Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: 3AzMXhhX/WgLF3msBNJ7rtmJJvQ+IXsKtfQY1uI1Uuc=
Subject key identifier: A7:C8:DA:88:12:07:34:7D:2F:76:DB:0A:D5:A4:87:90:77:77:A3:50
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 0196B93577D4A7F0AED491ABE00FCA6515ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 11E4
Signing time: Sat 10 May 2025 08:00:11 +0000
Manifest this update: Sat 10 May 2025 08:00:11 +0000
Manifest next update: Sun 11 May 2025 08:00:11 +0000
Files and hashes: 1: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (hash: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=)
2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: 8brsduU2Ozds6g7BIB+1HWg6omz5eXzZxPq4rUMtLY8=)
3: xppN97XlpzM-dgpRtsN2V_p7lZQ.roa (hash: L5C0DF41lLv5y5vXorCy3jzo9T18wVqDFOb9OQ+U5+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:77:d4:a7:f0:ae:d4:91:ab:e0:0f:ca:65:15:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: May 10 08:00:11 2025 GMT
Not After : May 11 08:00:11 2025 GMT
Subject: CN=a7c8da881207347d2f76db0ad5a487907777a350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:9e:ec:6f:0f:d5:16:3f:01:b5:f7:fe:19:
bc:a1:8a:27:4f:65:3f:8b:91:09:89:1a:2a:af:48:
d4:50:11:27:99:76:e0:37:c7:fe:4d:ff:79:5b:f7:
49:3d:c3:20:5f:69:9d:0a:d1:3d:82:74:8a:c1:22:
dc:c0:df:e4:26:39:25:30:c5:48:7e:6d:6a:96:68:
d9:f3:e1:1c:98:95:6d:64:69:5e:0a:0c:41:67:2d:
bc:3c:cb:11:3f:b2:5a:45:0d:b0:04:81:10:dd:29:
12:df:be:42:f3:91:10:f7:c3:aa:e9:8d:e4:37:61:
57:68:53:fd:bd:25:db:37:b1:00:12:cc:02:fe:d9:
dd:c6:32:81:1f:c5:7e:84:5e:65:db:79:46:c1:46:
f7:3e:a8:de:86:9d:d1:27:22:5d:31:6c:b3:f5:9c:
1d:e5:4a:45:cd:89:d7:15:4b:d1:7d:56:54:18:1a:
5c:16:f7:23:f8:d2:ce:67:d5:cd:f9:21:9f:14:18:
42:57:d6:d2:85:d4:26:ad:d2:5a:91:17:35:42:2e:
88:69:f8:0a:06:37:3e:83:21:db:6e:b2:da:90:07:
76:44:46:e3:69:54:aa:2e:47:71:20:42:22:6e:33:
ab:c7:8e:d4:82:c9:d1:4d:c9:8c:c1:ce:08:38:90:
14:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C8:DA:88:12:07:34:7D:2F:76:DB:0A:D5:A4:87:90:77:77:A3:50
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c1:58:bc:51:e5:f9:b1:c4:05:26:45:b6:5a:e1:ff:49:14:
ba:69:e7:3b:77:77:d5:83:79:8b:71:01:5e:2b:68:c7:26:a3:
a6:94:98:18:fd:c9:b8:63:ca:4c:5e:b0:a3:de:56:80:95:4e:
cb:7f:89:52:7e:ec:7b:ba:73:19:fa:e3:48:83:22:bd:2e:5f:
f2:05:ae:cb:9a:ac:bb:76:fe:8c:ef:4f:c0:76:90:a4:44:1b:
6a:74:31:d3:82:a2:b9:ac:06:22:0a:3d:01:db:e3:11:38:5e:
16:47:90:4d:b6:82:20:4a:b1:f6:27:5a:3f:58:bc:a0:9d:27:
02:d1:3f:fa:0a:ad:50:c1:a9:0a:e6:d8:82:8b:0a:70:1b:df:
ca:22:72:fd:0d:b2:b6:d0:ec:52:3b:b7:d5:f3:73:f6:00:e6:
95:00:40:6e:a4:c7:ed:72:9d:a6:87:a1:ea:91:e4:58:14:db:
32:47:f5:58:f4:05:83:4f:a6:2f:b6:b7:ea:2c:0a:40:98:20:
73:f6:69:78:96:0c:2b:c7:66:61:f3:5c:ed:29:7e:65:fe:de:
da:d8:82:6b:b3:df:29:bc:ca:46:6b:fd:b0:07:ad:1d:31:01:
8d:b0:ae:67:2b:a4:78:41:fd:b7:8f:fb:c7:c5:7b:79:9a:55:
33:a1:02:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:06:01 2025 by rpki-client