Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: LiWCof4k+C1ESbDW3kv1CUtn/VZJ2tU57HWLVdPCD48=
Subject key identifier: B2:56:CF:34:77:9A:A8:81:EA:3C:57:B2:B1:24:25:D5:28:5F:4C:92
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 019835A7AEB7BDED09FAADB40AECC5E158FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 12A9
Signing time: Wed 23 Jul 2025 05:00:38 +0000
Manifest this update: Wed 23 Jul 2025 05:00:38 +0000
Manifest next update: Thu 24 Jul 2025 05:00:38 +0000
Files and hashes: 1: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (hash: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=)
2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: FwfmghzBQYbMVO7WSee7bhpT4a5sHumWSAE+t1YpkpY=)
3: xppN97XlpzM-dgpRtsN2V_p7lZQ.roa (hash: L5C0DF41lLv5y5vXorCy3jzo9T18wVqDFOb9OQ+U5+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:a7:ae:b7:bd:ed:09:fa:ad:b4:0a:ec:c5:e1:58:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Jul 23 05:00:38 2025 GMT
Not After : Jul 24 05:00:38 2025 GMT
Subject: CN=b256cf34779aa881ea3c57b2b12425d5285f4c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:73:01:fa:d9:7f:e5:00:cc:7b:77:a5:42:
b9:b3:f4:d8:2c:8d:37:01:48:fe:ab:c5:ef:e4:4f:
fb:2b:48:52:46:aa:4d:2b:6e:2e:94:cd:78:f5:29:
00:2d:ea:62:f3:6d:0a:9f:22:37:64:15:46:3e:1c:
18:54:f2:d0:88:0a:5a:fb:3a:f8:25:da:45:83:63:
32:46:20:2f:56:c0:f6:17:a6:ff:04:4b:36:f9:5e:
9e:64:d7:48:1d:e8:47:24:7f:54:7d:19:1b:0a:a4:
c0:27:ec:0d:ba:c7:ad:e9:f6:46:da:cd:d0:89:3b:
2c:18:ed:ba:db:b3:40:43:81:3b:f9:ac:ec:50:8f:
14:99:fc:b6:68:ac:bb:03:82:4a:53:a3:90:31:00:
87:8d:ee:08:be:4b:23:3d:7e:37:8c:06:00:df:b8:
c3:a4:17:86:87:49:3a:ad:c1:f4:ca:af:41:8d:b8:
63:13:5f:b2:56:67:38:8b:05:31:ea:d1:d2:5b:e5:
7e:1c:da:93:7f:95:98:f6:a1:f7:92:9c:c4:56:e4:
c2:bf:23:4e:30:5f:5b:27:7f:a2:80:15:01:37:13:
de:af:d6:53:35:bb:75:ad:ee:53:98:1d:70:a5:41:
7e:43:a8:71:cf:34:0f:9d:25:07:4d:6c:1c:04:40:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:56:CF:34:77:9A:A8:81:EA:3C:57:B2:B1:24:25:D5:28:5F:4C:92
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0f:71:d8:42:6d:17:58:51:56:a6:7a:f0:5d:0f:85:88:31:
16:47:2d:c2:7a:52:76:03:d9:3b:b1:ea:64:b0:bb:3e:df:a0:
d6:8d:8e:f4:e4:37:97:63:c4:48:03:a7:92:f9:3f:3d:ea:96:
48:ad:11:96:0b:c3:44:7a:92:82:77:9f:9f:22:93:dc:66:e2:
bc:de:99:22:6d:9c:3d:19:71:e9:24:cb:5f:62:8f:11:6d:a6:
16:1f:96:32:5d:c9:37:6a:b3:f9:5b:47:81:7d:d1:98:4c:78:
45:12:b9:a8:97:41:99:1f:04:e8:91:b5:d7:1e:0f:92:b7:92:
ca:fb:ba:82:5e:01:9a:6e:65:44:1d:95:25:5b:b2:52:5e:fd:
ca:c9:d9:35:a8:99:6a:9d:32:63:0b:22:a4:a6:dc:4e:f2:c2:
5e:67:86:40:d5:f3:1e:a2:fe:85:ee:cc:72:6e:7a:37:e2:23:
7c:13:fc:ac:2a:29:30:27:90:56:a4:9a:fb:92:7c:ba:6b:a4:
2f:ad:9c:5b:5a:cf:39:ff:f2:44:8c:5c:8f:fe:6e:a0:af:1b:
9e:0e:63:56:16:a5:a0:a9:33:58:88:7d:88:e8:bd:61:ef:66:
4b:2d:0e:27:fd:f6:48:8e:45:45:61:09:e6:af:de:5c:56:24:
99:1d:7c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:14:03 2025 by rpki-client