Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier: tgTtLgHhqYvOfld92WOSSzWmxvyEYUhZQMAWtm4C2fo=
Subject key identifier: 89:E3:D1:B2:D9:D5:CF:70:3E:F0:77:82:6D:82:6A:EA:51:EC:F4:53
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer: /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial: 0199FF229593B73C8CDFB919E9894FDA4CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number: 01EE
Signing time: Mon 20 Oct 2025 01:01:20 +0000
Manifest this update: Mon 20 Oct 2025 01:01:20 +0000
Manifest next update: Tue 21 Oct 2025 01:01:20 +0000
Files and hashes: 1: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: 9ZuFR8x0uEE9rBnqMDIBZjUL6yW+C38RciEiYzbte4s=)
2: UFEpRGmmgSxI-Cj4mUoULnogLh0.roa (hash: uynyMnukvUhaVDa9YBwkcCoinwLXAu+vAC1b07ExVN4=)
3: mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa (hash: UEuZfid3mOqO0N/4zAUnn5LYhUgHF25ZTPMwLRC0oAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:95:93:b7:3c:8c:df:b9:19:e9:89:4f:da:4c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Validity
Not Before: Oct 20 01:01:20 2025 GMT
Not After : Oct 21 01:01:20 2025 GMT
Subject: CN=89e3d1b2d9d5cf703ef077826d826aea51ecf453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:ab:fd:02:bf:12:7d:a6:dc:e4:61:01:6f:
bb:f1:9f:0c:de:f2:67:6c:a7:ec:8c:43:b4:b6:f5:
4e:28:43:2a:c0:0c:15:30:67:df:8f:66:33:6b:3e:
d8:ce:e4:95:0e:9d:d2:6f:a7:1e:6e:48:e9:c9:7b:
1c:5b:e2:47:26:d7:46:87:cb:73:c7:75:ed:b6:ea:
ea:d5:c6:92:ec:30:4c:29:38:2d:cd:33:a2:53:f5:
bc:1e:8a:0d:a4:56:5f:ed:eb:7f:a9:0a:1f:e7:62:
5e:1c:f3:42:ad:8c:e7:ba:c0:02:63:d2:b2:05:3d:
42:f4:93:d6:1f:30:26:db:34:6f:de:8c:17:ce:c4:
22:10:13:5f:74:55:ce:dd:06:6c:86:71:72:f6:d6:
96:4f:ef:2b:8d:fd:5d:49:a2:f8:b2:fb:0f:32:dc:
76:02:82:db:72:5e:f7:c6:3f:21:24:1a:f8:7d:00:
50:b5:69:9a:11:95:27:37:1d:e6:30:74:44:25:e3:
dc:87:b4:78:73:be:df:0f:31:02:18:06:77:11:61:
6f:6e:2e:70:10:7e:c1:ab:0f:57:15:40:e5:d6:8c:
79:a7:28:41:bb:a2:72:6f:45:d6:0e:8b:b8:a6:70:
88:4a:01:31:73:02:e9:b2:ff:d8:5b:2a:c6:64:ef:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E3:D1:B2:D9:D5:CF:70:3E:F0:77:82:6D:82:6A:EA:51:EC:F4:53
X509v3 Authority Key Identifier:
keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:35:38:82:92:3f:5e:c9:3a:70:b1:b5:78:5d:dc:01:24:ba:
e8:96:6f:65:d9:45:24:0b:c9:0a:07:4a:66:c4:de:97:ad:94:
06:8b:cf:2d:e7:21:07:8e:67:87:fd:f7:f2:90:40:7e:18:6b:
6e:2d:c7:71:c2:e7:c0:e0:61:f1:ae:80:4f:8e:b9:fb:41:3f:
62:b2:d9:71:3c:42:2d:e2:43:23:9f:72:7c:84:09:86:d9:d9:
97:ad:c1:50:8e:21:4d:70:6b:8f:f0:9f:e6:27:06:76:7f:4e:
fa:c9:e0:2d:a6:5f:c9:ed:b9:55:69:43:b2:aa:52:0d:e2:06:
df:d9:a2:a0:1c:bd:16:b3:4a:d2:0f:b2:02:19:c0:ef:4a:e9:
65:8e:1e:32:82:9c:35:c8:c4:47:8a:3b:23:e1:f2:bf:2b:78:
c6:79:b1:3a:82:82:cb:f5:e6:ab:70:42:78:97:a0:be:92:c3:
5c:85:92:56:41:b1:27:3e:15:a5:2d:3f:27:cc:39:d2:3e:b5:
ec:7d:09:44:e8:fb:74:52:bb:92:8d:14:1e:21:19:11:41:92:
b7:41:86:a3:fd:7b:c5:e9:0a:fe:81:a9:1b:e6:a1:ba:6f:76:
45:49:ef:8f:b4:6c:57:5e:d7:9a:9c:9b:25:6a:a9:c0:4d:ba:
43:5a:84:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:36 2025 by rpki-client