Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: 7TYHen39Uz6BHCshGtKB54HKMqU1UfjhKXv+lW7Ls78=
Subject key identifier: 10:B6:DA:90:D5:D6:C8:52:95:8C:57:98:F9:2C:7C:80:23:18:4F:1A
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 0198D70585D4D5997673D849C0A37563A565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 063D
Signing time: Sat 23 Aug 2025 13:01:59 +0000
Manifest this update: Sat 23 Aug 2025 13:01:59 +0000
Manifest next update: Sun 24 Aug 2025 13:01:59 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: hEuKr3l4pEzJZSkrneEoNKQYU9khk8DSYcSAxt8YKVU=)
2: iM-HUbcoELfWgS-lPVnMpAjn2tU.roa (hash: FOA+HRQLHHEYU2ci+E8byaoG9+so0NlIhMx5zOmbRnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:85:d4:d5:99:76:73:d8:49:c0:a3:75:63:a5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Aug 23 13:01:59 2025 GMT
Not After : Aug 24 13:01:59 2025 GMT
Subject: CN=10b6da90d5d6c852958c5798f92c7c8023184f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:9e:57:af:8a:3c:5b:5e:54:c4:d5:6b:4c:
6b:e0:ca:fb:58:10:51:82:4b:b1:52:a2:ea:5e:a0:
76:b4:bd:4b:08:bd:35:44:cc:94:cb:4e:c7:6a:ce:
93:6b:43:17:2e:18:ab:e8:5c:ef:5e:2e:3f:29:75:
73:d0:97:ed:46:03:90:16:fd:c5:ed:cf:9f:9b:57:
5d:36:37:50:13:52:46:4c:ab:1d:67:d8:04:f2:4f:
75:b2:64:78:6f:d2:7f:8b:dd:c0:5b:05:9f:8c:4f:
9d:29:bf:70:23:97:b5:8f:6e:15:05:72:c3:7c:1d:
ba:cf:e1:6d:02:05:ab:b6:46:ef:7c:ab:9e:48:e8:
f2:3f:29:09:d4:73:1b:d8:b3:d1:87:87:4d:56:5a:
0f:0a:8d:d4:9f:9d:c4:21:bc:b7:67:72:aa:9c:f4:
f9:cc:2a:3a:26:34:05:cf:2a:d3:cf:1e:69:f9:c1:
83:0c:e0:c5:1a:d4:37:01:00:36:ad:6f:de:35:67:
cb:11:d0:ae:52:d9:16:0e:3a:6a:48:63:00:03:1b:
4f:7d:25:b3:71:92:cc:b9:e9:9e:a5:7c:9b:5d:4e:
0f:1f:f6:fa:0a:aa:1a:9b:4c:84:5a:cb:d4:4b:29:
03:59:11:f4:63:f2:02:1b:cb:5e:3f:a0:19:c9:ef:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B6:DA:90:D5:D6:C8:52:95:8C:57:98:F9:2C:7C:80:23:18:4F:1A
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:74:d1:1e:ba:d3:1b:ea:8e:3d:57:3a:2e:08:c5:da:77:49:
36:e6:ce:e6:57:1e:dc:2b:aa:e3:e1:63:ca:6b:6d:57:f3:7a:
a5:72:16:28:33:62:f2:42:8f:c9:23:44:c0:92:ac:69:14:53:
bd:9c:af:a4:8f:66:71:22:9c:3f:4a:2a:8f:75:38:3c:b4:f8:
d1:87:c6:63:4e:7b:c7:13:dd:68:2a:e2:d7:ab:89:09:b9:7c:
e2:ea:94:32:45:03:25:e1:69:98:0a:cd:73:28:77:23:f7:92:
cc:22:bf:46:8c:f0:5b:f4:c3:30:9a:8c:a4:eb:a0:07:2b:b0:
c8:83:4a:00:6d:23:cf:76:d7:1a:6c:83:3f:cd:3e:85:ae:ee:
6e:fd:5c:51:98:0f:13:bb:07:32:71:c2:31:a2:8a:b1:b8:14:
3e:28:f1:7c:35:e9:b9:b9:6e:58:69:ab:6d:ae:ed:66:d3:b1:
09:84:2d:52:44:c0:09:66:1e:1d:d2:a0:ba:3b:92:68:1d:e8:
ab:a5:de:2d:cd:46:54:b1:78:81:f0:93:a8:8d:ff:16:c1:93:
0c:ce:3f:38:e3:bd:ce:c7:9e:74:99:70:e6:c3:b9:78:a6:d0:
fa:fd:bc:1b:18:9f:01:06:18:9a:e9:a0:ab:5c:b3:eb:50:37:
0b:ec:91:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:41 2025 by rpki-client