Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: 3ISFOMvQKgFzXZl8y3o+uBD/zJVZH2RO5mu2Wa11sZk=
Subject key identifier: 12:C3:ED:C7:2C:91:AB:D7:4F:1F:9E:6E:9E:31:1D:F8:8C:56:3F:A0
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 0199FC8F75481E2F6884DC28729D9E884B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 06D5
Signing time: Sun 19 Oct 2025 13:01:24 +0000
Manifest this update: Sun 19 Oct 2025 13:01:24 +0000
Manifest next update: Mon 20 Oct 2025 13:01:24 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: aKujtEMScduNwNEwOEoFS1eTNpC0SGJ5zAvnb2aU0Cw=)
2: iM-HUbcoELfWgS-lPVnMpAjn2tU.roa (hash: FOA+HRQLHHEYU2ci+E8byaoG9+so0NlIhMx5zOmbRnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:75:48:1e:2f:68:84:dc:28:72:9d:9e:88:4b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Oct 19 13:01:24 2025 GMT
Not After : Oct 20 13:01:24 2025 GMT
Subject: CN=12c3edc72c91abd74f1f9e6e9e311df88c563fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:cb:8c:b3:52:a2:3c:a2:9b:1a:d9:7b:c9:
7f:0d:25:7e:c5:c5:f4:2f:b9:bf:2b:b0:5e:89:c7:
49:07:65:bf:23:33:5f:51:24:d7:d9:ee:32:ab:58:
5c:08:9e:da:9d:96:d6:4b:cc:a4:27:65:e3:f6:44:
14:d7:68:20:57:89:b4:d8:c8:cb:65:08:64:10:b6:
e6:b5:d5:75:b1:88:47:b9:25:86:17:59:52:d8:ea:
56:fe:d0:5a:8b:9f:dd:e6:dc:62:47:3e:2e:05:46:
43:1d:ef:be:77:c9:0b:31:7d:b0:66:45:4c:5a:94:
6e:00:7f:f4:73:e7:f6:cc:c9:56:bd:bf:a2:52:89:
91:94:73:68:03:b5:e0:f6:14:21:f7:fc:45:1a:ce:
09:fe:b2:78:36:de:b9:c2:be:a7:00:f8:da:4d:b2:
f7:f5:51:89:87:36:9c:a8:0b:b4:b5:39:e4:3c:ed:
46:a1:00:64:6a:3e:81:ec:fd:ae:c9:e7:4c:ce:77:
14:45:72:2a:2e:41:43:ed:96:42:70:2b:10:31:5f:
11:e2:e2:c3:d7:03:10:a3:55:a5:de:09:a6:70:d8:
39:1c:33:27:26:f8:db:77:db:e5:c5:b7:62:39:57:
dd:cf:54:17:cd:89:7a:18:9a:1b:c8:00:0e:4d:68:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C3:ED:C7:2C:91:AB:D7:4F:1F:9E:6E:9E:31:1D:F8:8C:56:3F:A0
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:84:32:71:7c:c4:a8:fd:12:22:1c:b5:d4:3b:69:04:1c:5b:
15:d3:25:1e:26:dd:86:94:e9:fe:51:95:38:76:f4:9b:f5:20:
72:16:00:88:52:60:e1:16:24:18:58:a9:ed:b7:08:3c:44:39:
10:99:4b:2a:e2:fc:6e:63:56:db:b8:74:fb:db:ad:c5:c9:4e:
5c:d9:38:98:2a:09:d0:89:0a:26:11:8d:b5:b6:7f:7c:20:f5:
74:ad:e9:7b:ad:af:62:d9:7a:a8:e2:72:22:ab:f9:f9:12:18:
48:e6:ec:c2:e6:c6:2b:7a:a6:b5:8c:54:17:8d:e4:f8:67:3e:
c0:54:55:7b:93:4d:8d:d8:36:db:ae:07:29:c6:79:af:ea:f2:
71:be:15:9c:78:d3:c1:6b:da:62:be:3f:02:32:be:22:54:72:
2e:0c:81:be:1d:04:99:9f:67:ad:64:f9:03:26:d6:ca:09:4e:
d3:83:fc:1c:09:1e:d3:92:94:e4:55:2a:bd:db:b1:25:bb:4c:
96:d8:46:8a:26:51:29:c8:c2:de:72:3d:a0:2f:bc:73:55:99:
f3:49:08:7a:da:30:80:89:6c:a7:32:d5:df:ba:de:1b:3e:26:
8c:a7:3e:5a:23:fe:87:b3:e8:3a:cb:06:64:a6:ef:4c:5c:4f:
65:0d:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:03 2025 by rpki-client