Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: 00eHjJc/L82prv6y025LdAbDYiBGDBc2iTtAa347Nl8=
Subject key identifier: 50:05:93:AC:01:D3:7D:15:BA:39:B4:E9:FA:EB:AB:27:E1:99:79:45
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 0197B63270DE3909B56CE1B40B65C8CEAEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 1267
Signing time: Sat 28 Jun 2025 11:00:48 +0000
Manifest this update: Sat 28 Jun 2025 11:00:48 +0000
Manifest next update: Sun 29 Jun 2025 11:00:48 +0000
Files and hashes: 1: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (hash: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=)
2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: oIyvVGbfKZUT8hy4VrLY0iVXc+ibRmYeJJ/24wk4+5c=)
3: xppN97XlpzM-dgpRtsN2V_p7lZQ.roa (hash: L5C0DF41lLv5y5vXorCy3jzo9T18wVqDFOb9OQ+U5+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:70:de:39:09:b5:6c:e1:b4:0b:65:c8:ce:ae:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Jun 28 11:00:48 2025 GMT
Not After : Jun 29 11:00:48 2025 GMT
Subject: CN=500593ac01d37d15ba39b4e9faebab27e1997945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:84:50:19:97:aa:b7:ec:6e:b5:f8:37:e2:
b1:3c:80:96:4f:42:eb:13:05:8e:3c:b2:28:b6:c0:
2a:b2:41:d8:d1:0f:4a:23:d5:c4:10:38:6e:19:21:
c3:9c:53:ea:58:7b:96:b4:13:f0:ef:a5:d4:bb:d4:
ae:bb:57:25:f4:f7:4e:72:e3:a5:1b:a1:f4:ce:56:
c7:48:3f:8a:64:8d:80:1a:4a:d8:6f:66:d2:f7:a0:
16:a5:f8:2f:b9:95:f9:90:89:0b:a4:bd:76:72:f8:
34:dc:0f:79:d9:03:0e:3f:b6:79:f2:1f:a7:e5:18:
65:a2:a4:dc:4e:23:39:9a:59:18:77:54:f9:d5:71:
0d:d6:64:04:38:8f:16:b6:e7:10:48:f0:55:1a:2b:
22:9f:c0:23:ce:a6:28:23:0f:6f:13:f8:39:2d:3c:
19:2b:cd:f3:a2:5b:95:d1:bc:39:4c:7d:1e:bb:03:
bc:f4:9a:a7:01:8c:7a:b1:22:17:e6:9d:ca:c5:91:
eb:58:ee:ee:ef:31:42:08:86:39:3a:e3:a2:e2:f2:
c2:91:a3:09:8d:4a:32:22:a9:63:4b:b9:16:bc:86:
b2:2a:73:c3:b8:46:d1:03:81:94:1e:52:41:57:76:
d5:5b:36:48:c4:2b:57:49:62:d0:06:6a:0d:2a:eb:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:05:93:AC:01:D3:7D:15:BA:39:B4:E9:FA:EB:AB:27:E1:99:79:45
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0f:d5:89:2c:60:1a:a1:5f:61:bb:b7:f9:91:2d:06:75:0f:
90:e3:14:55:0d:17:be:e5:a9:b7:7f:d7:aa:11:48:3e:48:89:
6b:34:ad:18:62:42:75:89:9f:92:a9:c6:04:92:7d:ba:39:72:
8d:33:65:00:a7:ba:c7:21:93:3b:71:39:b8:39:06:26:1e:c3:
fe:93:d1:f4:43:54:47:ee:7d:92:27:9f:df:3b:04:ec:cc:d4:
90:7c:fd:ad:7a:d0:c7:70:c2:fa:85:bf:97:5b:c0:89:95:c9:
2b:ca:60:f2:3b:ff:d2:b5:ff:9e:28:a8:23:db:ba:ad:52:da:
2f:ed:96:ca:c7:2b:82:50:20:15:7e:97:98:ea:aa:c8:cc:f9:
d4:e5:c5:30:3d:b9:93:dd:a6:25:e2:8f:59:46:07:ee:d3:aa:
a3:53:89:93:bc:7c:ad:88:80:eb:b6:87:9f:e8:f8:87:2f:41:
b1:f4:b5:72:45:e0:3e:6f:fc:7f:cc:96:d8:07:5d:ac:4b:d9:
a2:21:d1:2b:81:7a:11:62:8a:29:9a:68:b3:b0:c7:52:d3:4c:
a1:fb:63:a6:79:9c:f0:57:fc:95:74:39:58:f0:6e:9b:55:36:
2a:4a:1a:44:97:2c:d7:fe:4c:9a:09:7f:c0:91:2a:e7:04:d8:
90:42:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:48 2025 by rpki-client