Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
File: Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft (raw, json)
Hash identifier: c6++u1j181hrTO6g3yog/Yp/Rpu3Fp5WC4Hupo/mFs4=
Subject key identifier: A9:3E:CE:7D:6B:40:51:CF:14:C2:4A:A1:6A:E5:9B:14:D9:D8:31:29
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Certificate issuer: /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial: 0198D583EF9CD6F82791465C64FB5C9E84F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
Manifest number: 0565
Signing time: Sat 23 Aug 2025 06:00:50 +0000
Manifest this update: Sat 23 Aug 2025 06:00:50 +0000
Manifest next update: Sun 24 Aug 2025 06:00:50 +0000
Files and hashes: 1: 2YO9OCUj-5UMjSkLus1_jFZEY5Y.roa (hash: 3SGs0MVjTdEO4OSsTOD1CnMaU0p7/avF9ZQ4altFHsA=)
2: 5Gb6hc8c6e_T0jp-7tOhv1aSnbs.roa (hash: GMcY+Vcxtv+yuahYv7nXQxaJEt+vN0M89l4WY2L+IN0=)
3: Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl (hash: zZ0pz2uw+ptPcDfjIFmbSlIRQrHtN/uvrY4LAQAvUKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ef:9c:d6:f8:27:91:46:5c:64:fb:5c:9e:84:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Validity
Not Before: Aug 23 06:00:50 2025 GMT
Not After : Aug 24 06:00:50 2025 GMT
Subject: CN=a93ece7d6b4051cf14c24aa16ae59b14d9d83129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:96:57:e4:d7:64:87:60:bb:1e:c2:63:2d:
53:a2:0b:91:30:e7:9c:06:df:a9:9c:51:74:5f:af:
4b:5b:d4:69:48:79:52:c1:0d:09:01:ad:5d:20:5b:
b9:6e:59:1b:84:5e:b7:08:e3:a8:c3:03:d3:33:b5:
1e:be:89:e4:a9:1b:c8:91:d6:20:08:cc:b6:3e:fd:
f9:02:74:cb:33:4a:7b:de:fd:72:1c:51:e0:25:71:
d3:44:01:4d:be:14:e7:e4:3a:f9:37:48:08:af:43:
ee:a8:47:e0:34:12:7b:26:8f:54:0d:ee:16:82:6b:
b1:29:ae:ea:79:ab:f0:d4:30:80:d0:76:a3:5d:d2:
a8:d6:71:d5:87:15:12:19:44:92:1e:21:a2:29:85:
7c:e5:3f:c7:e5:2e:ab:db:a5:79:b6:3e:10:82:e0:
57:0d:02:58:74:1d:6e:4a:ba:da:fc:a9:72:75:6a:
28:4b:3f:65:7c:3b:5b:4a:c4:2c:ba:10:dc:4f:57:
8e:c4:7c:45:78:70:8d:d9:3d:1d:9f:04:1d:85:7a:
eb:75:d9:a2:40:7b:de:b8:ad:ed:04:91:87:96:50:
ca:07:a6:1d:40:e7:ed:ee:11:16:f5:a5:8c:62:8b:
64:45:ea:37:c8:d5:15:35:c6:6a:2b:a6:c5:3e:b6:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:CE:7D:6B:40:51:CF:14:C2:4A:A1:6A:E5:9B:14:D9:D8:31:29
X509v3 Authority Key Identifier:
keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:15:82:29:30:0f:af:4e:bd:2e:3b:9e:33:3f:2a:74:74:f2:
b2:35:97:b4:58:e9:52:40:91:ed:de:5d:2a:12:3c:07:3e:34:
b1:c2:01:7a:1c:25:cd:fe:17:a4:07:d2:f9:de:bb:27:d6:79:
5f:5f:96:b1:c1:f4:40:5a:cb:ae:72:63:f4:aa:6c:4f:9a:78:
69:52:0e:76:ce:95:ce:9d:08:eb:1e:f9:b5:16:60:55:7e:a6:
fb:68:d8:85:65:a9:a4:13:b9:fe:e2:6e:41:16:19:1f:9c:f5:
5c:c6:5d:2e:e2:94:59:ef:e5:b1:63:f9:bb:b1:ee:50:94:18:
cc:3a:77:63:0e:2e:e0:26:c2:f9:47:e9:24:a0:0c:d8:9b:2a:
14:8f:86:3b:d5:2e:35:d2:c3:f5:12:b7:a8:69:95:e0:52:85:
11:8a:41:f3:52:48:f4:93:1f:95:4d:6b:7f:30:aa:27:06:02:
d3:89:94:69:66:5c:b6:7c:d6:2e:ed:d8:52:e9:84:03:bd:2b:
51:8c:8b:13:23:0a:5d:85:61:15:d2:e5:db:9c:9c:01:75:43:
de:81:b7:53:c3:42:52:c3:38:1c:1d:e9:0e:82:7a:49:0a:b1:
c0:b7:20:b4:2d:97:7c:14:cf:89:25:35:eb:56:b0:c7:24:ae:
0a:6c:70:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:55 2025 by rpki-client