
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
File: c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json)
Hash identifier: 06WPCRYzFh40fdBk2MIlBs6N8MrKNmXuvu7dprhJXTk=
Subject key identifier: 0D:40:EC:CD:B2:D3:40:DB:ED:3C:F8:5B:64:65:83:B4:EB:13:A6:9C
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Certificate issuer: /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial: 01987D8B3E836D607EA156D7CAAFAF2918D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
Manifest number: 0E1D
Signing time: Wed 06 Aug 2025 04:02:14 +0000
Manifest this update: Wed 06 Aug 2025 04:02:14 +0000
Manifest next update: Thu 07 Aug 2025 04:02:14 +0000
Files and hashes: 1: Bm65E--O4RsSyCzNAmCOH5DCwbg.roa (hash: Dk5vtQSO5xVuQ/klL2R5yHYHzC51XBPO7azd9yPCmHY=)
2: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: Tm5bA2hcmpw1k/c1amPft4rWteL4vKj9qQFrg6vtqYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:3e:83:6d:60:7e:a1:56:d7:ca:af:af:29:18:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Validity
Not Before: Aug 6 04:02:14 2025 GMT
Not After : Aug 7 04:02:14 2025 GMT
Subject: CN=0d40eccdb2d340dbed3cf85b646583b4eb13a69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5c:f5:46:ec:b1:ec:b0:aa:19:9a:75:45:1e:
9a:2b:3c:60:20:08:8e:37:b2:48:31:9d:9a:b1:e4:
1f:dc:74:83:e7:54:9d:1c:de:f7:e7:21:ac:d0:1b:
6c:db:4e:72:d9:c5:42:ae:5c:33:f6:3d:cf:f7:08:
15:c6:1e:97:9f:d5:50:3f:84:7c:7a:f5:ca:51:7e:
05:9e:c3:ae:78:cb:7c:d1:0e:75:db:cc:25:4a:3d:
1d:4d:a3:bf:62:0c:6b:23:c7:dd:d7:c8:af:89:81:
70:d5:ff:29:49:56:89:84:54:63:cf:59:7a:ba:d0:
b2:fb:89:6c:33:5b:02:e8:ec:f3:fb:84:18:fa:b1:
ab:03:a1:1d:62:e4:8e:f2:97:3a:81:38:85:1c:58:
b3:e5:3a:96:cc:28:5b:c6:ef:8b:e5:f1:1b:0f:29:
fc:e3:34:2c:54:ce:04:ad:07:50:45:b4:67:4e:82:
c5:10:78:29:6d:97:e0:bc:a3:f8:31:9a:7f:25:9b:
a2:de:34:45:39:ba:aa:06:0c:99:eb:44:8c:d0:36:
1b:48:58:98:e1:65:d0:1c:fb:25:e3:10:07:36:6f:
8f:ab:d8:c5:e4:7e:f1:b3:a0:1d:8b:3a:24:ac:28:
29:5f:1d:40:68:fd:a8:46:cb:a6:43:18:ef:15:d5:
c0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:40:EC:CD:B2:D3:40:DB:ED:3C:F8:5B:64:65:83:B4:EB:13:A6:9C
X509v3 Authority Key Identifier:
keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d8:54:57:36:ec:9a:7f:89:40:54:44:80:d6:07:8c:0f:79:
6c:25:2d:e5:d2:82:2e:7c:9b:a9:2f:1a:7f:b5:6b:57:99:3c:
17:1a:36:ac:3a:88:94:fa:27:e7:d2:9d:fe:e6:c7:19:bd:d7:
01:6b:f2:f7:c3:8c:b0:5f:e2:0d:b1:e3:eb:07:37:e4:a4:e0:
0f:69:0b:d3:38:d1:e1:37:53:8a:09:49:d7:e1:a6:67:25:79:
fd:03:7a:e2:3a:ea:1b:0d:f3:00:61:b8:2e:9a:33:80:30:28:
78:79:44:18:eb:8e:ac:6a:b8:3c:8f:3f:6c:af:3a:b6:d8:9e:
4f:a1:16:de:d1:89:91:7b:32:be:17:af:cc:34:61:ee:66:76:
de:6f:b2:6d:71:31:c2:ac:c4:21:0f:c8:21:87:f9:e5:61:ee:
99:a2:e5:a9:ca:b0:4d:56:55:72:f8:e7:50:61:5e:fb:0e:1d:
a7:fe:f5:b1:51:e2:5f:c5:e8:01:1c:9d:e6:0a:f1:65:64:21:
80:b6:e9:d4:52:48:ee:2a:b8:6d:60:2e:71:fc:c2:aa:32:22:
f1:31:55:52:0d:92:05:61:f8:6b:33:69:39:b1:80:6f:38:56:
d6:ec:cd:ec:83:93:25:35:93:01:0f:fe:0a:3c:da:5d:71:db:
3e:60:6a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:52:32 2025 by rpki-client