Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: 3y9uU6BQ1/ZepcbcSgrgjsZhJgzkj5ky/iiB4QThGUU=
Subject key identifier: 28:44:C2:36:2B:AA:15:A7:64:D7:42:9F:DE:3D:0A:44:FC:22:93:46
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 019A5376474E99EA202880D30C298131D848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 0702
Signing time: Wed 05 Nov 2025 10:00:51 +0000
Manifest this update: Wed 05 Nov 2025 10:00:51 +0000
Manifest next update: Thu 06 Nov 2025 10:00:51 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: EwXydMLoLpTDhXSRQXYpIWZzPmqEFw5bNYHian1YqQg=)
2: iM-HUbcoELfWgS-lPVnMpAjn2tU.roa (hash: FOA+HRQLHHEYU2ci+E8byaoG9+so0NlIhMx5zOmbRnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:47:4e:99:ea:20:28:80:d3:0c:29:81:31:d8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Nov 5 10:00:51 2025 GMT
Not After : Nov 6 10:00:51 2025 GMT
Subject: CN=2844c2362baa15a764d7429fde3d0a44fc229346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:2b:5c:11:09:f0:d6:f2:59:e8:97:9d:19:
ad:e3:2e:63:1f:4c:9e:a2:69:f2:4c:36:78:69:e3:
32:ea:89:60:09:7c:db:e5:1a:db:c1:56:de:9a:be:
6a:e1:40:a9:86:22:aa:98:d6:69:cb:e5:00:59:89:
60:bf:a7:7a:a2:07:47:b2:01:c1:a2:38:d3:ac:0f:
28:0a:35:03:18:a6:1b:1c:eb:10:24:42:5b:97:a6:
49:2e:c5:96:2f:b3:52:b2:bf:bf:00:08:72:92:1a:
9f:b8:1e:e1:b4:83:81:ac:de:ef:bd:ac:2b:33:7d:
d6:5e:d2:d8:fa:bf:33:7e:4c:ac:01:17:ba:c1:6b:
6e:a1:de:9a:83:74:69:67:9f:10:0b:8f:ce:3f:a6:
93:75:83:4d:29:7e:86:f1:2d:1d:47:37:5b:7c:de:
66:77:cd:6d:9d:34:82:09:12:eb:84:47:03:62:bf:
0b:1d:12:72:d0:06:8a:9f:7b:5a:f1:f9:3d:91:e3:
01:54:15:d1:8e:98:f8:f6:99:71:07:3f:ee:55:1c:
76:aa:17:9f:d4:ae:c2:57:d7:be:8e:0b:eb:b7:20:
65:dd:9d:be:50:98:00:67:36:62:40:75:4a:18:2c:
74:78:e7:77:a2:09:e9:fb:ac:fc:58:fe:10:2b:d2:
cf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:44:C2:36:2B:AA:15:A7:64:D7:42:9F:DE:3D:0A:44:FC:22:93:46
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2f:f8:25:d6:c9:68:8d:84:e1:cd:e0:21:2a:7a:f6:a7:00:
4e:8d:87:78:ea:8e:75:d1:21:38:59:ef:f1:24:bf:ae:2d:e0:
e9:bb:9c:91:37:30:5a:a9:cb:50:98:3b:0f:53:53:97:9b:77:
5b:f9:64:b0:4d:8c:cd:e3:41:0b:0e:b0:8e:6f:0d:9d:64:a4:
07:2b:1f:7a:de:9b:33:3b:80:15:ea:bb:e6:49:77:e8:37:1b:
23:50:42:cb:e2:66:a3:fe:dd:24:f4:85:c6:2e:75:57:6b:76:
c7:5c:f8:2c:93:12:1e:c9:1e:4d:1a:5d:77:08:85:bb:b8:5d:
5a:87:61:df:ab:2f:0e:0f:7b:29:72:bf:3c:20:be:ec:4c:ca:
84:91:97:5e:a8:6b:10:96:e9:f1:18:41:76:43:12:6c:c8:01:
07:9e:db:de:b7:1d:1a:4e:c4:33:be:6e:47:9e:91:53:b3:bb:
5b:a5:c5:3e:99:74:db:c1:3c:32:cf:ae:9f:51:a0:19:a4:30:
76:00:37:55:2d:00:d8:35:45:8f:e2:64:04:ef:f2:6e:27:3c:
34:00:d2:de:68:f3:bd:df:2e:ed:ff:71:13:f4:37:a9:d9:87:
21:df:26:9d:f9:24:44:88:57:c9:c0:70:b5:e5:0e:02:46:4e:
ce:3b:8e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:23:25 2025 by rpki-client