Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: 4/kOxrp+Pg+xMhqN/GaAUbtYLjXlVL9n6EE6/aECWlk=
Subject key identifier: A9:4E:74:89:BB:0F:1D:16:EB:68:B4:67:37:5A:55:B1:9E:76:92:3A
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 019933ED9E6476BFBD020F56FF1F3BA9C068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 1238
Signing time: Wed 10 Sep 2025 14:00:34 +0000
Manifest this update: Wed 10 Sep 2025 14:00:34 +0000
Manifest next update: Thu 11 Sep 2025 14:00:34 +0000
Files and hashes: 1: 4jpGoGfytvkcBWF1AUAJF0-qdUc.roa (hash: RRVQEgJXSCFRfqwvduB081T3vxLgFXzLMjRYLNyG6B8=)
2: 988R5OqLx1cdXJRL_JY-sifrbw8.roa (hash: BOCl4HP9kR43t+HCwvP5qbX3Z6YHP7lJJWGPo5+9LHA=)
3: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: 5553qsHQeeDKsQWqUrCS8tbscrlDLEtXYK8w1oz8UO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ed:9e:64:76:bf:bd:02:0f:56:ff:1f:3b:a9:c0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Sep 10 14:00:34 2025 GMT
Not After : Sep 11 14:00:34 2025 GMT
Subject: CN=a94e7489bb0f1d16eb68b467375a55b19e76923a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:71:de:1c:43:ab:e2:5e:0c:1a:c6:1c:a6:
96:2b:1a:b6:8a:58:0e:09:ee:0b:c1:1c:ef:94:0f:
bc:92:7a:30:6b:68:b2:56:22:ca:33:64:7e:ea:8c:
5f:f8:75:14:d9:7b:7b:8f:1d:ac:3f:01:96:c6:79:
6f:15:65:04:58:00:78:5f:21:d5:96:41:3e:a8:57:
e0:43:5b:47:4c:50:74:f8:3f:66:27:f0:61:49:fb:
f1:b6:5b:45:b2:e9:ab:45:f0:66:77:b5:46:92:7d:
73:d9:07:b8:95:85:ad:56:0a:73:e6:2b:cb:c6:b4:
56:89:73:ed:b2:09:ca:36:87:67:4b:6f:84:c0:f1:
86:4c:4e:57:f8:f9:5b:9a:32:43:1e:8a:d1:cb:b0:
9a:34:80:ef:da:bd:61:a0:b5:27:ab:cc:d2:d2:da:
2f:00:04:27:1f:09:93:8e:8d:9d:48:5b:53:29:e6:
d1:cc:89:0b:b8:36:03:1e:6b:f9:fc:af:e0:2c:81:
0e:e5:b0:c3:91:fb:f5:99:cd:db:7d:3a:62:43:a8:
71:4a:f2:c3:b8:55:06:e5:c2:78:e7:e7:93:fb:e8:
d3:eb:7f:54:40:36:9a:81:8e:0c:f7:78:94:8a:eb:
11:4e:08:c1:a4:f3:33:83:70:cc:56:40:3b:31:5b:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4E:74:89:BB:0F:1D:16:EB:68:B4:67:37:5A:55:B1:9E:76:92:3A
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b8:c2:be:d5:1b:c4:4e:4b:0e:60:32:12:0f:ff:53:dd:48:
b6:ce:24:0f:8b:71:65:b1:15:16:13:03:61:89:6b:2d:76:eb:
cd:e2:81:43:91:bc:23:ba:e5:98:24:30:21:5f:a5:f4:e8:54:
2a:dd:c1:bb:5b:9a:c5:08:2d:80:01:d2:dc:f1:78:5f:93:dd:
8f:d3:11:94:6f:ae:09:ad:91:5f:58:cf:ee:f0:29:ad:1b:ec:
25:5b:f6:b8:df:b6:bf:7c:ce:4e:f0:a3:5d:32:2e:ac:31:43:
70:f0:82:da:9b:53:c2:ef:66:62:32:41:f9:5f:35:b5:90:86:
cb:5e:08:3f:59:97:67:98:44:02:ee:25:77:01:9f:8e:e5:b8:
19:3b:f8:fe:9c:d2:b4:e2:05:bc:87:d9:41:c0:de:8b:64:40:
8e:4a:13:14:88:3f:96:93:d9:f0:a4:ab:7b:93:94:d7:0e:46:
1b:6e:65:11:9f:b7:cd:a8:65:4e:d1:0d:1d:a9:f3:3a:f7:d7:
73:99:71:74:2f:67:4c:f8:43:5a:d9:ba:1b:86:2f:1e:13:2b:
69:0c:16:a6:f1:61:34:88:81:a7:14:09:04:8c:07:2a:ac:80:
39:c2:b0:37:24:51:cb:3d:10:fd:7d:14:ef:b7:1d:33:4c:11:
a6:ff:28:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:13:52 2025 by rpki-client