Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: Y9gVaaRGu6PwsKUKt4j5+7NSXTF9uqywtx2Eq2CzVxk=
Subject key identifier: FA:37:65:87:CF:57:20:1D:13:84:B1:73:D5:02:57:C5:60:A8:85:87
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 0198D5F13F39F26A10DC85FE9A72B6597C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 12FC
Signing time: Sat 23 Aug 2025 08:00:13 +0000
Manifest this update: Sat 23 Aug 2025 08:00:13 +0000
Manifest next update: Sun 24 Aug 2025 08:00:13 +0000
Files and hashes: 1: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (hash: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=)
2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: VYMu+X3awOcT27jFCJ0nso4+SkdLK1ugXFBRslPimhc=)
3: xppN97XlpzM-dgpRtsN2V_p7lZQ.roa (hash: L5C0DF41lLv5y5vXorCy3jzo9T18wVqDFOb9OQ+U5+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3f:39:f2:6a:10:dc:85:fe:9a:72:b6:59:7c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Aug 23 08:00:13 2025 GMT
Not After : Aug 24 08:00:13 2025 GMT
Subject: CN=fa376587cf57201d1384b173d50257c560a88587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:74:fb:78:92:4f:0b:32:2d:42:28:50:b1:
e0:2d:0c:72:7b:2b:fb:f7:0a:3d:7c:d8:ad:50:21:
6a:d3:29:ca:2a:d4:1c:95:a4:73:50:e2:a3:30:ec:
44:a6:e5:42:e0:3e:40:48:1d:41:c4:bc:bd:c5:df:
ec:91:be:60:c3:d4:c3:76:4b:7c:19:6f:cd:96:da:
87:c0:3f:09:da:df:ca:1a:cd:58:7f:e2:ee:6d:e5:
82:e1:dd:ab:18:9c:f7:7b:16:47:34:d4:57:18:63:
2b:a4:dd:65:bd:53:56:41:49:78:93:7e:29:4c:f0:
b2:f1:a9:34:79:a0:df:c9:80:46:31:52:d4:83:c2:
a0:53:71:d3:ae:d2:d2:a0:92:23:ea:6a:7a:1d:b2:
51:6c:ad:46:57:9e:89:a0:00:6f:34:52:c5:43:b4:
30:0d:3a:53:ea:17:f0:28:35:ef:a7:94:15:8e:ac:
0a:be:69:3b:d9:52:e9:5d:da:32:51:3a:5e:f7:7b:
7f:37:67:a6:e8:8f:70:6e:0e:84:07:a5:77:c6:1b:
c5:1b:eb:aa:d1:8c:29:7d:e8:82:31:cb:42:aa:2a:
8d:3f:32:78:4c:97:54:cd:f2:66:b7:7c:67:5f:f3:
d3:b2:a4:61:bd:b7:e4:39:c5:66:a9:65:93:ad:51:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:37:65:87:CF:57:20:1D:13:84:B1:73:D5:02:57:C5:60:A8:85:87
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5c:6c:7f:19:3b:0e:af:9b:f2:b7:57:38:03:58:d3:43:d6:
1f:6e:b8:7b:4c:23:1e:3f:6a:03:4d:29:de:63:36:28:1c:c7:
22:c1:22:01:61:11:42:58:5d:c5:09:69:d2:16:6a:ff:b9:1e:
09:ac:90:ef:32:ff:18:bf:46:64:01:f3:cd:da:9a:5c:74:ca:
dc:ad:49:23:df:bd:78:21:3d:ce:ec:a2:a4:69:ae:64:e6:24:
ab:63:b8:a9:91:92:ad:33:6a:d8:1e:7b:35:9f:37:34:ab:99:
74:92:36:78:e3:26:56:8b:f7:d4:ad:bc:95:5f:0d:0b:4b:75:
cd:29:60:d0:0e:e4:a9:6f:75:d1:a0:2f:d5:cc:8c:8f:3f:20:
c1:59:2b:c8:28:22:89:cb:e5:59:c9:72:4e:99:54:a4:d6:ca:
7a:ce:64:ee:d4:3a:3a:c8:18:f1:40:65:e3:57:40:c1:25:29:
e8:11:33:63:e6:cc:20:90:ee:e5:13:ea:be:f3:d0:e3:05:c9:
2e:3c:c3:4a:96:32:af:e5:de:ef:c6:92:4c:53:c6:e6:88:70:
21:00:bd:96:d1:fd:d9:fe:0a:9d:12:3a:9f:14:4e:c2:38:6f:
74:fb:07:ae:74:c2:fb:ff:37:6d:90:91:d7:dd:10:6e:43:d4:
05:3d:3a:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8T858moQ3IX+mnK2WXwrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YWE4OGRjNjc1Y2U1ZGMzNTU3NGJmZjYyOTBlMmFlODhj
ZTA4MmIwHhcNMjUwODIzMDgwMDEzWhcNMjUwODI0MDgwMDEzWjAzMTEwLwYDVQQD
EyhmYTM3NjU4N2NmNTcyMDFkMTM4NGIxNzNkNTAyNTdjNTYwYTg4NTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR50+3iSTwsyLUIoULHgLQxyeyv7
9wo9fNitUCFq0ynKKtQclaRzUOKjMOxEpuVC4D5ASB1BxLy9xd/skb5gw9TDdkt8
GW/NltqHwD8J2t/KGs1Yf+LubeWC4d2rGJz3exZHNNRXGGMrpN1lvVNWQUl4k34p
TPCy8ak0eaDfyYBGMVLUg8KgU3HTrtLSoJIj6mp6HbJRbK1GV56JoABvNFLFQ7Qw
DTpT6hfwKDXvp5QVjqwKvmk72VLpXdoyUTpe93t/N2em6I9wbg6EB6V3xhvFG+uq
0YwpfeiCMctCqiqNPzJ4TJdUzfJmt3xnX/PTsqRhvbfkOcVmqWWTrVEePQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPo3ZYfPVyAdE4Sxc9UCV8VgqIWHMB8GA1UdIwQY
MBaAFEWqiNxnXOXcNVdL/2KQ4q6IzggrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMt
MWQ3YjIyOWQ0ZTNiLzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMtMWQ3YjIyOWQ0ZTNi
LzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflxsfxk7
Dq+b8rdXOANY00PWH264e0wjHj9qA00p3mM2KBzHIsEiAWERQlhdxQlp0hZq/7ke
CayQ7zL/GL9GZAHzzdqaXHTK3K1JI9+9eCE9zuyipGmuZOYkq2O4qZGSrTNq2B57
NZ83NKuZdJI2eOMmVov31K28lV8NC0t1zSlg0A7kqW910aAv1cyMjz8gwVkryCgi
icvlWclyTplUpNbKes5k7tQ6OsgY8UBl41dAwSUp6BEzY+bMIJDu5RPqvvPQ4wXJ
LjzDSpYyr+Xe78aSTFPG5ohwIQC9ltH92f4KnRI6nxROwjhvdPsHrnTC+/83bZCR
190QbkPUBT06cg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:47 2025 by rpki-client