Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File: 45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier: h3uJHXgTWNDWkCMVFf5lLjw03ZwMCs96zQs4JejzHMc=
Subject key identifier: 4B:17:FC:8B:69:6B:7F:C7:09:BB:B5:FB:30:D1:E8:4E:A2:78:4C:0B
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer: /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial: 019A4D73FDECC01DDB311C1616E5882AC081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:38 +0000
Manifest this update: Tue 04 Nov 2025 06:00:38 +0000
Manifest next update: Wed 05 Nov 2025 06:00:38 +0000
Files and hashes: 1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: AsNVWPEIzaD1sYqzOH3h68lgQqF47i4jeDz79r3UZnU=)
2: R7JL9FH-2QrwFM5epJeXae1YV-E.roa (hash: Z+kLiV+Tl4XxDqngd/q42hXqK5SlkiW5r2j2WXBsESY=)
3: iDFuGk6oYIqLw3GPihSSyyo3kF8.roa (hash: cwnT8XNunIwbvLFN3GthMjNOhsdwtyQiIir5eoCVPD0=)
4: o9F14TmJz-3o4btxFTmUNxIaMVQ.roa (hash: htBHVS9bsjwqqv6NPJnNf70ZDfm1OC4b9PUSs5jzuTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:fd:ec:c0:1d:db:31:1c:16:16:e5:88:2a:c0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Validity
Not Before: Nov 4 06:00:38 2025 GMT
Not After : Nov 5 06:00:38 2025 GMT
Subject: CN=4b17fc8b696b7fc709bbb5fb30d1e84ea2784c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e1:5c:f9:80:69:33:76:8e:45:0b:dd:48:e8:
01:43:b6:06:2c:40:11:5d:02:72:5b:5f:98:53:60:
c5:ac:02:60:11:44:59:74:69:dc:81:c2:26:08:d6:
15:7a:d9:9e:5a:53:cb:8c:04:0f:c1:46:d8:5a:27:
84:69:28:04:20:3b:b8:6b:2f:f5:94:64:c9:3a:69:
16:d8:14:53:6f:fd:36:8c:01:22:ea:1b:c9:39:82:
2f:3b:8e:11:4f:88:29:f4:ea:77:02:85:48:14:14:
34:9e:9d:a4:1a:81:b5:ed:df:be:df:16:f6:0d:a1:
b3:8c:1a:61:a4:6c:0e:d0:e5:76:63:71:f3:5e:3d:
13:ba:88:94:d2:ac:0b:ad:cf:d3:44:ac:17:3d:5e:
dd:31:d6:06:c0:86:bb:2a:13:4d:8b:fb:6d:20:8b:
64:17:07:52:41:30:83:d1:1d:c3:96:63:3a:1c:af:
ca:74:da:bc:a7:fd:ba:93:c3:55:4a:9d:52:13:c4:
da:80:dd:d1:d2:ef:d7:c4:a7:ec:ba:79:32:72:ed:
ee:cf:de:c1:6a:ca:ff:bd:52:d0:11:b1:81:25:f8:
a0:a8:64:7d:a1:ce:bd:fb:02:34:a7:3b:54:3a:d6:
cc:cd:dd:9c:88:b0:9c:86:cb:a5:2c:b2:f8:cd:dd:
8a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:17:FC:8B:69:6B:7F:C7:09:BB:B5:FB:30:D1:E8:4E:A2:78:4C:0B
X509v3 Authority Key Identifier:
keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c4:67:16:ab:db:af:c5:d8:9e:ee:07:08:54:ae:88:b4:d2:
86:dc:62:9b:f6:99:18:96:b8:d3:4c:c5:24:3c:73:12:ec:6c:
76:8f:02:f1:cd:03:9b:4c:15:92:38:8f:69:eb:b3:7d:6e:aa:
99:81:12:52:07:1f:ac:93:05:56:08:5e:93:ad:b5:8c:58:ce:
73:05:95:c1:4f:b4:f7:b7:c0:84:ca:82:fe:be:f2:25:08:29:
3c:d5:3c:bd:a7:0d:bc:e6:65:51:d5:25:df:60:25:c3:07:d0:
0b:dc:0d:2d:eb:97:b2:9e:70:dd:43:b8:9c:20:10:08:cb:69:
55:25:a3:89:db:c4:53:87:4b:c4:2c:ca:c5:e5:08:a1:5d:4d:
dd:a5:85:27:0a:ab:23:a0:9c:9f:61:83:61:6d:a0:a7:37:24:
97:05:c3:92:27:30:e8:67:76:9b:9c:73:16:41:8c:9e:af:47:
9c:b0:13:1d:ae:7a:75:e5:5e:06:ea:de:39:07:0c:09:cf:75:
7e:f0:f9:ce:70:48:39:1d:cf:b3:b4:60:d5:70:5f:c1:2a:dd:
66:77:d0:66:b7:67:9c:76:3b:ba:d3:f3:8e:15:c5:3e:29:b7:
ab:1a:4b:05:22:de:3f:1d:25:9c:05:1b:25:11:bd:cf:e8:f1:
77:6c:12:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:28 2025 by rpki-client