Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
File: 45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json)
Hash identifier: lk5M2tLOjvs2HJX831NK2srq9/xu23G+Ay2sYlomdIE=
Subject key identifier: AC:D7:49:0F:8D:AF:91:0A:8E:DC:76:26:35:53:B8:BC:F7:0B:4B:D4
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Certificate issuer: /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial: 0197B6A1927B2EB063CB3726FF5AFE1DDC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
Manifest number: 0156
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: 0UCZ2KdJQrSMgvLnyM3aHrB3im94km14R/kvdc3x4dg=)
2: vt4FgfPRrWl7Z_yLjoZZHEYX9X8.roa (hash: YsuZLkluKAbvOnVqbYvnKkP5bLLApSYx0tCzxSCaii4=)
3: zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa (hash: taGLV+d4sUR0Mcx4A09Hc66ht4Rh+KLaRG3MKoCgLM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:92:7b:2e:b0:63:cb:37:26:ff:5a:fe:1d:dc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=acd7490f8daf910a8edc76263553b8bcf70b4bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:4a:3c:47:42:eb:41:a2:b1:11:6a:f7:78:
8f:92:f9:f6:65:28:16:78:e0:eb:5a:85:fe:fd:8d:
98:4f:0e:57:48:ef:3c:a0:e7:23:9e:cc:78:c3:32:
62:d3:cf:57:df:67:41:3f:30:c0:c1:f8:12:d3:cd:
12:7b:66:f1:eb:e1:95:79:a8:a5:05:78:5e:12:7e:
75:7b:0c:0c:dc:58:ea:3e:25:2c:0b:10:74:01:a9:
08:f7:2e:a5:63:75:78:7c:c4:13:a4:b6:ab:81:28:
3e:ac:02:2a:5a:55:7c:13:3f:0b:04:df:62:90:4a:
74:91:a9:35:ee:67:2c:f2:08:62:58:94:68:08:d2:
93:61:7c:10:a4:ef:e7:d0:69:03:b5:da:e3:2e:19:
a6:21:2b:e1:c9:3b:6e:38:77:78:d6:eb:11:c1:b0:
eb:c0:50:4b:e7:b8:59:69:47:13:0b:c2:cb:f3:37:
b1:d4:ba:db:aa:db:f5:06:26:15:99:fd:64:fb:07:
e6:2a:1e:3d:ab:b1:f5:b6:eb:91:c5:f7:74:3f:bf:
22:65:8e:12:4e:08:d5:08:f0:0d:22:70:d6:0e:8b:
9f:2a:62:2a:16:c0:7a:82:51:df:24:7c:c1:3a:32:
38:f2:cc:ad:1c:65:a0:7e:e1:b7:b5:1d:e6:1a:08:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D7:49:0F:8D:AF:91:0A:8E:DC:76:26:35:53:B8:BC:F7:0B:4B:D4
X509v3 Authority Key Identifier:
keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:df:e6:81:e3:80:0b:27:41:8e:4d:6e:df:83:87:8f:d5:1d:
4a:fd:25:9d:e2:7e:08:54:1e:28:c1:fe:19:f7:43:de:81:66:
b3:5d:96:ca:cf:0c:f0:89:cb:44:5e:60:7a:30:46:f8:fa:db:
8e:3a:cb:83:18:72:2a:6d:50:1f:50:b8:48:d9:e0:39:4c:65:
0d:72:6c:60:fd:23:f6:b9:7f:84:e0:1a:a3:56:af:62:f5:66:
33:8e:63:2c:a0:ff:e1:55:fa:61:06:0b:43:59:c8:66:3d:cf:
49:b7:f3:a1:23:02:99:8f:9b:6c:b0:bd:41:0d:b2:7f:a0:9c:
ab:c4:88:11:e9:73:87:46:9f:6b:2a:dc:6d:c4:82:9d:81:3c:
7c:0a:83:e7:ae:0e:27:31:df:60:5c:a1:98:57:00:c1:9a:ba:
b0:31:77:91:81:da:54:09:98:15:bc:da:d7:e9:f8:e4:8c:9b:
57:86:e1:43:97:04:78:d7:5c:d2:3a:07:9c:1b:0e:7a:96:a8:
ad:77:0d:3c:23:01:09:16:c7:8a:36:39:0c:d9:90:40:51:b7:
62:0f:40:8e:b5:6b:3d:c4:13:0b:c6:27:2f:36:6c:f8:fc:0d:
b4:04:31:fa:31:f0:2b:30:7b:d6:14:fb:05:4c:04:f8:3c:23:
54:5e:e8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:59 2025 by rpki-client