Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
File: 45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json)
Hash identifier: KtQqkzWYB6osOfvJ8I4qb1KPVrz/A4PFm5P7jeHpWyY=
Subject key identifier: F5:4D:A8:DA:A0:EB:BA:A9:28:3E:C7:B6:26:5D:79:BD:8D:45:1D:1D
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Certificate issuer: /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial: 01987D8A0E68A94FFDFE222B3F7C77AE19F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
Manifest number: 01BD
Signing time: Wed 06 Aug 2025 04:00:56 +0000
Manifest this update: Wed 06 Aug 2025 04:00:56 +0000
Manifest next update: Thu 07 Aug 2025 04:00:56 +0000
Files and hashes: 1: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: 1kW4k1/1o0sYEkRL7OGw5xe3J+QQwzuJX0LywDqiaJ8=)
2: vt4FgfPRrWl7Z_yLjoZZHEYX9X8.roa (hash: YsuZLkluKAbvOnVqbYvnKkP5bLLApSYx0tCzxSCaii4=)
3: zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa (hash: taGLV+d4sUR0Mcx4A09Hc66ht4Rh+KLaRG3MKoCgLM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:0e:68:a9:4f:fd:fe:22:2b:3f:7c:77:ae:19:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
Validity
Not Before: Aug 6 04:00:56 2025 GMT
Not After : Aug 7 04:00:56 2025 GMT
Subject: CN=f54da8daa0ebbaa9283ec7b6265d79bd8d451d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:d6:d6:80:04:1e:fb:22:2d:ca:9b:fd:db:
8e:00:df:13:34:68:a4:fc:38:ed:e7:7d:08:da:31:
97:00:5a:86:65:62:fa:f1:4d:76:71:36:a2:48:0e:
dd:9c:81:ba:8c:f1:c5:75:d4:8e:ac:02:0a:4f:d3:
50:61:15:50:d3:0c:a8:5f:2f:3b:07:4e:fe:7b:9a:
3c:c1:d4:dd:52:1c:ae:e3:68:20:1d:03:ec:98:21:
25:07:04:e9:f5:38:b7:cf:fe:4b:4e:22:5d:ea:16:
c1:1d:69:6c:18:7a:6e:04:a7:d9:29:99:d6:60:24:
d9:e1:f0:21:49:8a:4a:88:bd:19:7f:0a:fa:24:a2:
e4:e7:86:cb:db:cd:dd:9c:46:f3:7e:7a:bd:4e:00:
1c:88:0a:67:48:3b:4c:1f:84:68:66:a3:0f:ac:c0:
95:9c:87:d5:da:a1:cd:aa:8b:89:89:80:e3:de:81:
b4:68:f5:85:14:e6:a4:b4:cb:13:34:a8:5a:17:47:
f3:70:75:e4:6a:ed:18:47:ae:9b:d2:a2:b2:45:1c:
7d:13:63:1b:88:5e:7d:db:0d:22:b4:8f:3b:63:1d:
c9:b0:cf:10:85:d8:18:60:64:45:16:e6:4b:84:a5:
73:0a:b7:7d:da:f8:8a:a4:e1:4e:0c:77:34:42:34:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4D:A8:DA:A0:EB:BA:A9:28:3E:C7:B6:26:5D:79:BD:8D:45:1D:1D
X509v3 Authority Key Identifier:
keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d0:e5:db:9c:f0:58:0e:ea:0d:17:0b:02:d6:7c:3b:e3:80:
41:f6:36:52:e0:a4:79:a5:4d:a4:06:f8:ce:b2:1b:b6:64:72:
7f:40:7b:e2:ee:ee:9e:fb:a0:e8:f0:fb:88:e2:8d:20:66:ca:
cf:ef:88:ee:7f:01:1f:8d:34:72:88:77:7a:20:e3:4a:be:a6:
8b:6d:e9:cc:2c:15:ce:12:b0:18:ff:53:4e:66:b0:77:9d:7a:
5a:bc:13:e1:2b:19:e9:a2:46:5c:d5:5e:26:7a:56:11:f6:0f:
a4:99:ee:cd:d5:f8:a0:2e:1e:0f:72:18:85:f9:5f:27:e2:21:
02:63:aa:9d:a8:0d:f5:c6:c1:ec:1d:ec:10:92:37:fd:1d:fb:
6d:44:00:e9:a7:80:1d:c3:6a:b4:a1:4f:0d:a1:2c:e0:ed:5f:
8a:9d:21:17:31:0f:2c:be:a4:82:aa:c1:5c:4c:e4:a4:03:be:
24:d2:1a:d0:f0:24:9a:47:33:eb:d9:3e:c5:e9:bf:69:0e:3f:
54:ec:81:68:f2:50:95:ea:34:10:9f:04:c5:49:c4:0b:c9:e4:
ab:da:ec:c2:55:5c:35:50:b2:80:23:71:ff:3a:b5:2c:57:58:
11:54:28:9e:24:50:05:36:18:e0:3e:69:5e:d3:66:f9:ac:73:
3d:b0:4c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:35:41 2025 by rpki-client