Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: k8drUWpzUrohTGHcIAQ6KJ+5fL0mgoDib61JlEMgEWg=
Subject key identifier: 2A:DC:11:64:B5:06:49:6A:5F:99:26:CE:B6:A1:F4:CF:CA:9F:22:A2
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 0197B6D7A0CBA4711327222B30947972B1E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: tDdL9wtnTr5qGx9g+PqdhpqHaCNxPxYYbwSogSvVzWw=)
2: OS--Lk_-r0Q1zq4QqDjYyZsHuMY.roa (hash: MVTlexALEq+OtJ89dtjZODG5hLFqDXsO9MxPnvJn09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a0:cb:a4:71:13:27:22:2b:30:94:79:72:b1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=2adc1164b506496a5f9926ceb6a1f4cfca9f22a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:07:77:42:46:2d:c0:64:6a:a1:82:62:93:
12:bd:2b:da:7a:86:b6:c4:ac:c3:de:64:86:93:67:
2a:20:d6:9f:65:b1:1d:74:71:03:e4:9d:61:01:e0:
b9:f3:d3:88:d3:bf:ca:5c:4d:8f:6a:30:77:ee:eb:
d7:00:f4:88:88:b5:b4:4f:d4:49:e4:ea:a7:87:d8:
05:b3:3e:7c:66:f3:d0:c5:2c:53:12:26:76:75:6b:
e8:35:06:af:df:d6:e4:46:51:97:4d:89:18:9d:2b:
48:2e:39:c8:eb:d9:d5:48:44:b5:43:41:b8:66:f4:
40:a1:0d:3d:65:3d:b4:19:0c:2f:c3:c3:64:f9:68:
b4:82:b2:a4:d0:18:0b:93:f4:a9:2a:bb:5c:76:ab:
8d:32:fe:1f:42:7b:b3:fe:26:9a:d0:ae:17:04:f0:
c3:f6:72:db:bb:e1:9d:b5:9c:d4:0e:52:a2:2c:f8:
b0:f9:41:b9:94:75:5d:6f:84:94:95:ff:72:31:53:
ec:31:c5:e0:df:c6:1f:c4:e6:02:1a:be:ed:57:75:
cd:ed:5c:05:14:d8:dc:62:26:fe:93:5b:3b:95:a8:
11:c4:9b:19:b4:be:02:85:5f:f4:ec:9c:99:0d:61:
75:57:11:eb:35:49:c0:f1:02:ff:19:f3:9b:fb:eb:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DC:11:64:B5:06:49:6A:5F:99:26:CE:B6:A1:F4:CF:CA:9F:22:A2
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:90:75:0a:49:4a:57:dd:e9:e4:dd:1e:4b:bd:56:70:94:12:
7a:01:16:ab:62:f0:9a:81:fa:03:76:b2:7e:c7:4a:2e:f1:21:
19:8a:8f:79:29:2d:b7:9e:b9:ac:7f:1e:ce:bc:30:28:da:07:
f2:0f:0f:20:b2:80:9d:5f:96:83:e0:eb:51:a4:22:3e:60:dd:
39:3e:69:ca:1a:b5:d7:3f:64:1b:08:d6:32:3a:02:5f:80:1c:
de:c6:97:2b:b5:d6:0f:32:49:af:a0:de:7e:56:1a:54:e8:a0:
2a:f2:a0:01:b3:a0:57:33:b3:a3:9f:0c:ca:6c:38:dd:86:71:
8d:71:65:56:7c:fa:16:12:b8:3f:c9:83:09:66:82:f3:7f:18:
3d:43:de:8f:45:18:78:14:c8:5f:04:7f:29:0a:55:2c:af:da:
34:75:50:ee:36:a8:83:b7:0a:75:83:c6:c2:5d:d3:b6:92:a0:
7a:1f:d3:9f:3a:f8:c1:f9:1b:80:9e:9c:05:1e:69:89:92:07:
b0:0d:5a:90:2c:84:be:85:48:22:ad:fe:c0:f6:f3:ab:05:84:
5e:5e:ca:ca:67:08:1d:bc:8c:de:39:bd:14:2c:8d:15:f4:8d:
7f:53:23:08:b7:7d:95:f2:0e:ba:2d:90:a1:b2:00:72:bc:57:
a0:38:79:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:46 2025 by rpki-client