Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: PX+CQO0AtakFGEea/K91knlM5tA+wQB0ScDJoq0ZUvc=
Subject key identifier: 5A:FA:EB:B1:02:38:02:3E:70:C9:8D:80:02:1D:F5:DC:79:2C:C1:21
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 0196AEE8CC3DCE284E1E02D3E761B03A36EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 10EA
Signing time: Thu 08 May 2025 08:00:14 +0000
Manifest this update: Thu 08 May 2025 08:00:14 +0000
Manifest next update: Fri 09 May 2025 08:00:14 +0000
Files and hashes: 1: 4jpGoGfytvkcBWF1AUAJF0-qdUc.roa (hash: RRVQEgJXSCFRfqwvduB081T3vxLgFXzLMjRYLNyG6B8=)
2: 988R5OqLx1cdXJRL_JY-sifrbw8.roa (hash: BOCl4HP9kR43t+HCwvP5qbX3Z6YHP7lJJWGPo5+9LHA=)
3: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: 8m5JSmeDJw9v88oisCdZIa4iSVhwPN3WzsCShIS8UIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e8:cc:3d:ce:28:4e:1e:02:d3:e7:61:b0:3a:36:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: May 8 08:00:14 2025 GMT
Not After : May 9 08:00:14 2025 GMT
Subject: CN=5afaebb10238023e70c98d80021df5dc792cc121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:5e:26:d5:84:e1:ca:78:86:d6:be:98:b1:
95:de:e9:2c:53:29:49:00:a9:f1:c3:d8:7f:6c:44:
f4:1e:6a:c6:0f:3d:4b:d5:e8:b3:7a:25:ab:21:92:
cb:33:9f:9d:84:58:64:d5:2c:4c:58:64:3b:3d:e9:
5b:2f:8d:cf:3d:7e:85:cf:dc:cb:18:26:2d:8b:ba:
1d:08:eb:b9:70:a0:25:20:5b:49:90:f2:76:43:f2:
32:47:64:37:8d:9f:60:be:4b:3e:f1:ff:42:e7:7f:
d7:ea:8e:be:26:f3:9d:b5:99:fa:3b:1b:47:1c:1c:
79:13:fe:d7:c2:e5:62:5d:2d:13:a1:0b:24:2b:40:
be:6a:24:df:80:56:36:58:08:b6:f9:3b:5d:ee:f9:
c9:6e:3c:7a:63:a5:07:47:ec:f2:12:45:e8:5e:53:
60:2b:9f:72:85:c6:85:c2:b9:35:74:a4:50:e4:c5:
06:c7:83:9a:10:fb:5b:6c:ae:72:f1:c1:99:52:89:
e7:e1:14:1d:3a:82:d2:8c:ff:89:31:89:6d:77:83:
65:07:34:32:30:a6:6e:a8:1a:73:b4:e1:41:23:8f:
76:96:ea:6a:30:52:d5:3f:9d:bf:fb:3a:70:7c:f1:
7d:c1:41:ac:5d:49:f9:23:80:3d:22:6b:5a:8b:57:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FA:EB:B1:02:38:02:3E:70:C9:8D:80:02:1D:F5:DC:79:2C:C1:21
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2a:b4:bf:9c:4a:f1:fd:a3:de:b6:ce:33:81:83:70:9e:41:
f3:1c:ca:18:e3:22:7f:dc:21:07:90:f5:91:72:67:55:c8:d8:
c8:b1:df:b0:ef:3f:ce:2e:7f:6c:0c:80:5e:1e:0d:ff:b9:1d:
c3:8e:1a:f4:3e:92:4f:55:60:ff:2d:db:54:0e:68:50:58:df:
d7:d7:83:d5:c7:16:9c:ba:89:da:c3:2c:4c:ea:29:0a:c1:74:
20:ff:14:20:79:25:bf:b2:19:fc:ed:31:f1:30:f9:b0:51:f4:
aa:bf:57:75:31:3f:d1:0e:78:73:b4:6e:ec:76:18:b2:78:9d:
5f:8c:d2:85:61:c1:8c:c4:bf:32:a5:b5:26:e7:9a:c4:18:e1:
a3:86:ce:1c:ad:53:e6:d0:d4:9a:f6:bd:9c:2f:7e:a9:cc:f3:
c0:f0:9a:2c:62:77:15:20:46:0b:9c:19:95:2c:58:95:1f:b7:
4b:d9:a7:39:80:9c:2a:53:70:b0:7d:20:7b:4e:08:00:46:96:
0b:3c:5f:4f:d1:f0:a8:51:0c:5e:1f:2f:6d:a4:6a:ab:a1:b4:
0c:39:b0:06:06:0f:8d:a4:95:7f:1f:7c:8d:a3:4c:51:80:23:
b8:34:aa:e0:8a:76:bd:8b:6a:6e:44:e2:c1:33:82:27:0b:3d:
25:8a:8f:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZau6Mw9zihOHgLT52GwOjbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YWQ2ZjFmMWI3MzBjN2EwMTZiNTYyYzEyYjMxYmVjYzRi
M2UxZmEwHhcNMjUwNTA4MDgwMDE0WhcNMjUwNTA5MDgwMDE0WjAzMTEwLwYDVQQD
Eyg1YWZhZWJiMTAyMzgwMjNlNzBjOThkODAwMjFkZjVkYzc5MmNjMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlNeJtWE4cp4hta+mLGV3uksUylJ
AKnxw9h/bET0HmrGDz1L1eizeiWrIZLLM5+dhFhk1SxMWGQ7PelbL43PPX6Fz9zL
GCYti7odCOu5cKAlIFtJkPJ2Q/IyR2Q3jZ9gvks+8f9C53/X6o6+JvOdtZn6OxtH
HBx5E/7XwuViXS0ToQskK0C+aiTfgFY2WAi2+Ttd7vnJbjx6Y6UHR+zyEkXoXlNg
K59yhcaFwrk1dKRQ5MUGx4OaEPtbbK5y8cGZUonn4RQdOoLSjP+JMYltd4NlBzQy
MKZuqBpztOFBI492lupqMFLVP52/+zpwfPF9wUGsXUn5I4A9Imtai1eCTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFr667ECOAI+cMmNgAId9dx5LMEhMB8GA1UdIwQY
MBaAFEWtbx8bcwx6AWtWLBKzG+zEs+H6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wMGMwM2MtZDIwNy00ZWMxLTlkZDkt
MzI0NDljZTZjZjg5LzEvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wMGMwM2MtZDIwNy00ZWMxLTlkZDktMzI0NDljZTZjZjg5
LzEvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSq0v5xK
8f2j3rbOM4GDcJ5B8xzKGOMif9whB5D1kXJnVcjYyLHfsO8/zi5/bAyAXh4N/7kd
w44a9D6ST1Vg/y3bVA5oUFjf19eD1ccWnLqJ2sMsTOopCsF0IP8UIHklv7IZ/O0x
8TD5sFH0qr9XdTE/0Q54c7Ru7HYYsnidX4zShWHBjMS/MqW1JueaxBjho4bOHK1T
5tDUmva9nC9+qczzwPCaLGJ3FSBGC5wZlSxYlR+3S9mnOYCcKlNwsH0ge04IAEaW
CzxfT9HwqFEMXh8vbaRqq6G0DDmwBgYPjaSVfx98jaNMUYAjuDSq4Ip2vYtqbkTi
wTOCJws9JYqP/A==
-----END CERTIFICATE-----
Generated at Thu May 8 17:43:34 2025 by rpki-client