Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: vAzb3Cuk5Z/S0xxPIHcHfabLrlbsRzOGleRgqJOCnz4=
Subject key identifier: E2:B3:66:C1:88:49:BB:4B:BC:16:49:65:32:1B:65:24:33:BF:F2:68
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 019A2D0D54FE64D291B6430517DF390974DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 12B9
Signing time: Tue 28 Oct 2025 23:00:39 +0000
Manifest this update: Tue 28 Oct 2025 23:00:39 +0000
Manifest next update: Wed 29 Oct 2025 23:00:39 +0000
Files and hashes: 1: 4jpGoGfytvkcBWF1AUAJF0-qdUc.roa (hash: RRVQEgJXSCFRfqwvduB081T3vxLgFXzLMjRYLNyG6B8=)
2: 988R5OqLx1cdXJRL_JY-sifrbw8.roa (hash: BOCl4HP9kR43t+HCwvP5qbX3Z6YHP7lJJWGPo5+9LHA=)
3: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: w4Tf8zzXXmjeyGq7j2qeLHfZMW9PICOeMm0TagMowwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:0d:54:fe:64:d2:91:b6:43:05:17:df:39:09:74:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Oct 28 23:00:39 2025 GMT
Not After : Oct 29 23:00:39 2025 GMT
Subject: CN=e2b366c18849bb4bbc164965321b652433bff268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:27:27:3e:86:d3:1f:32:04:7c:f4:c7:cd:
54:e2:d6:14:4e:b8:35:0d:14:10:1a:a3:fa:48:fb:
af:88:c5:61:aa:07:53:81:85:9e:2b:03:b6:9e:bc:
35:27:e2:d4:84:f0:71:c4:a6:63:87:cc:c2:4f:b4:
27:8e:ec:32:a7:4a:d6:26:c9:2c:d7:7c:76:97:72:
3c:93:d5:5c:d1:d6:77:cc:1c:5a:8f:31:b8:1f:d1:
5a:de:98:4f:68:2e:88:77:64:6e:9c:05:98:7a:2f:
4a:dd:ec:58:0e:04:1f:ba:8b:ec:e6:66:fe:58:1a:
a3:1d:13:05:d2:ec:61:3f:d2:f5:06:da:99:c2:1a:
0e:1d:7c:ae:a4:11:e3:f9:c2:c2:aa:49:c6:45:25:
be:1d:84:81:4b:5e:ff:ab:00:2f:ba:77:69:a5:14:
ee:4e:7c:3c:e2:59:7c:b1:69:4c:02:db:90:87:81:
37:6b:ba:f5:8c:50:2f:02:58:53:27:b7:93:5d:78:
92:23:e5:07:ce:09:f5:0b:2f:b9:36:c0:1a:b3:08:
f5:55:9b:2b:69:9f:05:cc:f2:50:c0:64:f4:95:1f:
7f:a2:d9:e9:2c:8c:45:7c:66:cb:33:dd:9d:fb:63:
b8:8e:d3:70:5c:22:76:63:76:eb:52:84:b0:7c:bd:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B3:66:C1:88:49:BB:4B:BC:16:49:65:32:1B:65:24:33:BF:F2:68
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c0:f1:97:8b:84:fa:dc:a8:19:5a:75:26:e7:e2:6d:8b:a1:
b4:54:f0:38:8a:f2:67:ad:ec:7a:a7:66:14:79:37:74:69:0e:
45:7e:22:39:7b:b4:ab:cd:40:49:4f:85:97:56:6b:51:86:b5:
64:32:6d:41:99:50:fc:1d:de:93:f3:16:2b:93:73:1b:2a:62:
f7:aa:37:ee:e3:52:ec:20:f1:7a:75:85:26:e3:91:e7:e5:34:
7e:da:e2:b0:9c:ea:22:1e:99:aa:eb:52:c4:13:2e:91:0a:ec:
7c:52:67:ae:65:1a:69:c8:28:9e:24:8c:94:41:46:10:9c:d8:
ab:f1:91:0c:9d:d1:bf:92:29:bb:5b:3f:c6:23:d9:2e:7a:6e:
e6:d4:bc:0e:7f:2e:34:7f:54:ce:67:e9:83:05:83:d5:11:d4:
d7:92:22:9e:62:d7:44:5b:f3:fb:0e:27:82:e8:c9:93:cd:04:
ae:9c:9b:4b:54:5f:79:7b:94:15:80:9c:76:09:4d:d1:24:b8:
77:1d:0f:7c:86:cb:04:82:8b:ac:de:66:d9:78:85:42:50:f4:
81:2f:a1:16:d4:98:0e:0d:33:0f:36:83:4f:87:4b:de:b4:d0:
5e:a9:0b:aa:2e:82:d4:25:da:7f:aa:79:0e:c1:1b:11:c2:27:
d0:76:41:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 02:33:04 2025 by rpki-client