Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
File: Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft (raw, json)
Hash identifier: MrMC2r4qX0ZlK+vnEOm9ISoZnndCv1knAO4I1+XXNyw=
Subject key identifier: A2:1D:61:D8:8D:06:1F:11:85:CE:0B:7A:D6:C9:8A:16:B8:67:C2:AB
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Certificate issuer: /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial: 0197868F75B4DCB4588EC1F4E634DE8C520B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
Manifest number: 04B7
Signing time: Thu 19 Jun 2025 05:00:38 +0000
Manifest this update: Thu 19 Jun 2025 05:00:38 +0000
Manifest next update: Fri 20 Jun 2025 05:00:38 +0000
Files and hashes: 1: 5Gb6hc8c6e_T0jp-7tOhv1aSnbs.roa (hash: GMcY+Vcxtv+yuahYv7nXQxaJEt+vN0M89l4WY2L+IN0=)
2: Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl (hash: cp+yNYzST4k0uV4tJK5KSUElAAwiMF3evrVb8pEyTiA=)
3: yu0x4cI7QYMuV2lvpjsdhZIVjyw.roa (hash: r8iy7jtbgFUvGg0IDU5rUcIHxo3t6t6Pldzb39lXL7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:8f:75:b4:dc:b4:58:8e:c1:f4:e6:34:de:8c:52:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Validity
Not Before: Jun 19 05:00:38 2025 GMT
Not After : Jun 20 05:00:38 2025 GMT
Subject: CN=a21d61d88d061f1185ce0b7ad6c98a16b867c2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9f:59:34:b8:90:f2:83:e3:cd:a8:9f:69:35:
0f:db:08:33:da:d7:7f:f8:85:e8:36:f5:9e:ba:09:
52:53:2c:14:ad:98:a5:31:b3:9d:c9:4c:38:91:9a:
ca:07:10:a9:f4:66:b8:95:3c:5f:e7:7f:0c:ac:f1:
56:4e:39:02:3d:57:91:1e:f2:53:a3:90:ff:4b:f0:
c5:f1:49:06:6b:44:30:eb:00:16:36:0e:a3:3e:e8:
be:85:40:e7:a5:5d:aa:5d:20:b2:d5:ca:bd:ae:4d:
7d:c1:c6:c5:b6:12:62:e8:d4:28:75:0b:32:26:95:
e5:92:06:a3:e4:50:b9:8e:26:57:2c:ae:42:b3:b4:
64:97:90:a8:24:30:e6:8d:68:ac:d5:bf:8c:e1:09:
75:51:c5:b6:f6:4c:9a:bc:0f:1c:a8:5e:64:f2:64:
e8:0b:46:ac:c7:cc:7b:b5:77:ff:82:2e:c9:2e:a7:
49:3e:ef:8d:54:50:a8:2f:b4:44:e0:81:af:cc:a0:
bb:6e:aa:a1:c1:e8:54:b5:3a:0f:e7:ea:90:74:89:
31:c7:d6:7b:df:4f:77:f3:c3:d0:d5:e1:af:ec:1c:
20:e1:d6:5b:56:bd:53:25:04:ea:94:d1:2a:4f:45:
5e:a7:2e:6f:a2:51:99:80:c0:c8:59:ac:18:d6:67:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1D:61:D8:8D:06:1F:11:85:CE:0B:7A:D6:C9:8A:16:B8:67:C2:AB
X509v3 Authority Key Identifier:
keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4a:5a:05:20:42:36:eb:14:6b:c1:59:72:63:df:23:45:95:
96:67:25:7c:33:92:80:ff:da:d2:f1:49:32:f0:54:6e:30:a9:
c2:8c:76:3e:c8:67:bd:e5:87:36:1a:19:fa:e2:c5:d0:fb:f3:
1c:98:7b:b7:49:19:1b:9e:17:cb:1d:c6:e2:9a:d2:fe:5a:a0:
f5:e0:7f:b9:56:be:0d:09:f0:a4:b5:78:1f:db:c8:d9:ed:46:
f0:36:8a:68:5d:5f:03:f1:77:58:16:85:72:be:55:0b:87:bc:
4d:83:84:eb:51:9c:3c:5d:0b:c8:c7:8f:a8:14:46:83:7a:b5:
a1:06:8e:15:5d:a4:af:b5:b9:4b:17:b6:81:71:93:ce:56:dc:
47:fa:5d:37:8c:8d:a3:6b:7b:c8:17:72:8c:a7:8f:90:3a:70:
1a:c8:10:ac:fd:b2:fe:ef:0a:89:b5:1c:cc:e0:ef:91:b3:98:
a3:8b:ce:2f:5c:9d:54:3d:ee:d5:c9:8c:b5:ff:8e:37:de:30:
c6:cb:ba:14:3f:9e:8b:ba:15:52:af:61:62:7b:43:d2:d1:cd:
8e:9f:98:46:59:7e:c7:dc:c7:e0:96:e7:74:1e:51:c5:e7:36:
f1:db:60:d5:ee:36:ff:b0:c6:ac:6e:f1:3d:43:ea:b1:bb:1c:
61:47:19:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeGj3W03LRYjsH05jTejFILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZWZmZTk4YzI0YzNkNmQ2MDg3YzhkMWQzZjkwMWI4Y2Nk
NDAwODgwHhcNMjUwNjE5MDUwMDM4WhcNMjUwNjIwMDUwMDM4WjAzMTEwLwYDVQQD
EyhhMjFkNjFkODhkMDYxZjExODVjZTBiN2FkNmM5OGExNmI4NjdjMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9J9ZNLiQ8oPjzaifaTUP2wgz2td/
+IXoNvWeuglSUywUrZilMbOdyUw4kZrKBxCp9Ga4lTxf538MrPFWTjkCPVeRHvJT
o5D/S/DF8UkGa0Qw6wAWNg6jPui+hUDnpV2qXSCy1cq9rk19wcbFthJi6NQodQsy
JpXlkgaj5FC5jiZXLK5Cs7Rkl5CoJDDmjWis1b+M4Ql1UcW29kyavA8cqF5k8mTo
C0asx8x7tXf/gi7JLqdJPu+NVFCoL7RE4IGvzKC7bqqhwehUtToP5+qQdIkxx9Z7
309388PQ1eGv7Bwg4dZbVr1TJQTqlNEqT0Vepy5volGZgMDIWawY1memxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIdYdiNBh8Rhc4LetbJiha4Z8KrMB8GA1UdIwQY
MBaAFEXv/pjCTD1tYIfI0dP5AbjM1ACIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xZTRhNjQtN2FhMC00Yzk0LTliYjAt
ZGViN2I5MTg5MTY5LzEvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8xZTRhNjQtN2FhMC00Yzk0LTliYjAtZGViN2I5MTg5MTY5
LzEvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEpaBSBC
NusUa8FZcmPfI0WVlmclfDOSgP/a0vFJMvBUbjCpwox2PshnveWHNhoZ+uLF0Pvz
HJh7t0kZG54Xyx3G4prS/lqg9eB/uVa+DQnwpLV4H9vI2e1G8DaKaF1fA/F3WBaF
cr5VC4e8TYOE61GcPF0LyMePqBRGg3q1oQaOFV2kr7W5Sxe2gXGTzlbcR/pdN4yN
o2t7yBdyjKePkDpwGsgQrP2y/u8KibUczODvkbOYo4vOL1ydVD3u1cmMtf+ON94w
xsu6FD+ei7oVUq9hYntD0tHNjp+YRll+x9zH4JbndB5Rxec28dtg1e42/7DGrG7x
PUPqsbscYUcZRA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 11:03:05 2025 by rpki-client