Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier: y1gkjV9zIOQ6ZvMr06d2Vc2xnhDDgRumf8FzNJM2mkc=
Subject key identifier: B0:68:6B:A9:DD:AE:5F:96:0C:5F:C8:EC:33:3F:52:F9:59:8C:D6:57
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 019A526347165AD8314DF016198DF6B3488E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number: 09B0
Signing time: Wed 05 Nov 2025 05:00:29 +0000
Manifest this update: Wed 05 Nov 2025 05:00:29 +0000
Manifest next update: Thu 06 Nov 2025 05:00:29 +0000
Files and hashes: 1: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: IFmaGYvh9YqHv0JxQBN+cHQRLF53azEd/hH79N5VtPA=)
2: c1218tMrC-SYY-Yo1ITctKUD9_k.roa (hash: 8AGbg1kAcimxxtZO8YTai8jQPbPTR+28UymCTknNVxU=)
3: v9XCpSvXJgFn93oqPO6QjvmDaV0.roa (hash: 2/0z9nylSvJWI46oSDGL4Lr6kTxicsj+PodL8IKe940=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:47:16:5a:d8:31:4d:f0:16:19:8d:f6:b3:48:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Nov 5 05:00:29 2025 GMT
Not After : Nov 6 05:00:29 2025 GMT
Subject: CN=b0686ba9ddae5f960c5fc8ec333f52f9598cd657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:04:7b:7c:16:75:bb:78:2d:06:b9:a6:c6:a9:
48:59:e5:80:7d:78:d2:03:15:45:76:11:d1:52:97:
73:74:31:c8:d5:bb:57:a1:82:c4:b1:13:9e:39:b0:
fb:66:bb:82:a8:80:7a:60:1c:81:2f:81:b7:a6:4a:
53:5e:56:82:ce:67:3a:f1:bd:3f:42:15:77:3d:48:
8b:a8:00:ea:d9:1f:d2:9f:8a:1f:a1:71:84:9e:03:
cf:db:fa:f6:ec:86:3e:d0:cd:35:31:89:10:d4:2f:
43:14:b4:ce:22:73:8e:04:66:e8:89:89:b3:bc:93:
ca:07:72:86:ea:c4:00:cb:f2:1e:00:4d:4d:a3:ea:
9a:31:1b:1e:c5:bf:80:2e:e2:16:14:39:2c:0f:97:
9b:b3:d3:e4:ae:19:c5:f3:2e:9c:a1:52:d8:85:4c:
eb:a9:91:3a:64:2a:da:45:55:6d:59:52:ec:33:aa:
53:af:e2:53:92:7f:78:c0:a6:a2:54:40:ac:23:74:
c1:fc:60:24:63:c5:f3:f4:cc:85:82:24:a6:92:96:
71:28:10:7e:eb:83:c7:7f:d8:ff:85:90:43:10:45:
66:d9:23:b6:29:0d:09:21:dd:2a:c2:75:45:48:c3:
52:bc:16:3f:b4:d8:9a:1b:db:8f:e9:9f:18:68:f6:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:68:6B:A9:DD:AE:5F:96:0C:5F:C8:EC:33:3F:52:F9:59:8C:D6:57
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:14:75:9a:6b:85:9f:b3:00:20:39:29:d0:27:a6:24:f5:b9:
63:89:fd:7d:62:d4:51:15:fb:c8:91:5e:a6:dc:b8:7f:62:eb:
d4:f4:bc:c3:0c:79:f9:0b:d8:b0:a1:06:3a:86:24:29:93:95:
fd:c2:dd:27:3b:79:a1:49:e6:54:fd:f1:97:c0:34:fc:4e:ae:
0c:81:16:ec:b4:95:91:ce:36:4b:bf:23:e6:34:6a:56:12:1b:
e8:2e:bf:aa:a7:d2:0d:d4:04:73:b3:69:a8:e1:13:39:2f:e6:
3d:ab:1a:a5:55:5a:47:f2:e5:39:c4:8c:22:47:31:0a:61:c2:
e0:18:2c:86:8b:c9:45:68:48:44:9c:d5:4d:3a:70:41:cf:33:
45:f8:31:41:e0:88:64:82:0e:96:33:08:17:df:4d:73:86:25:
05:ff:d3:bd:a0:b7:92:cd:37:af:d8:ba:be:ec:1d:c3:74:87:
87:bc:84:04:40:cd:88:69:42:2f:31:bc:29:07:87:c7:56:ec:
35:e4:55:42:c5:19:e6:c0:a9:bb:91:ee:8f:8b:f3:9d:8f:b6:
d6:02:d9:02:f0:8b:7c:59:ac:bd:06:74:7f:05:c3:23:d4:84:
7b:ed:59:a1:0c:13:d8:cf:34:06:65:75:50:55:85:d4:eb:ee:
b4:56:e0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:20 2025 by rpki-client