Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: TNID13jmGurluhKh6AB/lhqh3cDyQ71llRjGqVkoGTA=
Subject key identifier: C1:59:60:71:C1:F2:81:58:52:EF:D1:35:3D:C1:9E:12:6D:BF:03:A6
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 019928FC2AFEFA4A79A19EF49512B2FEDE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 1327
Signing time: Mon 08 Sep 2025 11:00:38 +0000
Manifest this update: Mon 08 Sep 2025 11:00:38 +0000
Manifest next update: Tue 09 Sep 2025 11:00:38 +0000
Files and hashes: 1: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (hash: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=)
2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: UvPD3yQcBuf4A7MooXSr5MKfpvl9aocb7t1FlHjzT6E=)
3: xppN97XlpzM-dgpRtsN2V_p7lZQ.roa (hash: L5C0DF41lLv5y5vXorCy3jzo9T18wVqDFOb9OQ+U5+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:fc:2a:fe:fa:4a:79:a1:9e:f4:95:12:b2:fe:de:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Sep 8 11:00:38 2025 GMT
Not After : Sep 9 11:00:38 2025 GMT
Subject: CN=c1596071c1f2815852efd1353dc19e126dbf03a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:b6:6a:d0:e4:8a:3a:d0:28:71:67:c3:e6:
15:8d:9b:e8:bd:68:a6:4f:5d:19:66:2c:cd:ff:01:
14:ee:d1:17:a6:f3:d8:b2:21:7c:3b:5b:82:75:38:
55:9b:bc:1a:12:63:85:06:f0:79:96:8d:1f:be:e1:
72:dd:73:d5:4c:3a:7e:a9:de:94:ac:27:ba:91:98:
09:12:da:89:18:51:44:45:21:2c:85:01:f4:d5:e4:
66:3d:ca:07:da:53:33:c0:c5:01:f7:0c:5c:d5:32:
a0:05:9a:89:6b:be:55:0a:c4:c4:6a:ed:98:2e:c5:
bd:91:d4:51:01:53:51:1e:75:2e:2f:64:c9:89:09:
3d:ee:6c:07:f1:f5:74:89:aa:0b:3b:d0:b4:69:9d:
e1:3b:3a:12:d4:7c:4d:6e:7a:6b:84:22:91:e7:2a:
0f:5b:10:f4:f8:e3:d4:a0:a4:c0:ae:5e:03:05:ed:
47:5b:9f:b5:1c:97:50:9e:ee:1c:11:90:a3:10:1e:
7d:b1:c5:a3:1b:b9:54:3f:a9:81:09:cb:ed:d0:5e:
3f:4c:f6:52:88:9c:ca:62:fd:d5:2c:e5:2f:ee:2c:
f5:b3:e3:95:04:b7:44:02:0f:44:06:08:88:34:67:
32:dd:cd:f3:98:f0:f3:0c:b3:15:dd:a7:37:42:51:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:59:60:71:C1:F2:81:58:52:EF:D1:35:3D:C1:9E:12:6D:BF:03:A6
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1b:01:7e:9e:f9:9c:95:8d:2f:78:e0:30:a0:c2:a3:aa:3d:
34:ac:68:f2:cb:2b:45:a4:06:e6:93:79:76:d0:42:39:b0:f2:
30:4a:12:d2:ff:fb:9e:92:a2:20:de:04:fa:3d:fc:df:7b:60:
82:f7:e8:d8:1e:aa:24:a7:7b:d5:31:7d:11:dc:21:40:60:7b:
cb:bb:58:1f:b4:32:18:19:1e:77:bc:81:71:51:45:16:86:e0:
a8:77:ed:f6:cc:dd:be:0a:6c:8a:8c:30:e3:38:a4:b1:2f:ee:
b1:2d:58:7d:f5:58:cf:66:72:5b:e1:1f:b8:cd:1f:38:a0:20:
89:ed:cc:39:43:c5:86:8a:cb:27:f8:b1:e1:6d:72:71:86:ef:
5f:b4:bd:72:30:4c:f5:f7:79:cf:55:a7:16:83:7b:22:70:13:
33:0d:d0:90:d5:0d:d1:a8:7d:ca:c5:31:b2:17:17:98:b5:97:
7f:2e:52:7b:83:9c:5f:3f:09:5b:86:d0:61:a9:75:85:8c:5b:
8b:ee:21:eb:dd:a2:e0:d8:6c:fb:cd:0e:a4:a0:21:c9:71:26:
7f:85:a8:38:97:06:55:b4:33:89:cf:ae:c0:1a:6c:78:d5:40:
9d:ce:82:e9:bd:f4:47:9e:73:87:f8:f8:10:d8:86:a2:87:ea:
7f:04:1a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:55:51 2025 by rpki-client