Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: q9d9001od0T41dotjxj/+JaR7+PAvhsFGqh8fK05qrA=
Subject key identifier: CE:BC:5A:83:ED:4C:90:1B:EA:CE:15:A6:B7:E1:33:96:1F:35:14:09
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 0199FC21AF80B641D06BE8CCBA8676B10618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 1405
Signing time: Sun 19 Oct 2025 11:01:29 +0000
Manifest this update: Sun 19 Oct 2025 11:01:29 +0000
Manifest next update: Mon 20 Oct 2025 11:01:29 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: 56jP6goBgVaEgsocLhJKtei+MdMA+x3ej59FPrn9Fcc=)
2: bL9sAOLGYhfURofnKnFBFn1wsJo.roa (hash: MQ9wm3ykSQpWjdkgAkUhN5KBzQ/fKRTzO8IDNPZe+jY=)
3: kjcDWuGIuX0pVG6bb41NnKIPOqs.roa (hash: YFnfiVE6rUbpB2uXyovY7NmRfmouuM77f2tO5i352qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:af:80:b6:41:d0:6b:e8:cc:ba:86:76:b1:06:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Oct 19 11:01:29 2025 GMT
Not After : Oct 20 11:01:29 2025 GMT
Subject: CN=cebc5a83ed4c901beace15a6b7e133961f351409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3d:c9:d6:18:71:0c:fc:b9:c0:82:5d:cf:6b:
6d:b0:eb:7f:16:11:41:60:db:88:b7:cc:d0:00:72:
2b:ff:4e:d4:a2:f4:43:0a:3f:46:87:4e:b2:79:34:
ed:a5:44:bf:af:97:ea:47:fe:a5:c2:d9:16:33:ed:
d6:8f:05:06:59:00:05:7a:cd:2c:d7:56:5f:f1:64:
ab:2a:e6:54:ca:5f:ac:25:93:bd:9c:32:e5:08:c3:
1b:01:4a:2e:86:2f:8e:67:63:5f:2b:da:03:bb:4b:
54:a4:aa:95:57:27:e3:e1:0f:6e:9a:5a:b1:81:49:
7b:9e:94:d1:2b:37:ed:f1:46:c8:7d:1f:e2:e4:46:
12:19:49:7e:0c:47:4a:89:a3:bd:ed:9b:2a:b3:a2:
79:f2:d7:24:eb:1f:3f:7b:92:2f:5d:8e:d9:af:3d:
d3:3f:e5:3d:7d:8e:8f:74:28:61:67:fb:6f:55:35:
59:06:0f:73:8e:fb:61:f0:f9:57:0d:9c:b0:69:9d:
74:4d:63:04:77:75:64:a6:bf:c8:21:c3:d0:93:57:
e1:ea:91:dd:27:92:5a:a4:fc:07:71:2c:9f:80:1b:
ac:f2:ac:ed:60:c8:06:0f:7d:de:3d:86:c3:f1:e2:
3a:97:38:9f:01:d0:ec:34:f0:61:39:43:8a:c6:89:
76:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BC:5A:83:ED:4C:90:1B:EA:CE:15:A6:B7:E1:33:96:1F:35:14:09
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0e:7a:9e:5d:00:63:26:96:f5:a7:f1:72:99:b0:e1:91:8c:
e4:bc:8d:f4:c4:35:98:32:ab:bb:4a:0b:27:63:7c:e1:40:d3:
f2:b9:c1:7c:98:87:19:76:ef:ba:56:2c:e4:dd:37:38:2d:26:
ab:38:2c:66:bb:29:b7:2d:c3:44:27:26:88:e4:8d:6d:f5:39:
5c:3c:d1:a1:a0:b1:ed:50:8b:3b:6e:05:8f:1a:68:13:d6:ad:
b1:1a:ed:ed:cf:30:d9:34:18:ec:f6:54:10:c9:2b:76:d1:6c:
15:a7:40:52:58:74:0f:6a:ca:42:24:51:3f:69:e3:80:41:49:
3f:85:27:8c:54:5c:97:40:f3:ca:3a:87:a6:15:9b:d6:38:f0:
ab:1e:48:3c:1e:92:ef:dc:db:3f:71:80:60:32:91:02:c9:2b:
6a:dc:9b:de:16:b4:07:65:8b:3f:ae:ee:09:5f:91:77:45:bf:
4a:b4:79:e4:e9:fc:31:1e:5c:06:ec:06:14:70:db:56:2d:c1:
a7:ef:66:01:08:07:7b:93:ff:d3:9b:69:24:6e:fc:40:b7:28:
1b:10:b1:01:aa:e9:ea:2d:c6:04:10:64:59:a9:41:9b:57:0e:
0c:da:dd:07:77:0c:ea:29:f4:61:a4:cc:a9:36:2b:47:1e:c6:
8f:8e:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:02 2025 by rpki-client