Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
File: 45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json)
Hash identifier: GA02OPrpc15ZMo/CzUoSjNAHRYucVxIXsa4cOIjyZ2E=
Subject key identifier: 9E:6F:4B:61:29:E7:96:64:D0:2F:FF:D2:65:05:95:32:5C:7B:F4:BD
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Certificate issuer: /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial: 0199FBEB2445DAF211293A3C9073FFE2DE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
Manifest number: 0283
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: zW97NQMGYgYLKW2VR1zHr3SlonAJZ97psWAQCi8hDyc=)
2: vt4FgfPRrWl7Z_yLjoZZHEYX9X8.roa (hash: YsuZLkluKAbvOnVqbYvnKkP5bLLApSYx0tCzxSCaii4=)
3: zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa (hash: taGLV+d4sUR0Mcx4A09Hc66ht4Rh+KLaRG3MKoCgLM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:24:45:da:f2:11:29:3a:3c:90:73:ff:e2:de:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=9e6f4b6129e79664d02fffd2650595325c7bf4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a2:68:f9:6d:70:fe:7c:75:94:1a:05:2e:9e:
dd:99:e1:e7:d6:eb:ee:80:44:6a:f1:1e:8d:68:4a:
33:72:b0:55:6b:a6:fe:58:04:5f:b0:9c:7b:0a:d2:
e1:9f:a4:f5:39:18:65:88:69:25:a5:0d:3b:33:22:
16:d2:eb:21:a6:06:eb:5d:39:7b:dd:40:43:03:08:
1b:bf:51:cb:ac:be:1a:8e:15:4e:dd:9e:09:d4:2c:
5d:ff:2b:44:21:20:35:99:ed:90:a5:01:d7:bb:f9:
ab:15:5e:1c:2e:3f:59:fa:ab:05:0c:a4:24:7c:8a:
91:53:a4:7e:ef:bc:77:27:a1:ad:bc:ce:8a:3c:02:
fb:de:3e:0c:40:e4:2d:b5:99:4d:80:81:50:ec:26:
05:70:b6:c4:fa:77:ab:f7:07:8b:d4:4e:1e:67:f4:
25:05:42:a9:33:ef:74:86:9c:76:97:25:f7:9c:c0:
32:b7:a3:a5:44:01:23:69:dd:ec:ab:35:f5:9e:f5:
2c:e4:7d:ba:72:0c:45:8b:47:87:fa:00:a7:bb:7e:
56:27:6f:6a:0c:5b:8d:3f:30:1a:81:39:46:7e:80:
bf:ec:54:3d:26:81:f1:9c:da:d3:30:ec:97:96:dc:
2c:f8:96:7c:45:f7:0e:96:72:7d:32:0a:aa:74:25:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6F:4B:61:29:E7:96:64:D0:2F:FF:D2:65:05:95:32:5C:7B:F4:BD
X509v3 Authority Key Identifier:
keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:66:7e:1c:de:df:b4:1f:5f:57:b0:fa:b9:ab:97:29:3e:14:
ee:42:dc:df:86:87:ca:22:c9:6c:2e:2f:46:16:62:bf:8b:36:
0b:7d:b6:a0:ae:6c:a1:9c:d8:4b:d3:63:59:b1:e1:f1:68:a1:
db:c0:a0:b4:84:12:79:5d:0c:32:5d:ae:d1:4a:81:86:6f:5f:
e6:95:94:b9:2b:d2:50:b1:f9:c1:31:1e:5b:7a:71:91:5f:0c:
68:a3:27:40:c3:83:be:ac:11:33:b5:f1:3b:99:72:82:c7:84:
9f:df:ea:66:34:47:d4:fa:a5:9b:5b:17:50:65:d2:df:0e:ea:
f0:7f:40:52:f8:78:93:77:97:39:72:1d:c0:4b:42:f7:17:8f:
c3:01:ee:7f:20:20:bc:91:9d:35:40:fe:db:de:04:21:4f:24:
21:28:76:fd:31:43:a6:43:5d:00:6f:e0:cb:c1:59:ed:bb:7e:
e5:98:de:f8:b4:98:b6:91:68:a1:6f:21:c2:09:de:f6:5f:90:
99:78:cc:5a:5b:51:15:ac:59:fe:ca:2a:42:df:bd:22:89:65:
8c:56:3c:62:83:8f:89:1f:d9:5a:3d:06:18:3c:6b:5d:76:cb:
f6:03:2f:14:15:09:70:1d:af:71:13:b4:4d:ee:90:2f:17:2a:
1c:00:3f:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yRF2vIRKTo8kHP/4t6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOTU1NzI1MDU0M2U0NDc2YWY4OGM0NjEyZDRhODk1MzEz
MTNiNTcwHhcNMjUxMDE5MTAwMTU1WhcNMjUxMDIwMTAwMTU1WjAzMTEwLwYDVQQD
Eyg5ZTZmNGI2MTI5ZTc5NjY0ZDAyZmZmZDI2NTA1OTUzMjVjN2JmNGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aJo+W1w/nx1lBoFLp7dmeHn1uvu
gERq8R6NaEozcrBVa6b+WARfsJx7CtLhn6T1ORhliGklpQ07MyIW0ushpgbrXTl7
3UBDAwgbv1HLrL4ajhVO3Z4J1Cxd/ytEISA1me2QpQHXu/mrFV4cLj9Z+qsFDKQk
fIqRU6R+77x3J6GtvM6KPAL73j4MQOQttZlNgIFQ7CYFcLbE+ner9weL1E4eZ/Ql
BUKpM+90hpx2lyX3nMAyt6OlRAEjad3sqzX1nvUs5H26cgxFi0eH+gCnu35WJ29q
DFuNPzAagTlGfoC/7FQ9JoHxnNrTMOyXltws+JZ8RfcOlnJ9MgqqdCVQcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5vS2Ep55Zk0C//0mUFlTJce/S9MB8GA1UdIwQY
MBaAFOOVVyUFQ+RHaviMRhLUqJUxMTtXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUt
MjA2OTUxOTNhYzA3LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUtMjA2OTUxOTNhYzA3
LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmZ+HN7f
tB9fV7D6uauXKT4U7kLc34aHyiLJbC4vRhZiv4s2C322oK5soZzYS9NjWbHh8Wih
28CgtIQSeV0MMl2u0UqBhm9f5pWUuSvSULH5wTEeW3pxkV8MaKMnQMODvqwRM7Xx
O5lygseEn9/qZjRH1Pqlm1sXUGXS3w7q8H9AUvh4k3eXOXIdwEtC9xePwwHufyAg
vJGdNUD+294EIU8kISh2/TFDpkNdAG/gy8FZ7bt+5Zje+LSYtpFooW8hwgne9l+Q
mXjMWltRFaxZ/soqQt+9IolljFY8YoOPiR/ZWj0GGDxrXXbL9gMvFBUJcB2vcRO0
Te6QLxcqHAA/ow==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:24 2025 by rpki-client