Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: qKRYTCxYEUdUQCP58kU0OoIN5S8688jrGJ6EXjNeuLM=
Subject key identifier: 48:70:B3:A6:B7:49:17:AD:06:65:A0:75:05:0E:B7:B5:B3:13:99:32
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 0197B77C2948BB4518FF9E4D60481C01A5E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 1173
Signing time: Sat 28 Jun 2025 17:00:56 +0000
Manifest this update: Sat 28 Jun 2025 17:00:56 +0000
Manifest next update: Sun 29 Jun 2025 17:00:56 +0000
Files and hashes: 1: 4jpGoGfytvkcBWF1AUAJF0-qdUc.roa (hash: RRVQEgJXSCFRfqwvduB081T3vxLgFXzLMjRYLNyG6B8=)
2: 988R5OqLx1cdXJRL_JY-sifrbw8.roa (hash: BOCl4HP9kR43t+HCwvP5qbX3Z6YHP7lJJWGPo5+9LHA=)
3: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: o8tx7z0voHv+qXnbtdkpjBQoNitUEe8LmQF3oxVPXts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:29:48:bb:45:18:ff:9e:4d:60:48:1c:01:a5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Jun 28 17:00:56 2025 GMT
Not After : Jun 29 17:00:56 2025 GMT
Subject: CN=4870b3a6b74917ad0665a075050eb7b5b3139932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:d7:1b:22:d6:c6:92:d8:21:3d:8b:16:b1:
65:0e:b5:5a:69:90:c3:69:0c:8a:8e:6c:c0:69:c4:
8b:64:ae:14:f9:c6:eb:15:d8:2e:19:79:c5:2f:67:
14:24:0b:ab:44:ad:58:ec:59:84:f7:c8:28:4a:91:
d9:d9:50:89:2d:85:ed:4a:5a:f6:85:19:61:6a:66:
5b:a8:8f:df:c6:7f:eb:2d:19:5b:7b:ce:13:29:81:
2d:9e:10:5c:3c:37:f0:6c:f9:b3:a2:5f:db:17:67:
a8:3e:0d:6b:a8:92:9e:2e:29:0c:ae:17:18:98:87:
e7:71:52:3f:dd:bb:42:a3:9a:e9:f6:78:b5:a4:3f:
53:1d:1f:12:8c:76:2d:6c:0a:5f:4c:47:4d:77:3d:
df:af:8c:58:05:f2:34:81:68:4e:79:61:e3:e5:cb:
c4:55:bb:be:fe:2e:6e:aa:d4:cc:92:bf:31:e7:3a:
f9:38:a0:ab:ec:6b:34:6e:8b:75:b5:ee:0a:cd:2d:
ab:96:fd:b2:1e:7b:fa:e2:b8:8f:2a:86:21:2c:0d:
9d:17:b6:a9:a2:f0:eb:7a:5e:7d:94:f3:d0:d0:9b:
b5:40:df:13:bb:5c:ec:3d:05:0e:89:1d:ed:06:75:
e1:35:9b:4e:fa:f5:1b:f5:90:16:ce:c2:78:65:ba:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:70:B3:A6:B7:49:17:AD:06:65:A0:75:05:0E:B7:B5:B3:13:99:32
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8e:08:9a:13:d5:3b:8b:66:2d:0e:b8:38:00:b8:b2:2a:44:
e0:45:31:c9:a4:00:3f:f3:7e:33:91:48:6f:58:12:cb:3b:70:
b5:5e:e1:8e:52:a5:f4:1f:05:cb:e5:ba:ca:9d:10:91:31:68:
33:a1:d9:6d:7b:21:84:9c:39:06:22:82:0e:7c:6c:6f:2c:2e:
ca:7d:89:2d:f2:a4:34:d1:48:f8:c8:9f:81:52:f2:6c:fa:07:
1c:d4:4f:12:b3:55:2e:36:60:5c:cb:74:e3:b1:35:f3:d2:9f:
d5:a1:06:2f:6b:0e:d0:9f:62:a3:63:c1:b0:75:08:e5:78:d9:
09:da:a0:6f:4c:6f:bd:dd:38:e1:3f:80:72:9f:bc:5e:90:53:
ff:f4:7a:8c:b2:04:8b:81:a6:0e:55:a7:4a:57:27:3c:66:38:
00:21:ac:95:dc:c3:cb:f0:13:02:08:14:5a:9e:4b:3b:ec:cc:
ba:65:ef:82:bc:1f:6a:25:c6:1a:66:c1:ac:f3:1e:a9:65:7b:
dc:16:9f:f5:18:d7:e2:e1:3c:73:9b:86:1a:a5:a5:53:a6:1f:
42:d7:84:d1:cf:34:76:a9:4d:89:26:22:e7:b5:3f:29:00:9c:
f2:c5:bc:b4:9e:55:04:ea:9f:36:93:fd:67:48:04:56:85:9f:
f3:84:e3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:55 2025 by rpki-client