Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: tXUh3uSyOSAytolnj45urHvmuQIbOnHmLA1QxnHIYNg=
Subject key identifier: 73:3E:1E:BB:1C:22:FE:C0:84:9C:BE:5E:E3:55:DB:3E:CC:73:14:C0
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 0197B7EA9279753177C2817D672632D81EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: Da5ukIODRFZkZgl7acW52LzBL34.roa (hash: 2S0h0c/tsGIJ57Pr+A8pwZxQY2/WXek+xC9ZKTvhbzU=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: 7W+ihc4bfWtCsSbyPhGZY2bDM7x9qlGjHmGgpGFDKhg=)
3: Z45rQavEcQTf3vGUVM_AgWAXCn4.roa (hash: q7JvLSO411WbeIPtlyaZvnsbtnUZIYteyAyCawxKvzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:92:79:75:31:77:c2:81:7d:67:26:32:d8:1e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=733e1ebb1c22fec0849cbe5ee355db3ecc7314c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:be:e1:e7:cb:f8:76:4e:d6:e6:30:28:3a:
ca:97:12:c7:09:d3:53:97:90:e8:3a:72:42:a3:a8:
cf:83:7f:f4:26:06:9f:ae:72:ad:a7:db:97:26:cf:
9d:ab:ad:6c:32:d4:8a:45:51:6b:66:58:ec:db:7a:
85:62:fe:f3:58:80:3b:c6:f6:36:5c:14:78:8e:5c:
e3:6d:cf:c7:b1:48:9f:28:2a:fa:a1:a5:51:ac:58:
60:50:a0:e2:cb:11:d2:35:9e:12:11:d6:05:b9:86:
3e:5b:28:08:8f:9a:f1:04:33:e1:da:46:34:f7:a5:
13:92:25:c2:9d:f7:c8:40:3f:64:65:24:5d:3f:6b:
ac:ef:1f:a3:09:d4:61:17:35:30:c0:a7:e6:57:c4:
01:9a:c1:ba:08:6d:62:a7:10:e1:f9:a9:c7:00:77:
ff:d6:b0:8a:76:e4:2c:93:7f:bc:11:e1:17:4a:60:
69:d1:c4:a1:84:95:cf:67:fb:52:c1:a7:93:11:96:
b9:6d:64:a4:f8:fb:0f:6c:cd:d9:76:b0:af:b5:6f:
4e:d9:ec:37:53:4c:d5:35:73:1c:aa:f6:2b:2d:fc:
6f:bd:58:68:85:f1:80:90:fb:81:29:9f:b1:e4:8b:
9b:37:7d:98:5b:13:8c:bb:5d:e2:55:54:72:4b:a9:
59:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3E:1E:BB:1C:22:FE:C0:84:9C:BE:5E:E3:55:DB:3E:CC:73:14:C0
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e1:89:45:d0:3d:1e:17:b2:f0:03:bd:a6:16:72:9d:dc:a2:
33:36:45:4c:b0:7f:35:20:9c:ad:1c:e5:4d:dc:52:18:63:24:
1e:75:17:9d:8d:01:b2:8f:a0:ff:87:a2:01:7d:76:83:10:e6:
28:ab:8a:20:af:b3:d7:e2:67:06:03:23:05:bc:e5:9c:d8:c2:
63:3e:e5:8c:c3:19:74:a9:54:e4:a4:2f:b8:78:07:0d:8d:cb:
09:71:21:00:04:a6:d1:3d:15:31:6f:1d:3d:72:dd:55:d6:f4:
b7:fa:f7:2c:1c:d8:7a:7f:e2:29:7e:81:25:bd:ef:30:2f:a8:
22:68:f8:c2:b6:c0:16:82:a2:dd:71:64:94:7d:06:f9:1d:0c:
b4:d1:39:7c:ea:89:0d:d5:e3:0f:be:8d:a3:28:5a:4b:63:6e:
8a:f9:87:0e:61:62:53:6b:e6:8d:92:78:d9:b3:da:fe:cb:fc:
d4:73:58:e6:6a:dc:2d:24:ba:eb:62:cd:c3:f4:94:05:7e:1e:
1a:15:68:e7:6d:fc:e0:b2:c3:48:03:5e:66:db:e0:5f:be:00:
d9:40:2b:0f:2f:e9:b0:a3:7e:78:6b:1d:a5:34:98:ac:29:e1:
a2:72:ff:7b:cb:30:99:90:cc:3d:d5:bb:4d:8d:73:90:25:ea:
b4:ca:7e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:55 2025 by rpki-client