Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier: c3pLa2hnmWo980BWo7dmimy+Gx/aZMbhMCRlCiJJjoU=
Subject key identifier: 95:75:2B:97:1D:9F:02:9F:89:3E:28:A6:C7:4E:0F:0F:71:28:B6:CF
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 0197801FC3BE8EB7027674DACB925251DCD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number: 083A
Signing time: Tue 17 Jun 2025 23:00:54 +0000
Manifest this update: Tue 17 Jun 2025 23:00:54 +0000
Manifest next update: Wed 18 Jun 2025 23:00:54 +0000
Files and hashes: 1: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: +DWkrxu3sZn/uJmfGgt3dLoHv/SJguTMODa3XruHncs=)
2: c1218tMrC-SYY-Yo1ITctKUD9_k.roa (hash: 8AGbg1kAcimxxtZO8YTai8jQPbPTR+28UymCTknNVxU=)
3: v9XCpSvXJgFn93oqPO6QjvmDaV0.roa (hash: 2/0z9nylSvJWI46oSDGL4Lr6kTxicsj+PodL8IKe940=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:1f:c3:be:8e:b7:02:76:74:da:cb:92:52:51:dc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Jun 17 23:00:54 2025 GMT
Not After : Jun 18 23:00:54 2025 GMT
Subject: CN=95752b971d9f029f893e28a6c74e0f0f7128b6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:51:8c:de:73:24:3c:d4:06:8f:c2:8f:a9:99:
eb:72:b6:c0:e2:69:34:7e:d0:81:b9:24:1d:51:79:
c7:4c:32:d8:df:2d:b2:a3:89:a2:5f:62:bc:37:7e:
48:d0:d3:c7:58:4e:39:c1:6f:24:6e:1a:18:db:6f:
a4:e8:86:02:b5:c3:71:b1:19:0a:89:b2:81:0a:13:
2c:78:8a:c2:da:71:44:da:7b:b7:68:16:06:00:0d:
c9:18:09:d1:db:63:ed:90:b9:27:1d:16:92:c9:2c:
da:50:d1:1a:bb:a1:a0:b3:4e:99:14:b2:7b:1c:76:
9d:e2:05:8e:3b:c8:e6:fd:c9:b9:cc:41:c8:73:4e:
2f:8d:f4:a9:1e:92:57:bc:85:c7:64:e1:ac:89:0e:
dc:c2:ee:79:03:7b:29:56:2d:ab:c5:c3:00:fa:7d:
7b:e0:23:bc:15:9e:c6:7e:8c:57:f3:9d:07:04:69:
21:29:45:46:72:c5:16:de:a6:3d:e7:bf:8d:22:0c:
82:b3:bd:f4:e1:f6:f1:78:89:99:79:8f:ea:41:9c:
ce:38:c4:ff:42:94:19:5b:33:36:4a:72:c5:50:07:
c5:98:b8:f7:f0:b5:81:8f:a3:e5:2f:84:24:7f:be:
fc:bc:7c:ae:ac:13:38:d5:f9:66:45:fd:94:e6:2d:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:75:2B:97:1D:9F:02:9F:89:3E:28:A6:C7:4E:0F:0F:71:28:B6:CF
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:61:db:ca:32:7d:fe:d1:82:1a:3f:0c:6f:a9:94:61:90:3b:
cf:80:fc:47:5a:73:a4:70:3d:08:09:6a:72:8f:bf:3a:b6:7a:
69:c4:0c:b2:e5:1f:87:0d:c3:9b:1d:e1:22:73:a2:84:2b:f8:
56:33:22:bf:cf:d8:8e:9a:03:2d:14:da:3f:87:a2:8c:22:fa:
70:e6:60:c0:00:4a:8d:ab:95:bf:a8:a2:18:cf:ca:fe:fb:e8:
e5:fb:f9:75:2d:58:1c:10:8a:dc:ed:b7:05:97:5c:e0:9a:49:
65:15:fb:0e:f6:c6:c7:eb:86:ab:85:05:fe:41:d6:c4:ef:bc:
9a:15:b4:3b:22:58:1d:01:65:cd:e9:ac:13:01:8f:77:00:a7:
d5:48:1a:ff:7b:37:33:e1:ac:fe:b7:86:25:44:10:d3:5f:0a:
5e:f9:87:58:72:e3:b0:fb:1a:6f:8c:fc:fb:d8:7d:ef:2c:07:
5a:9e:b7:12:1e:85:48:ed:a3:ce:d7:d3:f6:37:5f:6a:9b:4f:
d4:4a:8b:47:2d:0c:be:e3:e0:ab:3f:ce:ad:e6:55:13:ea:eb:
c6:e2:b6:11:5d:9a:4b:63:0f:a7:5d:c9:1f:db:5c:85:9c:58:
d8:7e:8c:a1:09:24:3f:e9:ee:a5:a0:64:6f:d5:d5:fe:a2:37:
47:bb:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:17:04 2025 by rpki-client