Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: paqYkYFg7qfq6s1lcNc17XjP29M57EDevgVyqnb7+Vs=
Subject key identifier: B7:C2:A1:79:D7:FA:A4:CC:EB:D2:F0:64:65:07:A6:3B:28:20:18:2F
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 01987F0A9DB8E3F104F8A3EC13BEF7E70F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 12CF
Signing time: Wed 06 Aug 2025 11:00:58 +0000
Manifest this update: Wed 06 Aug 2025 11:00:58 +0000
Manifest next update: Thu 07 Aug 2025 11:00:58 +0000
Files and hashes: 1: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (hash: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=)
2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: 2U9WBk5We4OGB6oNAbLGGuhQ46JFmQAid9J/5esoClo=)
3: xppN97XlpzM-dgpRtsN2V_p7lZQ.roa (hash: L5C0DF41lLv5y5vXorCy3jzo9T18wVqDFOb9OQ+U5+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:9d:b8:e3:f1:04:f8:a3:ec:13:be:f7:e7:0f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Aug 6 11:00:58 2025 GMT
Not After : Aug 7 11:00:58 2025 GMT
Subject: CN=b7c2a179d7faa4ccebd2f0646507a63b2820182f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:40:de:e1:7f:19:4a:51:8b:f1:69:70:f3:
6d:a8:c9:7c:c8:7a:69:41:9e:92:10:df:5e:19:c6:
df:9e:e7:6a:2c:fc:f5:98:fe:36:fe:5f:fe:fb:e5:
7d:3c:84:bd:76:2b:2e:a9:92:56:f6:6a:f4:03:61:
23:29:23:5d:3d:2f:47:b6:27:39:ab:64:62:c3:53:
61:7d:10:4b:cc:48:79:d3:a6:b8:ff:27:aa:13:a0:
f1:4f:23:f7:28:2a:52:99:49:b9:93:9b:56:b6:93:
43:f3:d1:1d:f4:ef:c0:4b:8b:6b:2e:67:3b:16:ac:
a6:46:91:ed:f3:c3:d4:ad:f8:4a:f5:e3:96:4a:c8:
e6:03:b7:43:9d:25:4f:ad:2d:dc:10:54:0d:1d:81:
82:8a:fd:7a:cf:84:a2:7a:4c:eb:b5:2c:b1:85:0e:
09:72:0c:94:05:72:31:4e:4e:57:8c:13:d6:20:59:
2c:b7:8f:c4:8b:07:a0:53:ef:42:18:97:6c:81:54:
b3:6c:70:34:65:2e:22:a7:a5:11:4f:a6:3e:9f:4f:
1a:bb:8b:8f:f7:1c:c9:4c:b5:ec:0f:84:60:59:e4:
be:c9:da:0d:ac:fe:d9:d2:81:cf:a3:04:97:70:38:
97:f2:37:19:91:77:13:f7:9b:68:e8:60:a3:4c:08:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C2:A1:79:D7:FA:A4:CC:EB:D2:F0:64:65:07:A6:3B:28:20:18:2F
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:77:16:b4:c9:51:7d:02:52:cf:db:13:5f:7c:65:fb:a5:2a:
93:5e:01:28:cf:3a:bc:ae:f9:56:54:99:d4:a5:a1:12:d5:ec:
a3:f8:08:e4:42:8a:dd:b4:74:36:ce:43:80:c7:80:29:5f:40:
1c:b5:48:a5:3e:89:eb:7f:a9:22:29:28:9c:7f:57:45:0a:4e:
02:12:61:dc:85:77:93:50:05:5b:81:db:a5:10:b6:ed:77:32:
07:74:ba:b8:f5:76:a3:0f:bf:5d:95:54:a4:8f:e9:42:d8:fd:
c5:88:74:fe:22:46:98:07:91:50:04:25:4e:9c:20:2e:23:a3:
bc:d2:1d:4b:9a:a2:99:f3:be:70:58:3f:3f:9f:a6:e3:83:be:
e6:d0:bd:aa:34:6a:0a:0c:4c:c5:30:0a:95:0a:89:d1:6b:6f:
1a:0c:01:d0:c7:0a:21:cd:7f:b1:2d:2b:b1:c9:1d:fc:aa:0e:
61:8a:f3:cf:9f:c9:1f:65:f6:91:02:00:ce:f1:1b:57:00:1d:
70:4c:ec:cf:01:9b:d8:25:c9:85:25:77:26:75:55:f0:e9:5b:
de:5f:08:ff:b4:bf:8b:0f:44:3c:91:3a:36:8c:9f:b5:b7:b6:
f0:37:fd:72:3c:18:40:f4:42:d3:5f:91:ca:b8:99:8b:b7:ee:
12:02:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:25:39 2025 by rpki-client