Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: 0DcWv3wbM/0zsX84P3NZjgNux5nZRFyd6UY4WhpjO2Q=
Subject key identifier: 05:98:17:8B:1A:19:2B:F6:91:B3:44:D5:1B:B1:1D:8B:F6:93:78:E7
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 019A4E864BCB7F33F63B7DB63627A3F30912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 13BF
Signing time: Tue 04 Nov 2025 11:00:15 +0000
Manifest this update: Tue 04 Nov 2025 11:00:15 +0000
Manifest next update: Wed 05 Nov 2025 11:00:15 +0000
Files and hashes: 1: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (hash: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=)
2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: soQN+lKS6C6eKMWTzbpssZhvP2STZxlW/aslBo5Qi8o=)
3: xppN97XlpzM-dgpRtsN2V_p7lZQ.roa (hash: L5C0DF41lLv5y5vXorCy3jzo9T18wVqDFOb9OQ+U5+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:4b:cb:7f:33:f6:3b:7d:b6:36:27:a3:f3:09:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Nov 4 11:00:15 2025 GMT
Not After : Nov 5 11:00:15 2025 GMT
Subject: CN=0598178b1a192bf691b344d51bb11d8bf69378e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:9b:45:03:3b:9b:14:c1:85:55:c3:09:3b:
07:fd:79:a6:45:cd:b5:6f:4d:07:6f:0e:ac:03:0d:
32:30:6f:34:81:06:33:c0:53:0f:45:d9:1e:0c:6d:
81:c7:a5:7d:c7:9a:75:0e:34:91:23:e9:6f:88:5b:
b7:88:7f:05:72:d4:31:73:36:13:f8:dc:1f:71:7d:
6a:f7:1e:22:19:d3:90:2e:72:65:b9:ef:28:97:7d:
ca:31:0e:06:34:ec:7d:19:3a:52:06:d1:ad:7b:50:
97:7f:e9:39:48:43:bf:48:b3:ac:32:ac:6c:83:c1:
35:08:7a:4c:70:a4:3a:cb:89:13:07:9e:aa:d4:29:
59:0d:db:65:31:09:ae:74:a0:06:55:12:3d:2a:ad:
75:26:79:1f:3e:7d:72:1d:30:53:67:17:58:1a:0c:
14:8f:42:7d:a6:6a:8b:11:5b:72:e9:95:1a:0d:18:
d8:01:c5:db:31:70:cc:78:01:32:7f:9a:59:4f:7f:
98:9c:82:db:82:51:ab:d9:b5:15:49:f1:96:50:e8:
b6:0b:e2:3b:95:d1:9d:21:52:f4:b3:d3:f2:86:32:
c7:02:9e:bf:cc:8a:8b:fd:e6:39:a3:9f:35:e1:c9:
16:77:d5:dd:4a:f5:b7:19:13:57:1e:71:f1:40:66:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:98:17:8B:1A:19:2B:F6:91:B3:44:D5:1B:B1:1D:8B:F6:93:78:E7
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:14:ef:24:b9:a1:d3:a9:27:9d:e6:80:28:20:23:10:2d:89:
4f:a9:97:33:ba:a1:b4:24:37:d8:e0:4f:3f:5e:d0:bc:f2:66:
90:47:d8:6f:4b:b5:a5:71:9c:13:99:e3:ee:44:2b:51:76:30:
52:a0:1e:f5:de:00:71:dc:5c:ee:2e:f8:53:90:3f:f6:20:14:
40:5d:1e:a3:38:bb:17:64:7c:d0:c7:96:f1:8d:ee:80:64:27:
8e:36:ff:e0:42:2b:3c:df:12:63:0e:80:b4:60:4e:37:6c:4d:
dd:09:8b:08:ad:63:74:25:c6:f3:15:24:95:73:a3:cc:29:83:
93:d6:2e:18:30:81:35:25:1a:33:17:de:c2:1a:d1:3d:3b:7c:
6f:ea:5e:41:6c:d8:9d:bd:4c:97:76:87:1a:b3:af:be:e6:10:
a8:a0:b2:c5:c2:70:44:b1:82:d8:7f:74:ab:5f:90:b2:90:ad:
f6:95:15:c2:d8:27:58:63:a9:d8:9d:24:a3:de:44:e1:03:3f:
9b:fd:38:29:1e:ed:29:b6:d2:1f:9e:61:bc:cd:9a:b6:ac:a4:
69:8c:29:47:d9:21:ed:21:1a:fd:4d:50:69:50:94:ae:d5:61:
38:33:88:a0:cb:04:c5:f0:2e:49:4c:4f:f0:30:7f:c7:fb:aa:
01:11:43:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:10 2025 by rpki-client