Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File: 45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier: Akd8QXUxfqniF0Wxuz3NO+seZ4HdmDRlrk0VgpsFg9o=
Subject key identifier: 32:6B:4A:B1:13:10:30:E3:B4:A5:F5:3B:C6:86:29:99:CC:E1:4C:35
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer: /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial: 0198D4E07CA43EFFC053A5B25BD31CF4628A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:18 +0000
Manifest this update: Sat 23 Aug 2025 03:02:18 +0000
Manifest next update: Sun 24 Aug 2025 03:02:18 +0000
Files and hashes: 1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: OD2teUjGfBafPzeuovHMi/F57uKom5Z7SpaCLiSmTo0=)
2: R7JL9FH-2QrwFM5epJeXae1YV-E.roa (hash: Z+kLiV+Tl4XxDqngd/q42hXqK5SlkiW5r2j2WXBsESY=)
3: iDFuGk6oYIqLw3GPihSSyyo3kF8.roa (hash: cwnT8XNunIwbvLFN3GthMjNOhsdwtyQiIir5eoCVPD0=)
4: o9F14TmJz-3o4btxFTmUNxIaMVQ.roa (hash: htBHVS9bsjwqqv6NPJnNf70ZDfm1OC4b9PUSs5jzuTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7c:a4:3e:ff:c0:53:a5:b2:5b:d3:1c:f4:62:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Validity
Not Before: Aug 23 03:02:18 2025 GMT
Not After : Aug 24 03:02:18 2025 GMT
Subject: CN=326b4ab1131030e3b4a5f53bc6862999cce14c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:5e:d1:d6:42:20:86:19:9f:be:3f:6b:6c:
51:bf:68:71:fa:c0:14:e6:1f:84:3a:a4:a7:e3:3b:
f9:31:30:cc:43:72:c2:45:6e:9c:cc:c7:99:fd:b0:
b6:52:66:48:cc:e9:3f:b5:16:f2:45:7f:fe:69:a8:
b0:88:d7:8d:3c:b1:5c:05:9e:40:16:a1:00:65:12:
81:5d:75:38:7d:49:d5:08:7b:88:1a:36:1f:3a:93:
95:4d:c8:73:e8:91:ec:f1:84:43:f5:2a:c8:1c:a1:
42:f8:57:37:5a:95:c6:5b:f4:82:bf:0c:53:03:78:
48:16:06:5f:14:de:c4:5b:32:25:e7:ac:1f:a9:c4:
b3:13:48:2e:91:cb:d4:fe:fa:22:d8:59:9d:56:63:
3f:07:a6:b6:e0:53:25:99:bb:08:98:ca:c5:8d:35:
b6:85:16:7b:dc:25:3a:e6:67:4b:a5:56:fb:ee:01:
20:7a:cc:63:37:3a:77:8a:aa:94:96:05:0b:2f:22:
42:9f:5c:e9:e2:be:c8:c5:e4:69:2f:65:97:8d:ed:
f0:f2:23:8b:ca:dc:ea:bb:cd:b1:81:99:51:4c:aa:
1b:41:da:5e:30:52:1d:2d:2c:2a:f9:11:a5:51:4f:
5e:eb:ee:e1:cb:c0:83:aa:60:72:a0:b9:eb:e6:23:
0b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6B:4A:B1:13:10:30:E3:B4:A5:F5:3B:C6:86:29:99:CC:E1:4C:35
X509v3 Authority Key Identifier:
keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6b:5e:20:3c:af:ab:60:11:d4:fb:21:d2:76:3c:b9:83:af:
9c:91:9c:58:9b:63:b5:c3:6f:85:b8:74:bf:f6:03:a0:53:84:
96:22:f6:9a:b0:39:2f:f1:fe:3d:c8:dd:66:e2:47:16:9f:49:
96:01:2f:46:df:15:4f:ff:93:df:91:5a:04:e7:e2:0d:4d:69:
d7:a5:f1:44:94:a6:98:e3:b2:18:c6:30:4b:85:da:f7:8a:65:
14:c4:8a:96:aa:df:a2:95:c8:8f:7f:d4:f8:dd:40:0e:26:6d:
7c:7d:27:49:21:0e:f0:c2:39:c4:ad:31:01:34:fd:58:ce:dd:
49:95:9c:54:4c:b7:ef:69:c6:bc:14:91:5a:8f:b6:38:f1:b6:
87:ea:4b:13:dc:f6:5a:8e:c7:26:be:55:7a:50:4c:33:3a:d9:
e2:b4:89:0a:76:73:9e:4f:94:6f:b3:b8:ee:af:60:8b:b5:59:
d7:d7:f3:bb:39:50:cf:83:75:33:1a:e5:ea:3e:0d:30:33:4d:
ed:a7:cd:4e:3b:c5:6b:16:3c:7d:a8:80:48:0c:3a:d3:a3:4b:
77:74:17:56:1a:cb:eb:7a:b3:0c:77:05:58:15:0a:08:87:ef:
38:d1:0e:02:d2:b3:38:ec:2a:82:70:d2:37:22:d5:8f:c7:8c:
d0:33:25:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4HykPv/AU6WyW9Mc9GKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOTBmMmVlMGE3MGJjYWVmZTAxOTVhM2Q4YjM3N2QzNDI5
N2E5NDMwHhcNMjUwODIzMDMwMjE4WhcNMjUwODI0MDMwMjE4WjAzMTEwLwYDVQQD
EygzMjZiNGFiMTEzMTAzMGUzYjRhNWY1M2JjNjg2Mjk5OWNjZTE0YzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR1e0dZCIIYZn74/a2xRv2hx+sAU
5h+EOqSn4zv5MTDMQ3LCRW6czMeZ/bC2UmZIzOk/tRbyRX/+aaiwiNeNPLFcBZ5A
FqEAZRKBXXU4fUnVCHuIGjYfOpOVTchz6JHs8YRD9SrIHKFC+Fc3WpXGW/SCvwxT
A3hIFgZfFN7EWzIl56wfqcSzE0gukcvU/voi2FmdVmM/B6a24FMlmbsImMrFjTW2
hRZ73CU65mdLpVb77gEgesxjNzp3iqqUlgULLyJCn1zp4r7IxeRpL2WXje3w8iOL
ytzqu82xgZlRTKobQdpeMFIdLSwq+RGlUU9e6+7hy8CDqmByoLnr5iML/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJrSrETEDDjtKX1O8aGKZnM4Uw1MB8GA1UdIwQY
MBaAFOOQ8u4KcLyu/gGVo9izd9NCl6lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDVEeTdncHd2SzctQVpXajJMTjMwMEtYcVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9hNjA0Y2YtMTk0Ny00YjEyLTlhNmIt
M2ViOTEzNGVjNzlkLzEvNDVEeTdncHd2SzctQVpXajJMTjMwMEtYcVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9hNjA0Y2YtMTk0Ny00YjEyLTlhNmItM2ViOTEzNGVjNzlk
LzEvNDVEeTdncHd2SzctQVpXajJMTjMwMEtYcVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2teIDyv
q2AR1Psh0nY8uYOvnJGcWJtjtcNvhbh0v/YDoFOEliL2mrA5L/H+PcjdZuJHFp9J
lgEvRt8VT/+T35FaBOfiDU1p16XxRJSmmOOyGMYwS4Xa94plFMSKlqrfopXIj3/U
+N1ADiZtfH0nSSEO8MI5xK0xATT9WM7dSZWcVEy372nGvBSRWo+2OPG2h+pLE9z2
Wo7HJr5VelBMMzrZ4rSJCnZznk+Ub7O47q9gi7VZ19fzuzlQz4N1Mxrl6j4NMDNN
7afNTjvFaxY8faiASAw606NLd3QXVhrL63qzDHcFWBUKCIfvONEOAtKzOOwqgnDS
NyLVj8eM0DMlfg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:55 2025 by rpki-client