Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: HG33PwrCftjk2nXlgGCOsygxxWDqm2qR/73MId5s1C0=
Subject key identifier: 97:51:37:5A:35:40:45:27:87:3F:0D:83:71:47:1F:C3:31:E6:3C:AD
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 01976E870263E451210040A7C461D1D38701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 13:00:30 +0000
Manifest this update: Sat 14 Jun 2025 13:00:30 +0000
Manifest next update: Sun 15 Jun 2025 13:00:30 +0000
Files and hashes: 1: Da5ukIODRFZkZgl7acW52LzBL34.roa (hash: 2S0h0c/tsGIJ57Pr+A8pwZxQY2/WXek+xC9ZKTvhbzU=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: Yg3xW1w6iv7BwIUGYLKidiFfEKK7KT860Rc3RoLdxqg=)
3: Z45rQavEcQTf3vGUVM_AgWAXCn4.roa (hash: q7JvLSO411WbeIPtlyaZvnsbtnUZIYteyAyCawxKvzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:02:63:e4:51:21:00:40:a7:c4:61:d1:d3:87:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Jun 14 13:00:30 2025 GMT
Not After : Jun 15 13:00:30 2025 GMT
Subject: CN=9751375a35404527873f0d8371471fc331e63cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:03:de:b5:73:ff:d0:9d:fb:e2:10:5f:24:
ba:dd:61:92:47:5d:3b:9b:85:23:5f:a6:eb:c2:6f:
42:00:0e:ca:01:d3:47:36:88:d0:b2:bc:5f:b3:ff:
c9:51:3a:d0:bf:70:e2:3e:2a:b2:48:12:07:80:3e:
f4:c4:b3:7f:55:fe:9a:99:f9:df:ac:2e:35:74:40:
4e:ab:18:52:c6:13:2d:89:15:26:c8:40:48:e3:6f:
fb:21:1c:52:c5:47:a0:5c:ed:ed:d6:73:4f:6e:76:
e6:bc:76:fc:af:6a:dc:47:1d:05:f3:a2:74:a8:03:
71:50:0f:18:15:c0:0e:6f:af:2c:95:63:8e:ee:d3:
05:8f:c2:29:97:d1:fb:69:3d:2a:49:11:47:58:32:
26:77:33:3f:0b:3f:76:bd:e3:fd:57:3d:97:df:be:
f1:27:0c:58:25:c5:0f:ea:d1:63:a0:34:6a:58:b2:
fc:b4:22:20:09:0c:cb:ec:6d:5e:a4:db:20:ec:18:
9a:3c:87:5b:6c:17:a2:a3:57:11:9f:59:d5:38:31:
f4:0c:9b:10:b5:0b:33:bf:ea:79:18:fa:d4:06:32:
17:34:b6:f5:12:1e:06:ed:f6:9d:37:a3:07:f6:70:
8f:f0:ed:b2:55:8b:b0:44:e6:dc:8d:48:f3:b9:24:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:51:37:5A:35:40:45:27:87:3F:0D:83:71:47:1F:C3:31:E6:3C:AD
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bc:a1:ad:d7:f1:5d:89:89:fd:0d:f1:ad:1d:bc:31:4c:e2:
ce:5d:27:32:0b:fc:9d:11:d7:81:68:0e:62:81:cc:8a:66:b2:
83:f1:c3:38:c2:96:d4:d3:96:f0:1e:e3:76:f8:63:c0:6d:35:
da:c2:66:95:b7:06:ea:82:04:8f:39:62:e6:bb:76:44:82:33:
d5:a5:e6:06:59:f0:a8:1a:24:25:65:f8:7c:75:44:f2:25:10:
79:8a:6a:04:91:f0:98:07:a4:31:a3:5b:11:0d:8e:22:72:9a:
c2:ea:2f:f8:0f:88:cf:d5:f7:26:5a:37:85:c9:43:63:20:90:
66:ca:37:9c:02:60:b6:ba:0f:c1:70:2c:9a:18:4b:d1:49:fc:
e9:41:e8:8f:df:36:4d:c6:67:18:ce:65:fa:e0:90:96:e9:28:
31:86:b1:ab:fb:a0:cd:09:86:db:e7:f0:72:11:f1:4a:a4:51:
b8:72:9f:cf:8d:cb:fc:e9:1d:8a:cf:d1:65:c1:0d:2f:57:be:
91:c3:c4:35:78:9a:63:66:76:31:f2:b6:79:99:b9:81:29:b1:
f6:ad:d0:38:c9:61:75:95:17:e3:78:dd:81:e2:04:4f:75:e0:
7c:d5:15:0b:9d:92:a4:85:7a:4a:98:8b:a6:1f:55:c9:51:81:
4a:7a:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:44:26 2025 by rpki-client