Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: EWnBCR/6crp6HCTXT4fQ35d5fGGGnfpxVzjqjLbvn2Y=
Subject key identifier: 82:0D:8F:53:9E:90:56:4E:B2:35:EC:D3:C4:7F:E0:0E:12:46:90:E7
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 019874BD9410EFF6FA51EB48075E43CA2272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 11D5
Signing time: Mon 04 Aug 2025 11:00:37 +0000
Manifest this update: Mon 04 Aug 2025 11:00:37 +0000
Manifest next update: Tue 05 Aug 2025 11:00:37 +0000
Files and hashes: 1: 4jpGoGfytvkcBWF1AUAJF0-qdUc.roa (hash: RRVQEgJXSCFRfqwvduB081T3vxLgFXzLMjRYLNyG6B8=)
2: 988R5OqLx1cdXJRL_JY-sifrbw8.roa (hash: BOCl4HP9kR43t+HCwvP5qbX3Z6YHP7lJJWGPo5+9LHA=)
3: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: ZEbrljOAU+g41mvkOAYjb0h2e5LWq4jf32DWmbUF0C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:94:10:ef:f6:fa:51:eb:48:07:5e:43:ca:22:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Aug 4 11:00:37 2025 GMT
Not After : Aug 5 11:00:37 2025 GMT
Subject: CN=820d8f539e90564eb235ecd3c47fe00e124690e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:58:7c:f2:e9:44:4a:d7:95:f1:26:cd:0d:
5e:89:41:1a:94:64:a0:9c:5d:fa:67:ad:5e:af:44:
e2:40:e6:55:92:7b:77:06:00:66:2a:2f:ac:0e:63:
2d:02:a5:ad:ad:6e:c1:94:55:91:ee:24:8e:e8:31:
90:54:10:6c:59:01:3b:55:ea:78:6f:e3:be:e2:fb:
8d:26:54:4a:49:b5:58:31:67:be:d5:db:76:c0:ca:
fe:9b:95:93:aa:83:ba:d0:b7:95:7e:a0:1d:55:df:
1c:0f:4b:38:37:46:f8:dd:fe:f9:59:31:1b:05:05:
e0:17:bf:b8:a5:8a:db:c1:9d:c6:89:88:a7:c8:f7:
b0:26:77:83:bd:78:e4:aa:d3:05:c2:d6:6e:8d:d4:
4b:3a:05:6e:61:99:df:b2:cc:58:b6:26:98:df:ef:
4a:87:57:ae:eb:20:a3:f0:8b:2c:92:7d:39:d2:79:
fb:c8:5a:2b:12:93:47:ee:55:7c:3b:65:dd:d3:75:
38:e6:e7:1d:18:0e:ea:02:5b:42:5a:44:ef:1e:20:
a7:2f:51:ea:43:86:4a:7d:be:13:5c:11:b3:94:8b:
8d:b3:e5:e8:42:8d:09:89:ce:ea:1e:46:b2:53:52:
d6:8f:3e:6c:fd:31:45:aa:96:f5:49:2b:96:1d:5b:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0D:8F:53:9E:90:56:4E:B2:35:EC:D3:C4:7F:E0:0E:12:46:90:E7
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d3:f5:6c:dd:35:1e:be:62:83:e9:5d:b3:19:f1:8b:87:a1:
a2:a1:25:4d:52:6d:26:99:2e:c8:f6:fb:47:ce:9d:5d:5f:17:
99:04:66:63:b3:45:78:e1:97:1a:cf:86:a7:ba:c1:a0:63:b0:
c6:74:e8:d5:a0:4c:59:f6:e1:f7:e2:b3:c6:63:0e:71:9a:6e:
e8:a2:93:db:cd:03:8d:ff:b9:34:fc:1b:cf:c7:27:8a:ad:90:
1d:12:86:bf:4f:56:dc:65:bb:74:63:90:c7:01:5e:6a:12:3d:
68:05:ff:d5:5c:04:44:8a:d1:e1:1c:ee:89:af:39:6d:51:f8:
70:dc:32:7f:55:e8:4b:c4:e1:1f:8b:27:f3:4d:03:98:dd:3b:
52:24:6a:be:77:84:d6:be:67:6a:ed:2d:1f:95:90:c1:b6:3f:
fe:1c:70:92:d6:12:b8:d2:ef:db:9d:bf:7c:f0:04:8e:de:72:
f6:86:8e:ed:f4:58:dd:8b:a1:05:35:ea:2a:38:7c:01:9a:f4:
ba:f8:24:df:d2:39:7c:6f:fe:28:13:05:e7:b4:3b:c2:ad:e7:
f0:87:a9:04:e0:b3:6e:b2:6d:ac:03:57:2d:cf:c7:83:d7:a3:
00:bc:53:5e:39:16:c6:7f:46:9b:50:a7:1e:06:37:6e:82:13:
fd:24:5e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:16 2025 by rpki-client