Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: 7WeA4X1u2+TdPpOWyvzRMBl6dnNgSKwo46u0YkZc34c=
Subject key identifier: 73:F4:05:C8:2B:85:66:3B:44:78:F8:12:56:E1:EF:4A:58:4F:F3:DF
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 0198733D1F8B73FEB05154CA518A14105053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 04:00:42 +0000
Manifest this update: Mon 04 Aug 2025 04:00:42 +0000
Manifest next update: Tue 05 Aug 2025 04:00:42 +0000
Files and hashes: 1: Da5ukIODRFZkZgl7acW52LzBL34.roa (hash: 2S0h0c/tsGIJ57Pr+A8pwZxQY2/WXek+xC9ZKTvhbzU=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: Ga1Bx3xEESTnNucbdeDYwPQCg6Vu5Ejci6QXMgTQkZQ=)
3: Z45rQavEcQTf3vGUVM_AgWAXCn4.roa (hash: q7JvLSO411WbeIPtlyaZvnsbtnUZIYteyAyCawxKvzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:1f:8b:73:fe:b0:51:54:ca:51:8a:14:10:50:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Aug 4 04:00:42 2025 GMT
Not After : Aug 5 04:00:42 2025 GMT
Subject: CN=73f405c82b85663b4478f81256e1ef4a584ff3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:26:9c:57:19:a3:d6:60:c1:1c:b8:cb:54:
8a:99:02:f9:b6:75:7c:97:01:85:28:96:5d:64:e4:
16:1d:67:94:5e:57:df:30:5e:1c:e8:3f:9b:9b:07:
e5:47:35:01:87:bb:b1:5c:17:6f:fe:3a:36:5f:c7:
83:27:2f:85:04:46:f2:4b:49:da:b0:94:f3:67:d3:
c9:56:a7:c2:e5:be:bd:10:64:7a:54:15:94:f8:ea:
f1:6f:e1:f0:28:46:2b:f8:6c:dd:dc:da:43:a0:ca:
98:35:1e:c1:20:c5:12:07:53:02:3f:b9:27:ac:79:
e6:33:67:c7:ec:f7:48:73:60:b0:1d:87:a6:8a:b2:
5b:2c:85:12:ed:22:40:de:6b:19:b6:69:48:b5:4d:
59:81:df:07:ad:c3:09:95:19:25:ce:4b:a2:7d:76:
67:50:c3:3a:e0:42:5c:81:e2:1c:02:67:49:a8:11:
fd:7e:4f:5e:7f:04:05:7e:72:bf:e3:c0:c2:35:e2:
f4:78:90:df:cd:5b:c4:c6:1a:e9:85:d6:4b:f8:23:
0c:a5:e1:66:63:09:7e:bd:0d:51:ef:15:26:eb:09:
0b:87:22:0c:4c:fd:87:94:d6:c7:b6:cf:32:5f:9f:
5f:49:5a:0c:6d:eb:d1:0d:f5:07:e4:bc:98:e6:9c:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F4:05:C8:2B:85:66:3B:44:78:F8:12:56:E1:EF:4A:58:4F:F3:DF
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:46:0d:49:67:f1:e0:a8:5a:d5:3c:6b:9c:f9:ad:29:17:c6:
6e:bb:22:24:a0:ab:e2:f6:00:f9:4f:8b:25:68:b6:4d:82:fc:
20:d9:90:b5:47:c9:e2:66:45:a7:3d:28:45:ce:be:7b:cc:f0:
6e:74:64:c7:a5:8f:45:4a:0d:1c:b5:ce:90:4c:a9:77:a6:94:
d8:b9:d0:25:99:ef:2f:b0:49:20:f7:c1:26:d2:06:77:dc:a7:
a7:3c:dc:5c:85:3a:c8:e8:75:0d:4f:8c:d1:4e:b1:58:55:f9:
05:da:0f:28:bb:66:ac:cd:60:53:ff:00:a9:e3:56:f9:15:88:
0f:03:6b:10:85:7b:6e:9d:c1:ef:ef:d1:b2:b1:06:dc:8a:53:
d2:01:00:a0:cc:f2:9f:13:a7:1f:03:43:1c:d5:d7:ad:9e:fc:
66:a9:dd:48:19:ef:88:e5:cd:02:ee:6d:f3:41:7b:01:1b:e1:
79:44:5a:61:91:fa:a7:b0:50:22:3a:2b:78:42:8f:3a:2e:23:
57:ea:79:c9:4a:96:15:e0:25:b6:0f:03:f2:a3:fc:c7:6e:e8:
ef:9d:b9:b1:de:9f:98:cd:9e:4d:d9:32:7b:2f:18:27:1d:0b:
6d:47:01:83:81:75:da:57:cb:59:33:d8:ea:8c:86:3b:8a:59:
14:de:e7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:31 2025 by rpki-client