
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier: KDraYk3ZPFxZPqiDHzqTFphCToW/XslZJCYcTCgYbhw=
Subject key identifier: 74:19:D9:50:F2:79:D3:1C:19:8F:00:FB:74:1E:D0:58:E3:86:6A:22
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 01988C8F465BC509E2014AB9B237435D5E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number: 08C5
Signing time: Sat 09 Aug 2025 02:00:56 +0000
Manifest this update: Sat 09 Aug 2025 02:00:56 +0000
Manifest next update: Sun 10 Aug 2025 02:00:56 +0000
Files and hashes: 1: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: 5T2tRZ3WaxJfKpqQV4G24jpnKLc550LzqxzWf6icIpE=)
2: c1218tMrC-SYY-Yo1ITctKUD9_k.roa (hash: 8AGbg1kAcimxxtZO8YTai8jQPbPTR+28UymCTknNVxU=)
3: v9XCpSvXJgFn93oqPO6QjvmDaV0.roa (hash: 2/0z9nylSvJWI46oSDGL4Lr6kTxicsj+PodL8IKe940=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:46:5b:c5:09:e2:01:4a:b9:b2:37:43:5d:5e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Aug 9 02:00:56 2025 GMT
Not After : Aug 10 02:00:56 2025 GMT
Subject: CN=7419d950f279d31c198f00fb741ed058e3866a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:12:6a:a2:f0:4e:5e:14:b2:d6:86:3b:99:
d6:bd:4d:80:cd:14:5d:1b:f2:53:7e:5d:36:16:cd:
97:42:30:84:bc:0c:23:0f:cc:11:2b:1b:35:f2:1b:
ec:e8:d1:10:27:47:e2:34:6f:77:5d:97:a4:f3:af:
dd:1b:9c:97:9b:a4:17:ba:9b:a9:cd:b2:93:98:94:
a9:7e:ec:44:2e:8f:55:64:60:af:ac:5f:cd:da:47:
ad:a4:4f:e3:75:b7:99:dd:fa:28:d0:ef:22:41:ed:
09:f0:52:86:7d:72:f8:2d:3b:20:46:eb:a7:fc:73:
26:4a:fd:3b:7c:5b:c8:b0:3f:dc:49:ad:12:9a:19:
82:d8:8e:b7:90:97:52:60:2b:89:f1:67:0a:54:24:
75:c6:d3:62:2e:c0:28:bb:85:98:04:90:aa:46:8a:
42:d8:56:4b:b8:33:7a:96:8f:69:76:bd:c9:ae:ad:
b7:63:b2:44:d3:37:c5:e8:07:93:70:f0:c7:65:f7:
1b:42:0d:9a:7f:4e:95:ad:d2:a7:28:78:92:1e:64:
d0:60:aa:8b:d6:8f:63:21:2e:13:08:79:74:e7:2e:
28:6f:b7:27:3c:54:e8:53:02:8a:d8:f8:7a:72:1d:
46:ce:57:f4:2b:8b:c4:e9:cd:44:64:68:05:9a:d3:
5b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:19:D9:50:F2:79:D3:1C:19:8F:00:FB:74:1E:D0:58:E3:86:6A:22
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:54:8a:e8:2c:44:1c:71:5a:7c:af:f0:57:5c:46:15:3e:76:
41:3d:6c:c8:55:a9:a9:2d:8b:bc:ae:77:03:6e:f9:41:ef:67:
1f:1e:71:3d:42:5a:25:69:f9:fb:a6:19:f3:a7:aa:b7:13:f4:
f7:5c:06:12:98:c6:36:89:0d:a9:07:5c:be:cc:e0:71:a5:a5:
f6:7b:42:41:1d:62:4a:ba:29:ab:84:e2:e7:ee:03:2f:88:98:
9f:cb:7e:ac:d5:21:d4:f4:27:81:d3:b0:b4:2e:29:7a:68:a3:
04:f8:e6:81:46:9c:16:ea:c7:f4:52:51:69:d4:d9:26:e3:6c:
a7:b8:c3:ef:b4:74:c4:80:42:60:86:25:89:49:9e:07:5e:42:
55:a2:46:22:a1:c1:a2:c6:c2:5b:c8:8a:78:66:ee:a8:c7:47:
15:b5:ef:64:e8:e5:e7:f7:2b:09:a3:a7:f5:1a:0c:87:7d:f5:
1c:eb:02:4b:24:37:e3:c5:9f:21:8f:e0:00:93:b6:12:6a:a1:
a1:95:7a:09:de:c1:74:f6:44:27:04:50:e8:d2:cd:75:7c:4b:
ef:3f:01:56:86:92:55:37:e7:b0:8e:04:45:32:04:5f:43:14:
63:3a:fc:35:32:22:cb:25:3a:39:4d:d5:eb:e9:b8:35:3d:23:
dc:fc:e6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:47:13 2025 by rpki-client