Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: heOoBPT5E2E3Biq0F+afq6TQwHESZefra73GqLaObJI=
Subject key identifier: 2D:89:AF:CD:D8:5B:9D:50:9A:E8:6D:30:42:35:30:1C:E2:5F:FD:A0
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 01976BF4711444378628D379CADDD9A402D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 0581
Signing time: Sat 14 Jun 2025 01:01:11 +0000
Manifest this update: Sat 14 Jun 2025 01:01:11 +0000
Manifest next update: Sun 15 Jun 2025 01:01:11 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: Tqv6163HsW5oDIi69FIYiT0rLirnOqtpS9hPP4k6aHs=)
2: iM-HUbcoELfWgS-lPVnMpAjn2tU.roa (hash: FOA+HRQLHHEYU2ci+E8byaoG9+so0NlIhMx5zOmbRnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:71:14:44:37:86:28:d3:79:ca:dd:d9:a4:02:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Jun 14 01:01:11 2025 GMT
Not After : Jun 15 01:01:11 2025 GMT
Subject: CN=2d89afcdd85b9d509ae86d304235301ce25ffda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:71:27:94:34:46:44:ad:50:6a:36:48:7c:ae:
b8:4a:41:64:6d:2f:17:75:d0:21:ce:34:f5:1f:68:
ea:08:85:65:13:ef:0b:76:be:68:df:71:13:0d:cd:
87:fc:fd:01:55:75:43:c8:f2:f8:92:c3:ce:3b:6b:
0c:53:e9:20:3c:83:a8:18:bb:3c:ca:e0:1e:a5:6a:
a5:42:ba:25:c0:47:f4:99:1b:32:ed:bf:cc:ab:ed:
57:a0:e1:5e:3f:8f:9f:50:9d:d9:9c:e7:7f:47:f8:
67:88:7f:e9:28:ce:fa:90:c7:bc:b5:50:20:9f:2d:
3c:06:b3:46:0a:9a:f6:ec:7f:c7:5c:f9:19:fb:80:
c4:32:01:31:56:2b:6a:b6:e4:ac:e2:78:c3:f7:45:
88:72:72:c6:80:d1:c7:7e:ef:8c:c9:9a:4c:5d:12:
de:1d:21:b7:90:7f:2e:96:58:f6:60:3c:f2:9c:1b:
38:a5:7d:8e:e0:83:95:60:e9:96:4c:c8:15:55:c7:
aa:bf:a2:dd:96:10:98:7e:1d:5b:9c:9c:bd:d4:19:
2c:fd:78:3e:4d:ea:16:51:40:b9:00:31:b0:c3:67:
5f:05:59:e2:45:46:09:1a:6b:70:ee:38:cd:9f:41:
20:59:89:56:fc:01:0c:9a:39:1b:06:91:be:cf:e7:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:89:AF:CD:D8:5B:9D:50:9A:E8:6D:30:42:35:30:1C:E2:5F:FD:A0
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bf:dc:51:79:ee:38:aa:55:83:35:48:98:54:d5:53:94:27:
70:7d:8b:ba:15:f1:8a:5d:b1:1b:8f:56:63:27:e4:85:6e:7c:
59:b3:71:c1:cd:7d:9a:6f:0f:17:50:ab:55:a8:a0:dd:66:61:
a4:12:d9:e0:a6:fa:b2:bb:b0:c0:d9:72:74:a3:2a:b5:65:55:
c4:21:f8:b7:9a:53:83:b7:cb:52:cc:f8:ae:30:7a:d0:d0:ab:
b7:64:57:1f:2f:73:3d:35:f0:80:76:58:1b:c8:b3:29:66:bc:
e1:df:a3:ac:6f:5c:68:4c:31:a8:b2:05:1f:78:64:59:92:8a:
57:79:24:c0:d1:49:78:12:cd:98:ef:06:14:8d:a6:a8:f5:93:
83:96:e4:aa:9d:8e:63:26:0a:80:ca:5d:bc:6c:43:c8:1b:d4:
c6:7d:39:a1:09:88:ef:e5:a1:1f:d9:a9:fa:9f:75:c1:be:70:
f4:e1:b9:a0:f5:80:eb:7c:db:8f:80:3f:1a:17:0c:c0:5a:fa:
5e:1c:9f:ec:ac:ff:fd:67:5f:e8:77:33:71:be:39:74:7a:8e:
6d:c8:ae:f4:48:20:53:5d:e0:5d:a6:1d:d7:42:a1:87:91:e2:
84:a9:8a:0f:26:8d:7a:24:1e:13:61:62:a7:60:e6:37:c2:b7:
1f:a1:bb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:59:27 2025 by rpki-client