Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: sUnU6gc4vxtAVmi3zbo6mqLGMn8bPBxHCmVtBm7FyW8=
Subject key identifier: CD:35:22:42:15:CE:07:25:F0:8B:41:F1:EB:49:0C:BF:93:9E:00:21
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 019A2FA033E521168D3D8E9D8AFFA329CCB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 13AF
Signing time: Wed 29 Oct 2025 11:00:19 +0000
Manifest this update: Wed 29 Oct 2025 11:00:19 +0000
Manifest next update: Thu 30 Oct 2025 11:00:19 +0000
Files and hashes: 1: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (hash: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=)
2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: skECCObMKSjlxyu4Q3izTQbmYB+CvWLqKG+Pj31+KxA=)
3: xppN97XlpzM-dgpRtsN2V_p7lZQ.roa (hash: L5C0DF41lLv5y5vXorCy3jzo9T18wVqDFOb9OQ+U5+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:a0:33:e5:21:16:8d:3d:8e:9d:8a:ff:a3:29:cc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Oct 29 11:00:19 2025 GMT
Not After : Oct 30 11:00:19 2025 GMT
Subject: CN=cd35224215ce0725f08b41f1eb490cbf939e0021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:93:f8:07:e0:e8:5a:c0:e1:ce:05:14:89:
9b:e0:e1:e0:79:46:71:c0:93:1c:c8:21:6b:16:f7:
6d:59:ef:76:4b:48:34:f4:87:84:ca:ae:7a:23:f2:
c9:98:b8:72:2a:3a:3d:ed:eb:3c:ce:44:fe:ee:bb:
7a:34:57:dc:39:fd:ba:85:74:13:75:7d:c9:7d:8b:
8c:f6:d0:13:c3:22:02:57:9d:cc:47:06:6a:28:ef:
8b:47:fc:f2:f3:0a:e5:b9:3c:81:4e:d4:fb:d6:93:
06:ac:f4:b9:57:9f:3c:75:83:5e:28:e2:49:5e:d1:
33:03:fc:a6:26:3b:42:e6:b2:cf:e1:bb:76:60:45:
d0:27:8b:e3:94:83:77:66:f5:e8:59:78:f7:e0:29:
dc:44:e3:9b:db:1e:13:ed:72:db:24:06:0a:81:df:
87:8e:a8:a0:79:cf:c4:61:ce:73:c8:19:00:0f:02:
92:6a:df:82:27:d9:78:f3:6f:91:6d:06:6c:ad:54:
5d:0f:26:5f:46:2d:1c:a5:14:fd:bd:f8:69:42:f1:
35:95:51:66:ad:0f:06:80:91:8a:f3:f7:39:a8:18:
56:73:6e:23:34:c5:bd:52:75:56:ad:ca:79:fa:7e:
02:45:a3:e4:62:e0:fa:b7:52:e3:8e:df:2f:16:81:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:35:22:42:15:CE:07:25:F0:8B:41:F1:EB:49:0C:BF:93:9E:00:21
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1f:74:82:35:20:c8:0b:89:01:4f:08:b3:93:f2:1e:f2:e7:
10:3b:4a:fb:3c:fd:83:0a:19:d0:be:d2:65:8a:dc:b0:d3:c2:
d1:b1:a3:2a:1b:3b:90:d8:fb:a0:d2:40:46:5d:49:86:1c:04:
1f:2e:37:dd:9a:04:fa:d7:9c:bd:d9:d3:4a:de:e6:c3:0a:35:
47:1e:ff:c2:1b:8a:24:80:09:21:83:36:aa:26:b3:aa:1d:56:
cb:44:f5:0b:9c:74:d9:d4:8c:26:ed:f6:a2:72:81:cf:b0:34:
a4:dd:f3:fa:e4:d5:e6:ac:6c:35:5d:a2:c6:bd:3f:86:0c:a4:
4c:aa:09:c9:be:ea:d0:07:3e:40:8f:19:56:97:aa:84:18:45:
55:cd:c2:1f:1b:dc:c7:3b:e5:80:50:d2:fd:ef:ce:23:9c:a2:
4b:5b:89:4a:97:eb:d0:de:79:a2:ee:0f:99:d8:db:f3:ca:13:
40:a8:fc:69:56:16:d9:7e:e9:56:74:74:55:2c:96:cd:cb:ed:
13:ea:11:8a:ff:fd:21:80:ef:ea:e9:c6:be:5d:71:1d:24:42:
2e:f3:0a:fc:32:74:42:bb:ee:ca:d7:c0:7c:5f:06:98:d2:0c:
e4:db:7c:71:7d:38:76:47:e2:a7:9b:8d:40:d5:6c:eb:f8:45:
a2:ce:05:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 17:52:59 2025 by rpki-client