Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: iPyA5XxZ3TGmHU5G7+qB+1V1IK2+uB/gpGgJTHtaBVw=
Subject key identifier: C5:27:73:82:62:BF:DE:0D:86:CB:B3:A8:C8:E4:F8:45:9E:CC:EF:D5
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 01984A40DFCB5329C9A2EFEFBB730939F1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 11BF
Signing time: Sun 27 Jul 2025 05:00:22 +0000
Manifest this update: Sun 27 Jul 2025 05:00:22 +0000
Manifest next update: Mon 28 Jul 2025 05:00:22 +0000
Files and hashes: 1: 4jpGoGfytvkcBWF1AUAJF0-qdUc.roa (hash: RRVQEgJXSCFRfqwvduB081T3vxLgFXzLMjRYLNyG6B8=)
2: 988R5OqLx1cdXJRL_JY-sifrbw8.roa (hash: BOCl4HP9kR43t+HCwvP5qbX3Z6YHP7lJJWGPo5+9LHA=)
3: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: S/KRgTxX2CKXwyrQNSfJ5wDg89uYAWWUkZgO3Iau+iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:df:cb:53:29:c9:a2:ef:ef:bb:73:09:39:f1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Jul 27 05:00:22 2025 GMT
Not After : Jul 28 05:00:22 2025 GMT
Subject: CN=c527738262bfde0d86cbb3a8c8e4f8459eccefd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:2e:ce:0b:4a:3f:49:6e:2a:c8:6b:03:ac:
0c:c2:2d:18:31:39:b3:ac:fc:b1:9b:cb:be:1e:56:
23:a0:3b:34:14:16:cb:cc:72:09:ec:2f:94:64:1e:
2b:9f:77:46:b8:e3:6a:c0:1c:68:f9:f1:7d:a3:59:
b9:36:bd:f7:19:70:08:20:82:0e:0a:72:0f:36:05:
7c:db:a8:cb:e4:89:03:0e:5e:a7:aa:0f:74:4b:4d:
53:0f:ea:e5:19:04:46:a8:3d:78:0b:94:ac:c6:bc:
52:fd:08:74:cf:2e:57:a4:7a:e8:8b:42:29:b6:d5:
dc:8f:98:58:b0:2d:e3:77:55:3f:fc:a8:ec:0d:a9:
7f:ee:7f:07:bd:c3:30:56:be:6f:a9:81:db:84:07:
7d:8d:4c:cf:d2:ce:bb:b5:80:ac:f5:9f:cd:a8:62:
43:55:77:c4:b6:ee:0b:3b:34:d0:80:1c:60:36:02:
77:d8:68:b0:2a:78:96:c1:24:2e:08:90:d8:23:ad:
a6:07:e0:a4:34:83:eb:1e:04:fe:59:bd:04:0e:46:
ac:a9:91:5b:3e:aa:f1:33:6c:e1:2a:7b:35:93:1a:
2a:2d:db:f4:cf:ea:d5:f9:99:1b:1c:2f:d3:cc:fb:
02:5b:7e:4d:aa:78:a2:f4:c0:a7:fe:ca:4f:63:39:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:27:73:82:62:BF:DE:0D:86:CB:B3:A8:C8:E4:F8:45:9E:CC:EF:D5
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ea:05:e4:af:62:af:ae:97:7e:d5:95:ff:a0:eb:5c:99:71:
f8:55:b0:92:d2:23:93:4e:3e:bd:7c:65:3e:f2:1e:1a:e8:a8:
63:dd:4b:16:5f:eb:ae:9b:70:28:24:7e:30:54:03:fe:c9:37:
22:b6:74:6e:ca:fd:3c:92:12:00:bf:11:f2:a2:d9:35:56:38:
bb:d4:ef:3a:24:d9:e5:3b:a1:39:9f:8a:8a:a5:b3:cf:ed:cb:
0a:cc:2f:ae:bd:d5:92:a7:44:4b:fd:fa:c0:ff:34:a8:c5:8a:
82:b2:a0:cf:4c:69:d8:20:2e:cb:e6:68:48:e3:fe:5f:2a:7a:
d0:8e:b1:85:f2:2e:3f:66:b1:98:a7:b3:3a:4a:48:9e:bd:45:
b5:3c:5f:36:49:4f:45:b8:c9:a8:c7:ce:26:64:84:84:f3:f8:
d4:37:a9:1b:a3:b8:ad:45:10:19:96:70:55:93:8b:57:8c:de:
09:15:6b:4a:73:0e:fe:c5:cc:16:af:be:cb:f0:61:f1:38:24:
29:e5:d0:00:71:50:9a:29:20:0f:3f:0d:30:fa:c5:36:ae:2e:
16:64:d5:2a:b8:d8:75:54:eb:43:47:da:a3:2f:27:ac:09:08:
18:f7:bf:cc:bc:da:0d:71:ac:7d:da:1e:0e:b2:be:4e:d1:f4:
85:36:f5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:24:21 2025 by rpki-client