a:64:dd:bb:81:
ff:ab:0c:16:a2:fd:a3:00:dc:76:66:79:9a:c1:83:83:8f:45:
3e:5b:5a:64:d4:9d:e2:b9:0a:68:7d:66:c5:f7:bf:bf:2b:01:
bb:c3:af:c6:aa:de:f1:be:20:6d:b4:ad:0c:d6:e7:54:68:ec:
4a:76:f4:c8:92:ec:19:17:7f:0b:57:ac:e2:a7:74:44:cf:ec:
4d:e9:78:b2:37:cf:4d:41:47:dc:ed:45:a4:30:fc:37:25:62:
ef:01:cc:93:42:d9:e0:5d:94:0d:b3:b9:6a:15:cf:45:8f:fe:
d4:8e:03:0e:3d:b7:8c:5f:0b:de:c9:c0:d1:ad:b3:0d:e7:44:
46:b5:98:62:ad:26:08:38:55:d4:35:ff:ca:3a:d1:95:e5:d1:
46:e8:f3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:03:45 2025 by rpki-client