Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: o45dLIz65z2PXD7iy8B+ReIB2HRPNBkKZhMZf0gKp3Q=
Subject key identifier: 0C:B3:23:74:9F:E6:7D:41:AB:0F:CA:15:FF:27:46:78:A9:E8:2F:21
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 0197458B97C828A90F767379F8706BD2DA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 1138
Signing time: Fri 06 Jun 2025 14:01:05 +0000
Manifest this update: Fri 06 Jun 2025 14:01:05 +0000
Manifest next update: Sat 07 Jun 2025 14:01:05 +0000
Files and hashes: 1: 4jpGoGfytvkcBWF1AUAJF0-qdUc.roa (hash: RRVQEgJXSCFRfqwvduB081T3vxLgFXzLMjRYLNyG6B8=)
2: 988R5OqLx1cdXJRL_JY-sifrbw8.roa (hash: BOCl4HP9kR43t+HCwvP5qbX3Z6YHP7lJJWGPo5+9LHA=)
3: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: 5DL0rR0MTocMq1zJzM/LQ8vscct2QjAuqv/44Dp2D30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:97:c8:28:a9:0f:76:73:79:f8:70:6b:d2:da:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Jun 6 14:01:05 2025 GMT
Not After : Jun 7 14:01:05 2025 GMT
Subject: CN=0cb323749fe67d41ab0fca15ff274678a9e82f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:2d:69:8b:7a:98:ef:ca:46:35:2c:74:e8:
b9:b2:c8:81:92:e8:e1:61:4e:c5:df:fa:e1:69:f8:
a6:df:8b:97:55:6f:a3:df:dc:0a:72:6a:a6:16:13:
dc:97:be:37:18:3b:42:45:49:bf:dc:18:99:15:79:
6b:2c:e3:0a:f9:93:b2:34:61:60:df:23:e8:7d:d5:
54:63:9d:7a:ce:7f:c5:92:f7:6f:d5:ff:59:08:1b:
48:e4:8a:c3:fa:31:5e:f0:91:7d:ef:d0:42:0f:4a:
21:b6:3b:37:86:52:d9:ea:ef:11:38:7a:0e:37:be:
a2:86:8d:e8:85:64:06:d8:d0:e6:11:9d:f5:ed:b0:
f2:3c:6e:69:7e:f9:c1:b9:4c:c9:27:b2:87:d4:b4:
3d:b4:ef:68:74:58:77:8a:e0:b2:03:24:09:a7:87:
93:c2:2e:de:b5:ec:8a:77:02:04:0a:54:7b:1c:c5:
03:b8:db:0a:61:10:e2:94:60:42:95:7c:a5:05:d8:
e0:cb:25:1f:16:f0:be:17:65:8c:ba:c3:89:9c:eb:
e6:af:8f:a8:dc:55:7c:05:9b:bf:a4:74:59:dd:a3:
d2:14:b6:b8:82:be:00:9d:b4:48:46:73:bf:d2:72:
5b:77:67:c0:13:b2:cb:2a:9e:0e:5c:c1:8b:8f:2c:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B3:23:74:9F:E6:7D:41:AB:0F:CA:15:FF:27:46:78:A9:E8:2F:21
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8a:c0:2b:3f:1e:04:63:53:b3:b8:6e:07:2e:01:84:98:e8:
a3:91:89:85:26:ee:0f:13:e2:ea:0a:60:d0:d8:fa:8e:80:2e:
87:01:2d:0c:29:8b:50:c5:31:69:b1:e2:cd:89:5a:05:87:5b:
a9:26:c5:90:0f:19:65:10:dd:09:52:ee:c3:b4:ab:54:96:a0:
fd:61:72:c9:5b:2b:8d:cf:3e:d7:3e:2b:4f:be:c6:bd:84:5a:
dd:53:44:da:3e:df:97:ed:76:05:09:ca:59:36:73:03:40:84:
cf:f7:33:f2:12:37:74:ea:8d:e1:5a:42:f6:07:a0:75:a1:fa:
32:ab:06:f5:86:1d:87:fd:15:3b:75:34:dc:06:44:95:26:ce:
77:0d:a9:3e:29:e6:4b:89:12:7c:97:f6:a3:e8:11:0a:53:da:
a3:0e:7b:f2:a2:47:5a:cb:28:89:30:63:af:85:28:1e:82:4d:
70:85:3c:ac:9d:a7:6c:13:26:b2:94:4c:76:fb:ff:d2:10:d2:
68:3c:22:e5:22:53:c4:7e:49:11:c6:79:54:6f:fc:f8:e4:42:
23:58:dd:d1:80:c6:4c:d0:22:64:02:49:f3:46:e9:5d:fc:e6:
6e:eb:47:e0:69:bc:55:89:33:d4:9b:00:9e:0f:6f:dc:1b:99:
4f:87:16:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:03 2025 by rpki-client