Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: 77kPw90CrIyacGeZEF/KZfqmKLLh6FMR44kh2i6pIqU=
Subject key identifier: D8:44:81:24:90:AD:0D:E6:C2:7C:9C:BD:17:8A:53:23:01:21:BA:7F
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 0197748975B623F67E51C1449B0864DD03F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 1245
Signing time: Sun 15 Jun 2025 17:00:54 +0000
Manifest this update: Sun 15 Jun 2025 17:00:54 +0000
Manifest next update: Mon 16 Jun 2025 17:00:54 +0000
Files and hashes: 1: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (hash: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=)
2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: 7RlOur8H8jOTn0xHiXOjHrQ6UHuTJR/fsUWVRlka9I8=)
3: xppN97XlpzM-dgpRtsN2V_p7lZQ.roa (hash: L5C0DF41lLv5y5vXorCy3jzo9T18wVqDFOb9OQ+U5+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:75:b6:23:f6:7e:51:c1:44:9b:08:64:dd:03:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Jun 15 17:00:54 2025 GMT
Not After : Jun 16 17:00:54 2025 GMT
Subject: CN=d844812490ad0de6c27c9cbd178a53230121ba7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a7:b3:ff:41:37:f3:01:a7:43:4b:9e:0d:93:
97:25:93:be:c7:6f:df:80:90:bc:27:99:0e:27:44:
df:1f:ca:8b:f7:59:26:9c:21:39:26:02:ae:5e:cd:
2c:f1:3f:e2:d2:55:ff:c0:45:f8:cd:53:49:87:0b:
19:6a:aa:3d:e6:39:30:f8:ae:e3:66:5f:09:4e:a7:
b2:3d:68:24:a7:84:9e:cf:d2:08:e1:ad:b9:ab:ad:
77:5a:ab:a7:b3:01:82:6f:82:7b:23:13:46:f8:cb:
81:48:ac:1c:e9:ab:a4:01:48:7f:c1:77:f1:a1:ec:
1c:51:68:47:b1:36:4f:70:52:30:b9:15:35:76:0e:
e7:34:dc:a2:25:6a:3f:87:e8:e0:05:83:db:ed:fb:
e6:bb:b9:db:98:06:55:1d:1a:b7:7c:a9:c6:d1:42:
59:9f:1c:88:b7:50:4e:bd:a3:1b:37:fd:c2:90:e1:
de:b6:d4:bf:f7:20:20:51:33:d9:cb:ca:18:21:75:
91:90:bd:82:ff:cc:f0:fe:37:ed:6f:ec:e2:5a:98:
4b:3b:61:dc:e9:89:46:12:3c:df:24:d3:b8:a9:38:
67:b0:87:92:a7:98:fb:1a:55:ca:a0:e0:9e:86:33:
81:de:2d:7d:c1:bc:8a:64:4c:32:c5:68:96:54:e3:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:44:81:24:90:AD:0D:E6:C2:7C:9C:BD:17:8A:53:23:01:21:BA:7F
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:02:7f:68:29:cc:d7:52:3a:2f:2a:a7:1c:ee:1d:03:93:e0:
a3:db:05:45:32:79:99:e8:a4:10:4b:ee:88:92:6d:6c:31:34:
e7:b8:ad:ca:9e:d0:96:7d:0b:a0:19:cf:ee:61:76:64:38:b0:
09:8d:d8:32:14:59:b8:09:43:03:08:73:41:49:89:92:15:23:
95:53:b0:04:01:d6:37:64:e0:f4:41:5d:df:2d:e4:3b:b9:9c:
cf:2a:45:c9:bb:ca:3e:a5:55:6c:03:3b:75:a9:1b:b5:8b:19:
ca:34:c3:ed:47:87:f7:19:35:eb:d6:32:f9:7c:91:40:3c:b6:
02:c9:e6:1e:0c:6b:f8:42:82:da:eb:7b:24:6b:97:8b:95:55:
fc:05:9b:83:08:90:16:f1:73:cb:b7:21:8f:46:c0:22:61:1f:
34:67:03:a3:b4:fe:37:89:48:36:61:17:7e:af:17:14:d9:41:
6c:c1:2f:3f:2f:45:f2:a9:c9:40:1d:f3:e9:c0:b6:2c:2b:94:
93:cb:a1:8b:9d:ee:bd:68:d4:78:bc:3f:90:58:48:a8:ad:aa:
a7:e8:8a:6b:ce:2a:fe:83:c0:3d:f6:3d:37:4a:44:8c:74:76:
64:c9:8b:7a:f0:a0:8a:4b:76:4d:0f:f1:0f:4a:d8:b6:a9:3a:
09:05:29:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0iXW2I/Z+UcFEmwhk3QPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YWE4OGRjNjc1Y2U1ZGMzNTU3NGJmZjYyOTBlMmFlODhj
ZTA4MmIwHhcNMjUwNjE1MTcwMDU0WhcNMjUwNjE2MTcwMDU0WjAzMTEwLwYDVQQD
EyhkODQ0ODEyNDkwYWQwZGU2YzI3YzljYmQxNzhhNTMyMzAxMjFiYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qez/0E38wGnQ0ueDZOXJZO+x2/f
gJC8J5kOJ0TfH8qL91kmnCE5JgKuXs0s8T/i0lX/wEX4zVNJhwsZaqo95jkw+K7j
Zl8JTqeyPWgkp4Sez9II4a25q613WqunswGCb4J7IxNG+MuBSKwc6aukAUh/wXfx
oewcUWhHsTZPcFIwuRU1dg7nNNyiJWo/h+jgBYPb7fvmu7nbmAZVHRq3fKnG0UJZ
nxyIt1BOvaMbN/3CkOHettS/9yAgUTPZy8oYIXWRkL2C/8zw/jftb+ziWphLO2Hc
6YlGEjzfJNO4qThnsIeSp5j7GlXKoOCehjOB3i19wbyKZEwyxWiWVOOyIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhEgSSQrQ3mwnycvReKUyMBIbp/MB8GA1UdIwQY
MBaAFEWqiNxnXOXcNVdL/2KQ4q6IzggrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMt
MWQ3YjIyOWQ0ZTNiLzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMtMWQ3YjIyOWQ0ZTNi
LzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgJ/aCnM
11I6LyqnHO4dA5Pgo9sFRTJ5meikEEvuiJJtbDE057ityp7Qln0LoBnP7mF2ZDiw
CY3YMhRZuAlDAwhzQUmJkhUjlVOwBAHWN2Tg9EFd3y3kO7mczypFybvKPqVVbAM7
dakbtYsZyjTD7UeH9xk169Yy+XyRQDy2AsnmHgxr+EKC2ut7JGuXi5VV/AWbgwiQ
FvFzy7chj0bAImEfNGcDo7T+N4lINmEXfq8XFNlBbMEvPy9F8qnJQB3z6cC2LCuU
k8uhi53uvWjUeLw/kFhIqK2qp+iKa84q/oPAPfY9N0pEjHR2ZMmLevCgikt2TQ/x
D0rYtqk6CQUpVA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:41:18 2025 by rpki-client