Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: rclvsxy2LcehwC9Y6paoMtgfGcmF1ZiPXJeMK/o6cEM=
Subject key identifier: C2:BD:94:56:58:BA:C2:D1:DC:2A:F6:0C:2D:79:C3:B9:64:73:68:C7
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 0199FF2262B63C031AC3EAAF8A5ED90DEA06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 01:01:07 +0000
Manifest this update: Mon 20 Oct 2025 01:01:07 +0000
Manifest next update: Tue 21 Oct 2025 01:01:07 +0000
Files and hashes: 1: Da5ukIODRFZkZgl7acW52LzBL34.roa (hash: 2S0h0c/tsGIJ57Pr+A8pwZxQY2/WXek+xC9ZKTvhbzU=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: UgCybASRJJNicCGDvFS0TlnAu+nZOVGQeR+kGZsNFN4=)
3: Z45rQavEcQTf3vGUVM_AgWAXCn4.roa (hash: q7JvLSO411WbeIPtlyaZvnsbtnUZIYteyAyCawxKvzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:62:b6:3c:03:1a:c3:ea:af:8a:5e:d9:0d:ea:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Oct 20 01:01:07 2025 GMT
Not After : Oct 21 01:01:07 2025 GMT
Subject: CN=c2bd945658bac2d1dc2af60c2d79c3b9647368c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:8f:77:48:73:41:af:40:f3:d8:c4:21:fc:
a9:d3:30:32:2e:4c:1d:c5:81:17:af:da:52:4a:f2:
96:38:25:2f:e7:60:b6:07:b1:84:f3:7c:a7:be:ed:
2f:10:a5:19:ca:f5:b5:4e:a0:db:df:fa:56:1b:3e:
84:3c:a5:c3:7c:dc:d7:d3:e2:60:dc:cd:ab:2c:aa:
8d:e2:1a:21:af:15:8e:fe:be:7b:2e:06:4c:67:82:
37:02:b0:c2:31:b8:1c:65:6e:0c:06:2f:6a:66:be:
e1:af:44:3b:eb:c8:c1:b5:e3:3b:40:0d:5f:61:2c:
3c:e6:24:51:59:46:2c:67:5a:fe:59:2e:87:32:7c:
c7:7e:0f:35:45:f8:0d:9b:0a:1f:17:fb:dc:1f:aa:
6f:e7:a1:a6:9a:97:99:7d:98:eb:50:54:e0:82:c5:
61:3f:37:9b:9d:55:83:0a:e4:28:c0:ee:09:96:f7:
af:72:27:34:86:23:ac:f0:99:f1:c0:39:a2:d2:e0:
6c:b7:32:0a:8d:b6:cd:bd:bc:15:4d:b0:de:a9:25:
b3:e2:61:3e:74:5e:a3:c1:3e:bb:53:bf:05:2d:7d:
8c:5f:e7:1d:7c:ad:4c:9e:ab:bf:f4:7c:be:87:69:
b3:44:ff:91:c8:44:1f:99:50:db:bc:36:c2:d3:5e:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BD:94:56:58:BA:C2:D1:DC:2A:F6:0C:2D:79:C3:B9:64:73:68:C7
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:56:c3:d7:b4:bf:09:ce:1c:25:f5:7d:9e:43:f9:ce:eb:27:
6e:7f:80:24:2a:b3:21:46:df:d0:ff:be:58:83:3b:63:eb:64:
d4:7a:24:72:14:40:bd:da:be:e5:11:a9:27:99:7e:05:1b:ca:
d2:9c:c7:57:d8:11:cb:e6:13:d3:37:17:6f:a4:8e:59:cc:53:
8d:1c:58:2d:48:16:32:39:07:48:2f:7e:22:ae:64:8b:61:b6:
9a:06:05:9d:73:b3:1f:00:9d:93:89:5d:0e:4d:73:d3:22:cc:
53:34:d5:a0:d1:c3:85:a5:ee:5c:dc:6f:94:f4:ad:f3:73:9c:
45:d2:70:ad:52:78:c9:0e:ac:9a:e2:41:7e:b0:b5:c9:c5:ca:
fa:19:10:9c:cc:49:a3:23:31:8c:76:1d:29:a2:e4:53:6b:0d:
b0:80:b9:7e:a8:14:e1:58:6e:3a:4c:98:8b:84:02:06:41:20:
36:bb:37:d4:4d:46:bc:79:97:f2:4f:e0:8c:85:aa:80:92:bc:
f0:2f:f5:cb:99:09:c0:12:16:13:6c:88:f6:ae:27:95:cb:a1:
de:11:26:91:87:9f:4c:da:b3:f0:a3:5b:c8:87:55:aa:db:36:
2a:b1:a1:db:03:c6:4e:ce:ac:94:85:fa:6a:e2:b5:58:78:b4:
ff:fe:bb:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/ImK2PAMaw+qvil7ZDeoGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTJhOWZiNzc3MDEwMjk2ZjliOGUyMTVlZTBkYjQ0Njcx
NzRkMmQwHhcNMjUxMDIwMDEwMTA3WhcNMjUxMDIxMDEwMTA3WjAzMTEwLwYDVQQD
EyhjMmJkOTQ1NjU4YmFjMmQxZGMyYWY2MGMyZDc5YzNiOTY0NzM2OGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8iPd0hzQa9A89jEIfyp0zAyLkwd
xYEXr9pSSvKWOCUv52C2B7GE83ynvu0vEKUZyvW1TqDb3/pWGz6EPKXDfNzX0+Jg
3M2rLKqN4hohrxWO/r57LgZMZ4I3ArDCMbgcZW4MBi9qZr7hr0Q768jBteM7QA1f
YSw85iRRWUYsZ1r+WS6HMnzHfg81RfgNmwofF/vcH6pv56GmmpeZfZjrUFTggsVh
PzebnVWDCuQowO4Jlvevcic0hiOs8JnxwDmi0uBstzIKjbbNvbwVTbDeqSWz4mE+
dF6jwT67U78FLX2MX+cdfK1Mnqu/9Hy+h2mzRP+RyEQfmVDbvDbC016t/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMK9lFZYusLR3Cr2DC15w7lkc2jHMB8GA1UdIwQY
MBaAFEXiqft3cBApb5uOIV7g20RnF00tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGIt
ZWJkMzE0NTQyMmVhLzEvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGItZWJkMzE0NTQyMmVh
LzEvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklbD17S/
Cc4cJfV9nkP5zusnbn+AJCqzIUbf0P++WIM7Y+tk1HokchRAvdq+5RGpJ5l+BRvK
0pzHV9gRy+YT0zcXb6SOWcxTjRxYLUgWMjkHSC9+Iq5ki2G2mgYFnXOzHwCdk4ld
Dk1z0yLMUzTVoNHDhaXuXNxvlPSt83OcRdJwrVJ4yQ6smuJBfrC1ycXK+hkQnMxJ
oyMxjHYdKaLkU2sNsIC5fqgU4VhuOkyYi4QCBkEgNrs31E1GvHmX8k/gjIWqgJK8
8C/1y5kJwBIWE2yI9q4nlcuh3hEmkYefTNqz8KNbyIdVqts2KrGh2wPGTs6slIX6
auK1WHi0//67YQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:41 2025 by rpki-client