Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
File: Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft (raw, json)
Hash identifier: e+AjWcp2b48PkNfGnL0j3MJGTngimb8HiTZtT+d0O0Y=
Subject key identifier: A8:B9:E9:51:0F:20:8E:49:A2:E5:3A:EC:F9:E2:FC:C8:03:DD:AC:F0
Authority key identifier: 45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
Certificate issuer: /CN=45ed111630e05297795dddd298ea1fb29e695c53
Certificate serial: 019A4D06BEAC5C63DCD0168DBFE4D20A3696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
Manifest number: 0DEF
Signing time: Tue 04 Nov 2025 04:01:18 +0000
Manifest this update: Tue 04 Nov 2025 04:01:18 +0000
Manifest next update: Wed 05 Nov 2025 04:01:18 +0000
Files and hashes: 1: FdZc5w6NQTxVaX5pVim2SXSRdFw.roa (hash: 3yS2WlAT7COs2QdB7b8/iS1aVVb5UF5pqjux+yVKvWo=)
2: Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl (hash: kH6LUXnmnpoLlvwJfa3T6co0juFjOQ41cQdzS/xmO5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:be:ac:5c:63:dc:d0:16:8d:bf:e4:d2:0a:36:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ed111630e05297795dddd298ea1fb29e695c53
Validity
Not Before: Nov 4 04:01:18 2025 GMT
Not After : Nov 5 04:01:18 2025 GMT
Subject: CN=a8b9e9510f208e49a2e53aecf9e2fcc803ddacf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:96:c0:8c:f2:6d:4c:b2:8a:90:85:4b:d6:
aa:1a:44:57:e4:6a:45:4b:f6:df:ea:d7:72:fd:f6:
43:15:e7:f6:18:9f:de:37:5c:62:28:b7:37:5e:cf:
a7:36:aa:5b:1a:eb:74:a0:f1:b6:aa:b2:16:c6:c0:
2d:f5:9e:87:ec:8f:54:37:48:fe:9f:f4:66:b0:5b:
42:e6:cf:f7:7d:e7:03:52:01:3b:d5:73:49:75:b5:
9f:24:b9:fb:d1:1e:3a:08:ed:a7:9d:c2:7f:ab:0a:
df:5f:59:fa:76:4f:7b:81:f9:ce:46:07:75:52:b2:
59:40:88:01:d8:76:77:3f:8d:b0:9e:9d:c2:d1:4c:
04:d4:7f:46:7d:37:ee:95:ed:5a:6a:3d:0f:a2:63:
01:b1:34:49:d3:20:35:53:9f:0c:5b:0c:f0:47:90:
b2:b8:03:e6:ef:5e:10:b1:63:18:a3:10:59:b6:a3:
0b:c4:39:4b:2c:3b:96:05:05:2a:a0:a4:0a:3a:88:
91:f3:3a:cf:e2:5c:5c:37:a5:ef:03:f1:91:df:09:
aa:f8:66:50:f7:8f:bd:00:1c:d9:e3:8c:93:df:94:
79:0b:55:cd:6e:33:0b:b2:65:46:fe:de:0f:d1:8f:
50:b8:c0:90:a9:ee:0d:ca:fe:57:15:54:bb:50:b6:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B9:E9:51:0F:20:8E:49:A2:E5:3A:EC:F9:E2:FC:C8:03:DD:AC:F0
X509v3 Authority Key Identifier:
keyid:45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bc:54:7b:a0:d1:67:60:d5:1c:d6:70:ab:6c:88:6a:9d:b5:
c0:ac:35:3a:4a:c2:58:fc:4f:0f:d3:31:20:ab:4a:ff:35:0e:
07:40:d0:c7:65:3f:30:62:51:9f:8b:16:93:83:d0:62:47:0f:
4f:c0:1f:57:61:58:a4:82:2d:8f:35:b9:48:5c:2d:7d:96:ea:
af:ed:cb:95:f8:3a:d1:67:3e:5b:c7:52:79:71:63:cc:0a:5f:
40:83:38:de:ae:3e:51:15:e0:58:d0:ae:e6:a3:1e:70:b5:a2:
d0:04:e8:a5:f9:7d:8b:f1:e8:5c:9c:83:c6:c3:01:10:e6:a2:
86:df:db:f3:fe:95:0d:5c:62:6a:5f:db:6a:2b:ef:af:25:26:
a6:03:ac:27:7a:55:23:0b:a1:be:58:64:d8:ab:fa:7b:48:f5:
7d:ec:6e:6d:75:f3:2a:f5:74:ab:ac:26:d0:f7:6b:28:9b:46:
3b:e7:79:c6:22:a1:46:46:58:87:6d:63:dd:d3:58:99:33:da:
b3:c8:75:3c:a5:8a:fc:6c:71:17:c8:d0:ea:d2:ba:22:d8:43:
1e:c7:36:b1:d5:1f:f5:f3:f1:f9:0e:cb:30:9c:b6:1a:e0:d9:
4e:c1:12:1b:5d:52:14:82:86:d3:0d:79:5f:18:3d:78:ee:3d:
6c:12:f7:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBr6sXGPc0BaNv+TSCjaWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZWQxMTE2MzBlMDUyOTc3OTVkZGRkMjk4ZWExZmIyOWU2
OTVjNTMwHhcNMjUxMTA0MDQwMTE4WhcNMjUxMTA1MDQwMTE4WjAzMTEwLwYDVQQD
EyhhOGI5ZTk1MTBmMjA4ZTQ5YTJlNTNhZWNmOWUyZmNjODAzZGRhY2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRCWwIzybUyyipCFS9aqGkRX5GpF
S/bf6tdy/fZDFef2GJ/eN1xiKLc3Xs+nNqpbGut0oPG2qrIWxsAt9Z6H7I9UN0j+
n/RmsFtC5s/3fecDUgE71XNJdbWfJLn70R46CO2nncJ/qwrfX1n6dk97gfnORgd1
UrJZQIgB2HZ3P42wnp3C0UwE1H9GfTfule1aaj0PomMBsTRJ0yA1U58MWwzwR5Cy
uAPm714QsWMYoxBZtqMLxDlLLDuWBQUqoKQKOoiR8zrP4lxcN6XvA/GR3wmq+GZQ
94+9ABzZ44yT35R5C1XNbjMLsmVG/t4P0Y9QuMCQqe4Nyv5XFVS7ULYHWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi56VEPII5JouU67Pni/MgD3azwMB8GA1UdIwQY
MBaAFEXtERYw4FKXeV3d0pjqH7KeaVxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80NTQ0MTItYzA2Mi00YjQ1LWE2NDQt
YTAzOGVmMWVmZjM5LzEvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80NTQ0MTItYzA2Mi00YjQ1LWE2NDQtYTAzOGVmMWVmZjM5
LzEvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirxUe6DR
Z2DVHNZwq2yIap21wKw1OkrCWPxPD9MxIKtK/zUOB0DQx2U/MGJRn4sWk4PQYkcP
T8AfV2FYpIItjzW5SFwtfZbqr+3Llfg60Wc+W8dSeXFjzApfQIM43q4+URXgWNCu
5qMecLWi0ATopfl9i/HoXJyDxsMBEOaiht/b8/6VDVxial/baivvryUmpgOsJ3pV
Iwuhvlhk2Kv6e0j1fexubXXzKvV0q6wm0PdrKJtGO+d5xiKhRkZYh21j3dNYmTPa
s8h1PKWK/GxxF8jQ6tK6IthDHsc2sdUf9fPx+Q7LMJy2GuDZTsESG11SFIKG0w15
Xxg9eO49bBL3NA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:02 2025 by rpki-client