Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: kF8iMbqTETwx0rbHulsReP7CEqyA2nYgbx096H+9vaU=
Subject key identifier: F2:76:DC:E2:CD:C3:19:38:E9:D6:AE:BF:44:EB:DB:EB:DB:69:72:40
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 0198D4724F6EE1A32E7A28A8338F2CC58817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0A9C
Signing time: Sat 23 Aug 2025 01:01:57 +0000
Manifest this update: Sat 23 Aug 2025 01:01:57 +0000
Manifest next update: Sun 24 Aug 2025 01:01:57 +0000
Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: diABOyRMx9LzbOy1tQEwvfDetP2ZkAIpdo/xYwQf/kw=)
2: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (hash: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:4f:6e:e1:a3:2e:7a:28:a8:33:8f:2c:c5:88:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Aug 23 01:01:57 2025 GMT
Not After : Aug 24 01:01:57 2025 GMT
Subject: CN=f276dce2cdc31938e9d6aebf44ebdbebdb697240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:f6:b8:c3:c3:a5:b3:3f:e5:0b:13:52:7d:
b2:19:f5:a9:cc:35:a1:a1:c8:e6:a0:5c:f9:10:bb:
09:5b:2b:e2:67:fa:da:c8:af:51:79:2d:e9:6f:ed:
41:1a:5c:01:53:0b:0a:f5:9b:90:4b:8a:c0:52:40:
e2:41:e9:00:ff:29:fb:91:8f:1a:63:b9:ac:21:4d:
3e:5e:fc:59:bb:9d:56:23:ff:c9:4e:ac:f0:ec:ec:
84:f2:d2:5b:31:fc:fb:57:7c:e3:96:09:87:be:3c:
6b:9a:25:c4:95:d0:4d:bb:e6:b6:59:39:58:91:28:
a5:87:4b:a2:a6:fc:3d:9a:9f:57:aa:a1:c4:6b:25:
d5:cb:9a:49:bd:aa:87:8a:45:ec:e9:15:83:eb:fe:
ab:2b:85:be:ab:8d:b9:ff:ba:a9:77:18:e2:dd:ab:
00:3a:94:7d:c0:1b:86:78:29:58:a4:34:4c:96:6c:
5a:e9:00:08:e7:3d:e4:80:bc:90:55:9c:bb:f3:45:
88:64:e8:7a:4a:55:5f:cb:e8:eb:52:57:b2:86:fc:
2d:a1:b2:f4:cf:25:4f:31:ac:ce:af:28:28:fa:08:
94:be:3e:a9:98:11:a6:c7:a0:51:fa:a6:49:2b:a7:
14:1b:ba:8a:2c:7d:7d:0c:09:56:a0:17:38:60:7d:
fb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:76:DC:E2:CD:C3:19:38:E9:D6:AE:BF:44:EB:DB:EB:DB:69:72:40
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:94:eb:39:a7:3a:0a:21:84:65:fb:fb:48:78:78:b9:3c:ab:
31:06:50:20:cf:02:37:06:70:67:4d:b8:5a:c6:03:1e:a4:50:
c9:00:f1:96:36:ee:59:9c:9d:38:3c:81:0d:e7:53:13:f9:1b:
e5:4d:cf:fc:78:1a:c5:80:24:07:71:b8:78:c5:b1:37:98:46:
d0:4b:3a:e4:53:b2:7b:f5:aa:c1:37:41:96:fb:93:bd:ab:8d:
92:f5:f9:c3:ae:b4:86:85:68:e7:cf:92:76:2e:97:7a:f0:df:
c6:d9:71:96:ae:94:08:fe:1d:a2:a1:93:d6:68:8e:0f:89:c8:
41:f7:55:0a:55:6d:6d:4e:d8:7f:97:a4:ae:23:63:4d:a8:cf:
d0:37:3b:71:c3:33:6a:4f:28:63:8b:cf:1e:dc:c1:aa:64:70:
2a:21:52:a3:50:a4:ae:f3:0e:b9:1f:8b:4e:87:04:2e:08:ba:
a8:c8:2e:6e:0b:8f:5e:9f:30:e3:b5:fe:fc:19:d9:dc:d0:ec:
bf:91:de:b5:4b:8e:81:28:41:24:63:64:a4:e8:a9:16:8f:04:
19:58:65:72:ef:6b:3b:99:02:90:f4:d9:ae:77:18:b5:3e:22:
55:3e:70:e6:5f:11:5c:86:18:7b:75:de:55:f9:59:1a:1e:75:
d2:6e:ee:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:33 2025 by rpki-client