Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: UD7wvVH4eoEvbTCI12KF+AJfW2aflY80Gx+8lBsi7gM=
Subject key identifier: D0:23:74:3D:26:E6:FC:24:F9:B9:69:C3:69:E1:AC:63:4D:B0:CD:06
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 019773E46D3B57D27F708C9EB826443298CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 1150
Signing time: Sun 15 Jun 2025 14:00:39 +0000
Manifest this update: Sun 15 Jun 2025 14:00:39 +0000
Manifest next update: Mon 16 Jun 2025 14:00:39 +0000
Files and hashes: 1: 4jpGoGfytvkcBWF1AUAJF0-qdUc.roa (hash: RRVQEgJXSCFRfqwvduB081T3vxLgFXzLMjRYLNyG6B8=)
2: 988R5OqLx1cdXJRL_JY-sifrbw8.roa (hash: BOCl4HP9kR43t+HCwvP5qbX3Z6YHP7lJJWGPo5+9LHA=)
3: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: pZMPgUuk+Jb1Y5fdJMJ3b8tX50pJKlh8jRwAoK/Mcng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:6d:3b:57:d2:7f:70:8c:9e:b8:26:44:32:98:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Jun 15 14:00:39 2025 GMT
Not After : Jun 16 14:00:39 2025 GMT
Subject: CN=d023743d26e6fc24f9b969c369e1ac634db0cd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:08:10:64:56:3b:b5:8b:7a:d8:2f:8c:d7:
8a:76:07:b8:2e:a6:b8:18:8f:44:ef:8c:d4:bc:4c:
bc:4e:18:1f:59:6d:7b:c4:86:42:ca:1e:7a:a1:0a:
54:bb:10:d6:86:ba:9c:a1:4b:cb:3d:d6:15:a3:6c:
88:9d:74:6e:0c:f0:76:e2:25:73:49:25:4c:65:af:
4f:3d:bf:91:86:8c:09:10:52:87:d1:31:86:b4:63:
e2:66:36:64:12:c2:d1:0d:6a:18:f5:18:bf:cb:38:
05:df:9b:0c:75:12:45:dc:54:47:73:4e:9a:14:11:
74:ee:09:cb:ad:57:9e:9f:13:aa:d3:0b:8c:7e:71:
ad:13:7d:4f:46:e1:df:b7:47:d0:ad:57:69:2d:b5:
61:8f:d8:16:c4:07:65:0b:38:87:62:8b:c8:26:0a:
ea:aa:1a:03:2c:0d:21:ce:f8:fa:9b:8b:78:b9:5a:
b8:7c:a1:e5:3c:a7:03:1c:64:c0:c5:98:44:19:fe:
c8:22:c5:65:b7:d3:fc:dc:80:13:2f:9a:6d:84:76:
de:bc:19:6c:ae:20:90:a8:65:ac:87:11:2f:e1:15:
a6:70:bb:7a:11:7a:9c:46:08:60:47:97:81:99:5a:
99:e7:18:b1:ab:9c:2a:d1:0c:a0:1f:e3:08:27:96:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:23:74:3D:26:E6:FC:24:F9:B9:69:C3:69:E1:AC:63:4D:B0:CD:06
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:93:4f:b5:29:8e:9e:8f:e4:79:47:f7:2b:9c:4c:44:7d:df:
4a:c2:e0:96:58:7c:3c:40:40:b6:7d:d5:b6:2a:93:36:43:59:
07:4c:cb:12:8b:47:c4:14:25:33:db:d1:44:ff:7b:27:41:c5:
9e:95:23:50:db:79:9a:a6:76:82:93:52:20:97:35:58:25:59:
36:16:df:ec:fe:06:4d:72:95:33:da:2a:0d:ee:8a:95:e7:9e:
4a:13:41:6a:2a:50:b7:76:55:11:66:be:3a:1a:eb:d2:49:13:
c5:61:da:08:2d:6e:68:e5:09:35:ba:f3:7e:94:9c:ee:11:65:
e0:1d:94:a6:e1:d4:b7:32:78:3d:24:36:51:be:16:0e:0b:7c:
de:58:31:52:18:5d:fc:33:66:46:ce:ba:24:c8:21:3e:2e:76:
91:f4:8c:64:71:78:72:0a:ae:c4:82:bc:b1:24:76:07:fb:3b:
54:11:de:0b:e5:3c:3c:7e:16:e8:02:86:fb:a3:60:6f:af:1b:
6a:47:0e:e9:53:31:14:75:ab:a9:80:e2:a3:39:9e:59:0d:35:
2f:b5:11:21:46:db:99:c0:f5:69:ce:b6:98:94:4a:46:00:60:
1b:77:68:ed:9d:fd:3e:5c:6b:8c:e2:8d:05:91:6e:b2:b6:b4:
c6:aa:f4:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdz5G07V9J/cIyeuCZEMpjPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YWQ2ZjFmMWI3MzBjN2EwMTZiNTYyYzEyYjMxYmVjYzRi
M2UxZmEwHhcNMjUwNjE1MTQwMDM5WhcNMjUwNjE2MTQwMDM5WjAzMTEwLwYDVQQD
EyhkMDIzNzQzZDI2ZTZmYzI0ZjliOTY5YzM2OWUxYWM2MzRkYjBjZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8IIEGRWO7WLetgvjNeKdge4Lqa4
GI9E74zUvEy8ThgfWW17xIZCyh56oQpUuxDWhrqcoUvLPdYVo2yInXRuDPB24iVz
SSVMZa9PPb+RhowJEFKH0TGGtGPiZjZkEsLRDWoY9Ri/yzgF35sMdRJF3FRHc06a
FBF07gnLrVeenxOq0wuMfnGtE31PRuHft0fQrVdpLbVhj9gWxAdlCziHYovIJgrq
qhoDLA0hzvj6m4t4uVq4fKHlPKcDHGTAxZhEGf7IIsVlt9P83IATL5pthHbevBls
riCQqGWshxEv4RWmcLt6EXqcRghgR5eBmVqZ5xixq5wq0QygH+MIJ5YPXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAjdD0m5vwk+blpw2nhrGNNsM0GMB8GA1UdIwQY
MBaAFEWtbx8bcwx6AWtWLBKzG+zEs+H6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wMGMwM2MtZDIwNy00ZWMxLTlkZDkt
MzI0NDljZTZjZjg5LzEvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wMGMwM2MtZDIwNy00ZWMxLTlkZDktMzI0NDljZTZjZjg5
LzEvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZNPtSmO
no/keUf3K5xMRH3fSsLgllh8PEBAtn3VtiqTNkNZB0zLEotHxBQlM9vRRP97J0HF
npUjUNt5mqZ2gpNSIJc1WCVZNhbf7P4GTXKVM9oqDe6KleeeShNBaipQt3ZVEWa+
Ohrr0kkTxWHaCC1uaOUJNbrzfpSc7hFl4B2UpuHUtzJ4PSQ2Ub4WDgt83lgxUhhd
/DNmRs66JMghPi52kfSMZHF4cgquxIK8sSR2B/s7VBHeC+U8PH4W6AKG+6Ngb68b
akcO6VMxFHWrqYDiozmeWQ01L7URIUbbmcD1ac62mJRKRgBgG3do7Z39PlxrjOKN
BZFusra0xqr0EA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:50:32 2025 by rpki-client