Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier: 9VOxrkXeYyWEppzKarmjPqNkyfuH7hHHeD3YF3rC5ZU=
Subject key identifier: 2E:42:5D:CA:8E:97:27:E8:2B:A1:60:04:3A:8B:DA:EF:16:76:8D:E3
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 0199FB7C886DC6CFD4FC62F49BEFAACEE860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number: 0983
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: pUmwCnm1ZDeTbZBoPs/Tv5cycNTvDi+Mf7FcmeMSL80=)
2: c1218tMrC-SYY-Yo1ITctKUD9_k.roa (hash: 8AGbg1kAcimxxtZO8YTai8jQPbPTR+28UymCTknNVxU=)
3: v9XCpSvXJgFn93oqPO6QjvmDaV0.roa (hash: 2/0z9nylSvJWI46oSDGL4Lr6kTxicsj+PodL8IKe940=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:88:6d:c6:cf:d4:fc:62:f4:9b:ef:aa:ce:e8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=2e425dca8e9727e82ba160043a8bdaef16768de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:89:1b:48:7f:f3:b3:bc:bd:55:bf:bc:47:
3c:ca:41:4b:18:6b:71:30:03:38:49:94:6b:0e:a4:
2f:02:eb:9d:15:16:ec:8f:8e:07:b7:dc:7b:1a:62:
81:1a:6d:f1:5c:4f:fc:fe:ea:98:a3:e2:2c:22:92:
a0:94:4b:37:95:6a:a5:c3:f1:11:9c:45:26:0a:00:
c7:c2:f1:b6:2c:1a:ca:04:35:21:84:8d:e9:14:06:
d8:df:29:0f:2b:d1:a5:6b:ae:4d:15:85:95:38:91:
ee:72:7d:24:a1:a3:b5:44:df:e1:e6:db:d6:54:9c:
0c:76:3c:fd:c6:46:c4:08:eb:8e:42:5e:8f:e9:34:
04:db:04:d2:c0:de:6a:9f:e2:2c:04:a4:7f:64:49:
b4:76:6d:5a:84:35:51:2f:99:e8:9f:98:a5:d7:84:
6c:ed:41:cd:c4:16:dc:90:c2:66:aa:58:77:1a:a5:
fc:40:cb:b2:34:57:c2:31:98:95:e0:39:90:1d:a5:
9c:af:31:04:22:8b:92:31:a9:1f:99:98:3e:a9:11:
4f:06:5f:af:b6:cb:8c:c6:9f:91:44:2e:d6:e3:27:
50:0c:3f:6e:bc:18:dd:aa:99:5e:95:83:70:94:bf:
ea:dc:b5:a3:67:c1:f3:aa:df:74:50:72:1e:89:e4:
e6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:42:5D:CA:8E:97:27:E8:2B:A1:60:04:3A:8B:DA:EF:16:76:8D:E3
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:59:6e:e8:10:71:41:2e:1d:b7:02:e9:7c:d4:cd:bc:c4:82:
b7:2e:86:b1:53:d9:56:ac:df:be:9a:e2:65:4b:99:e2:8f:05:
4c:6c:db:f7:59:24:17:7d:2d:55:b8:06:b5:76:eb:2b:45:64:
0b:72:3a:0a:ed:0b:b8:9b:9b:b8:89:f6:13:2e:f8:9e:5c:56:
30:e6:97:7c:01:80:55:30:18:53:e5:8f:28:1e:0c:e5:14:a2:
13:03:1f:e1:dc:7f:30:ff:57:bb:be:65:50:22:0c:fd:ba:0d:
18:20:41:91:04:14:1c:ab:be:b3:c7:05:58:10:66:02:3b:aa:
4d:96:0b:30:69:06:ed:75:11:d0:50:39:ca:aa:9c:00:42:03:
a8:de:07:e8:a8:85:e5:cc:15:bc:4f:a6:d2:bf:95:c3:bb:c6:
29:c9:e4:77:1b:9f:25:dc:8d:ab:94:35:a2:97:56:43:ca:f5:
ba:d6:fc:ba:c8:22:b5:c5:1d:10:3e:4b:df:28:2f:38:87:84:
e5:a9:fc:55:a0:ec:67:45:df:48:7c:6c:d3:bb:3f:50:52:fd:
77:c5:5c:18:ed:d4:e7:51:5d:2d:1a:84:71:b6:70:3e:05:8b:
0d:e7:44:f6:64:57:d7:38:d2:80:a5:6a:63:56:04:ee:78:ad:
fe:0a:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:30 2025 by rpki-client