Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: sFPjdbALVZYQjMchhIDQrnAN4RYaVSFIAbXPAuqpb4A=
Subject key identifier: E4:75:5C:D7:E2:13:16:A0:D9:F3:6E:DA:C1:6C:EA:73:36:D1:C7:9F
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 0197B6A0F618F36DB5A81F1373A540E2A605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0A08
Signing time: Sat 28 Jun 2025 13:01:31 +0000
Manifest this update: Sat 28 Jun 2025 13:01:31 +0000
Manifest next update: Sun 29 Jun 2025 13:01:31 +0000
Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: pybyIdOx7YjgxqGPVE4pKyhGcT7+URuQHAd67aihJf8=)
2: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (hash: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f6:18:f3:6d:b5:a8:1f:13:73:a5:40:e2:a6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Jun 28 13:01:31 2025 GMT
Not After : Jun 29 13:01:31 2025 GMT
Subject: CN=e4755cd7e21316a0d9f36edac16cea7336d1c79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:e7:1e:ca:d9:ee:35:75:0c:23:07:cc:b5:
7f:f3:be:db:03:fe:f8:b7:fe:a8:5f:b6:e6:46:e2:
18:b0:e8:fa:f0:9c:4d:c1:7d:f3:eb:f8:57:46:fa:
09:c5:6a:2e:9c:41:8e:ae:df:e9:07:ff:bf:fa:2b:
93:25:0d:55:4e:dd:2a:2d:7e:9a:68:16:f8:07:14:
5c:5c:94:cb:e1:25:8f:5e:12:e0:c3:66:24:80:e9:
91:a7:14:8c:01:28:89:ae:5e:84:73:d0:6e:81:59:
6e:48:b8:6d:4a:e9:4a:62:12:85:07:1b:b7:27:e6:
10:f5:81:ef:4b:b4:7d:bf:3f:a3:7c:3e:c9:e0:5a:
1c:50:9b:9d:e6:b6:22:ec:ae:f8:1e:08:a0:4f:a5:
18:5e:7d:d0:09:57:af:bb:ca:50:b5:ad:c6:66:f5:
cb:0c:51:53:e8:c1:ed:74:c0:67:c8:02:21:e9:03:
fa:68:bb:a1:29:51:35:3c:b5:94:71:1e:44:a2:28:
7a:00:ae:c7:be:40:b3:c9:13:21:de:70:ef:4c:ac:
54:6b:51:b2:f6:0c:40:9f:82:37:07:5f:fa:e3:e4:
f9:51:7f:4b:ed:54:c3:86:ac:da:d3:32:d7:d9:9c:
2a:84:f8:69:21:53:95:16:9c:b6:54:be:06:06:0c:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:75:5C:D7:E2:13:16:A0:D9:F3:6E:DA:C1:6C:EA:73:36:D1:C7:9F
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:83:f9:a9:7d:34:8f:04:c9:70:ed:dc:a6:10:e3:5e:d6:c3:
a1:d1:d0:33:c9:87:0c:7e:5f:be:8d:85:ac:d5:de:9f:5f:06:
70:16:b8:0e:52:5d:bd:71:f9:6c:2e:1e:57:1d:15:58:6b:00:
7d:83:94:a0:2d:d7:12:91:2c:d2:3d:9c:68:cf:b1:84:c5:fe:
73:dc:94:71:3f:23:bc:7e:f7:8e:89:e3:af:5b:cf:c3:15:f8:
b6:d9:4c:81:8f:17:bd:e2:b4:31:91:23:a6:d3:5c:58:c5:e2:
84:6d:03:93:68:55:82:94:4b:f2:09:cb:2d:fa:8c:53:9c:c6:
4e:40:2f:82:43:9c:ea:81:c9:96:87:a3:62:38:3e:2c:a4:c0:
f7:01:2c:ee:c7:da:a3:bc:31:70:8f:08:7c:3f:d6:50:2c:3b:
cb:dd:52:81:37:4d:4c:cb:6c:6e:74:6b:fb:57:ae:ed:c6:b5:
89:bd:46:cb:41:f5:88:83:82:b8:e2:00:e7:e9:f8:ce:e1:48:
de:35:a6:90:ed:43:70:fd:71:75:4a:bf:94:5d:0d:d8:a3:ed:
4c:14:76:1b:4e:3a:ee:4a:fd:5d:67:01:ef:3c:64:97:b1:a3:
3a:27:cf:5b:1d:f5:68:59:39:54:09:5e:8a:a2:a9:20:a7:aa:
ba:c3:fb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:08:42 2025 by rpki-client