Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: hRBp5Ik1FRLwZlXM+xKb2bbnizhY/S17bu0cEAdgCPc=
Subject key identifier: CB:00:F1:0C:7D:AE:2A:B1:1B:56:11:24:EF:E5:4A:1E:1D:90:BE:3E
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 0199FEB4C3D64F9A8E9FEC3C6CE9E8F684EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 12A1
Signing time: Sun 19 Oct 2025 23:01:23 +0000
Manifest this update: Sun 19 Oct 2025 23:01:23 +0000
Manifest next update: Mon 20 Oct 2025 23:01:23 +0000
Files and hashes: 1: 4jpGoGfytvkcBWF1AUAJF0-qdUc.roa (hash: RRVQEgJXSCFRfqwvduB081T3vxLgFXzLMjRYLNyG6B8=)
2: 988R5OqLx1cdXJRL_JY-sifrbw8.roa (hash: BOCl4HP9kR43t+HCwvP5qbX3Z6YHP7lJJWGPo5+9LHA=)
3: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: LZKxL3BihqHDMfbjYBxQroQ8Tcwyn975Txi1QLvld94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:c3:d6:4f:9a:8e:9f:ec:3c:6c:e9:e8:f6:84:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Oct 19 23:01:23 2025 GMT
Not After : Oct 20 23:01:23 2025 GMT
Subject: CN=cb00f10c7dae2ab11b561124efe54a1e1d90be3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:0f:86:a5:c0:57:ba:94:bc:95:c0:91:61:
0b:e2:db:88:bb:61:09:dc:de:b4:3c:f4:d8:3f:ac:
4d:b3:cb:06:87:d1:48:9f:bf:5f:b0:af:59:60:c6:
21:96:93:7f:1d:04:cd:fb:04:74:89:aa:2d:be:3f:
ec:2f:45:a8:22:d5:c3:00:25:b6:cc:d6:cc:c7:7d:
24:8a:6a:42:eb:19:c4:e2:03:1c:a5:fe:35:77:e5:
b9:8b:a4:b4:39:f2:5e:ed:45:13:7f:db:35:51:1e:
7e:1a:6b:01:51:91:35:c2:7d:20:4f:ee:fb:6b:a8:
2d:59:8f:43:1a:34:2b:e1:d3:b0:3c:e3:9d:90:00:
8d:36:da:7b:69:bd:33:41:cd:fb:48:74:42:01:21:
c4:20:04:35:73:89:41:10:b4:9c:7c:f0:45:15:01:
ae:83:03:66:ad:44:4b:24:4a:f1:0e:e1:4a:43:6d:
09:a1:11:4c:ee:56:d5:4e:8c:a6:8e:bf:39:a0:fb:
ab:24:82:cb:42:b7:31:d0:e3:3b:f9:71:81:2e:98:
f7:80:35:0d:23:2b:94:c0:92:4c:76:f5:cb:34:27:
34:b4:fd:b9:05:5f:5b:aa:57:c0:66:a5:94:d0:34:
b0:47:48:2c:ba:1f:98:c8:20:12:e5:65:67:8a:de:
43:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:00:F1:0C:7D:AE:2A:B1:1B:56:11:24:EF:E5:4A:1E:1D:90:BE:3E
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d3:42:37:b7:35:ba:2d:e3:5f:39:b3:d4:9c:0d:ed:3e:34:
26:5d:3b:1a:8c:32:a5:4e:04:5c:62:c2:25:73:72:5c:b6:0c:
40:06:d9:ce:77:d3:17:0e:01:4e:e4:3c:fe:d0:76:df:18:e2:
cf:13:dd:88:41:ed:39:e6:95:31:f2:78:d8:a4:34:42:3a:ea:
38:a8:2b:c7:87:d6:3c:73:94:93:96:1a:4a:fd:22:e4:32:6a:
a2:4f:84:fe:31:e2:a2:00:ea:28:c4:29:03:cf:c6:b7:84:89:
bb:3b:4d:26:72:75:9e:32:f3:7f:a1:42:25:18:bd:ad:9a:2a:
6e:5e:c0:16:c4:ba:27:11:20:14:d1:a4:fe:6e:c8:e0:8b:8d:
4b:3d:2c:0a:c8:15:a0:a8:b6:7d:c8:59:91:e9:dd:1a:0d:7d:
07:d8:dd:df:cd:6b:4e:67:f1:48:3a:0d:c9:5c:2c:0b:6a:23:
b2:42:ad:43:5b:47:1e:ca:8e:45:67:c4:2d:92:3e:51:a8:f1:
06:bc:83:15:ce:18:05:27:a6:15:fc:7e:8a:c1:2c:5b:a0:5c:
c8:7d:6a:f0:57:48:80:60:68:79:a5:06:ae:3c:ee:c1:86:a6:
16:49:f1:60:f8:6c:f2:7a:b5:10:a6:e0:4f:02:d2:f0:56:da:
7c:0d:39:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tMPWT5qOn+w8bOno9oTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YWQ2ZjFmMWI3MzBjN2EwMTZiNTYyYzEyYjMxYmVjYzRi
M2UxZmEwHhcNMjUxMDE5MjMwMTIzWhcNMjUxMDIwMjMwMTIzWjAzMTEwLwYDVQQD
EyhjYjAwZjEwYzdkYWUyYWIxMWI1NjExMjRlZmU1NGExZTFkOTBiZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO8PhqXAV7qUvJXAkWEL4tuIu2EJ
3N60PPTYP6xNs8sGh9FIn79fsK9ZYMYhlpN/HQTN+wR0iaotvj/sL0WoItXDACW2
zNbMx30kimpC6xnE4gMcpf41d+W5i6S0OfJe7UUTf9s1UR5+GmsBUZE1wn0gT+77
a6gtWY9DGjQr4dOwPOOdkACNNtp7ab0zQc37SHRCASHEIAQ1c4lBELScfPBFFQGu
gwNmrURLJErxDuFKQ20JoRFM7lbVToymjr85oPurJILLQrcx0OM7+XGBLpj3gDUN
IyuUwJJMdvXLNCc0tP25BV9bqlfAZqWU0DSwR0gsuh+YyCAS5WVnit5DyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsA8Qx9riqxG1YRJO/lSh4dkL4+MB8GA1UdIwQY
MBaAFEWtbx8bcwx6AWtWLBKzG+zEs+H6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wMGMwM2MtZDIwNy00ZWMxLTlkZDkt
MzI0NDljZTZjZjg5LzEvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wMGMwM2MtZDIwNy00ZWMxLTlkZDktMzI0NDljZTZjZjg5
LzEvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdNCN7c1
ui3jXzmz1JwN7T40Jl07GowypU4EXGLCJXNyXLYMQAbZznfTFw4BTuQ8/tB23xji
zxPdiEHtOeaVMfJ42KQ0QjrqOKgrx4fWPHOUk5YaSv0i5DJqok+E/jHiogDqKMQp
A8/Gt4SJuztNJnJ1njLzf6FCJRi9rZoqbl7AFsS6JxEgFNGk/m7I4IuNSz0sCsgV
oKi2fchZkendGg19B9jd381rTmfxSDoNyVwsC2ojskKtQ1tHHsqORWfELZI+Uajx
BryDFc4YBSemFfx+isEsW6BcyH1q8FdIgGBoeaUGrjzuwYamFknxYPhs8nq1EKbg
TwLS8FbafA05OA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:51:38 2025 by rpki-client