Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: ceTrTb1ENZgRggZVtSxNE+c1HJNtl6ReHxLVgkLwrsM=
Subject key identifier: CE:AA:F7:1B:0B:B1:10:59:3E:63:E9:48:5A:88:12:90:62:68:69:3C
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 019A2854F8579C324A2C385044176003CB8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 045A
Signing time: Tue 28 Oct 2025 01:00:48 +0000
Manifest this update: Tue 28 Oct 2025 01:00:48 +0000
Manifest next update: Wed 29 Oct 2025 01:00:48 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: ULS7eE1l8JIguBXluM7ga19ke+yTY12hU4mqWV6Nzxk=)
2: TfZHjmYknRwU6ErUe_wYUlK2dPk.roa (hash: c7WP6wJfnnCXs2t+4y61hzS0o/WHpIcUL2rUoYBlMZ4=)
3: UQg1PMXj1_xA8cNWapDDicWf9QE.roa (hash: SNk8uKYXIWMnimS9vpTvdTlC1q8gr9Fg7CLCU0N94ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:f8:57:9c:32:4a:2c:38:50:44:17:60:03:cb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Oct 28 01:00:48 2025 GMT
Not After : Oct 29 01:00:48 2025 GMT
Subject: CN=ceaaf71b0bb110593e63e9485a8812906268693c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:37:1d:67:fe:3d:47:f9:f0:42:0f:83:18:
fc:b4:cf:ee:96:7d:e6:71:4d:e2:6b:34:e2:e9:d1:
cf:a1:34:c1:8a:1b:f0:9c:43:85:3a:79:98:5f:6a:
af:a1:57:fd:40:8f:16:32:a2:6a:b4:2b:89:8a:e2:
51:b4:6f:34:6a:c3:4e:9b:79:49:d2:1f:e1:97:0f:
be:48:3d:71:14:31:bf:31:54:29:d5:dd:1f:19:1d:
38:82:de:e0:71:53:35:49:48:d2:79:e8:b8:75:24:
87:11:02:65:29:a5:cc:db:64:15:cb:81:25:eb:ff:
6b:7c:99:72:a1:7a:09:61:df:21:c4:72:ca:67:8c:
47:bb:be:94:7a:8b:66:53:12:3d:a9:f3:58:8e:cf:
38:2b:ae:e8:6c:cc:1a:65:10:6e:47:f6:9d:eb:6a:
5f:37:c8:9b:2c:e0:31:00:9b:4e:76:f7:cd:7b:4b:
76:50:ff:fd:4b:3c:05:73:b5:eb:c0:b0:1a:ef:91:
c7:3b:55:d5:ab:26:3f:62:64:62:63:dd:ac:d1:79:
01:69:f9:18:5b:18:81:15:a8:31:54:7a:0b:7e:c0:
c2:e7:6e:00:a5:ba:f3:a8:f7:b1:1a:32:65:8b:40:
18:49:ee:d9:2f:ff:a4:41:26:3d:1f:d9:a3:5a:a6:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:F7:1B:0B:B1:10:59:3E:63:E9:48:5A:88:12:90:62:68:69:3C
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:26:1e:b3:4c:89:2e:61:9b:fa:67:28:dc:63:41:f0:67:4c:
e8:5c:5a:18:fc:a2:6d:a0:74:8c:69:5a:ea:db:41:8b:41:a7:
d0:e9:77:7e:b1:a4:dc:b4:eb:f0:6c:c5:5b:61:f6:54:d8:86:
30:64:4c:79:b5:6d:2e:81:83:a3:62:74:1a:f8:90:4b:c9:6e:
7e:fe:a9:46:9a:46:3d:e3:1e:e7:60:20:6d:4d:dc:f8:8f:1a:
50:be:82:59:2e:fa:01:00:e4:40:b7:0a:3d:2a:d0:4d:f8:ea:
ae:a3:94:23:1b:6c:6e:90:3d:b3:3b:23:20:9c:6c:92:b7:ff:
82:b7:bd:db:53:4f:f6:62:64:c8:3d:d2:87:6f:a8:49:26:6f:
5e:a1:36:99:23:19:a5:ee:0d:56:bc:c1:e9:bc:cd:56:c2:42:
18:51:7c:03:9c:52:da:3e:34:58:90:3f:2e:68:aa:39:c5:b4:
77:62:a6:9f:df:13:b4:4e:9c:19:ef:ed:e8:5a:c5:09:5b:6e:
9e:50:3c:93:a2:10:34:a3:29:6f:5c:dc:2b:0c:0c:8e:47:c6:
f3:68:c9:d0:48:63:ed:02:f4:96:c7:1a:9b:36:b5:cf:da:a0:
28:82:eb:09:80:2b:9c:68:07:54:ba:75:b5:e0:a1:27:82:2b:
b7:e0:26:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:18:56 2025 by rpki-client