Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: QHuy9hBdPp5kL01A2OszhYAWUyHZSm6SlZR3lQfMhtQ=
Subject key identifier: 88:68:85:FA:49:7B:5B:65:F4:01:7C:91:75:B4:8E:93:E7:D7:29:9F
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 0199FE104319CC85AACE1C2566CCC6DDB880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 20:01:42 +0000
Manifest this update: Sun 19 Oct 2025 20:01:42 +0000
Manifest next update: Mon 20 Oct 2025 20:01:42 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: Xr8dmzZGoll5Tj2f8VmzFW4neQ142EX2UkH4cYViG84=)
2: OS--Lk_-r0Q1zq4QqDjYyZsHuMY.roa (hash: MVTlexALEq+OtJ89dtjZODG5hLFqDXsO9MxPnvJn09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:43:19:cc:85:aa:ce:1c:25:66:cc:c6:dd:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Oct 19 20:01:42 2025 GMT
Not After : Oct 20 20:01:42 2025 GMT
Subject: CN=886885fa497b5b65f4017c9175b48e93e7d7299f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:7b:d2:fc:15:97:68:1a:c8:69:39:5b:9a:
5a:9a:e6:fd:39:ed:ee:64:a1:94:1a:ec:c3:42:a2:
f7:4e:05:55:85:d7:ee:5c:e7:ab:3c:5a:74:1a:94:
a0:a9:c7:5f:5b:6f:f0:03:d0:c7:a4:3d:53:fc:bf:
78:d5:89:b4:10:a5:8d:c4:1e:6f:49:3b:a2:69:36:
56:2d:91:53:02:07:21:4e:7a:53:a3:02:59:a4:9f:
40:7e:dc:e9:89:41:54:04:ed:47:78:f7:97:4b:74:
a2:4d:78:27:78:1c:22:4b:c7:74:4e:54:b6:8f:ef:
8b:ba:1c:41:fa:ba:05:88:4d:f1:fe:bd:04:9e:66:
a8:f7:8b:93:9a:6b:9f:8b:74:33:4e:a0:1c:b8:f2:
e8:97:6b:3a:ae:e6:f2:2c:35:d5:29:ed:ce:19:8b:
33:b5:fd:51:ab:f4:af:ec:04:03:1e:b4:40:76:3c:
51:4e:1d:39:c0:83:84:cf:8b:aa:dc:d6:f4:f7:21:
32:84:5d:06:26:93:3a:6d:eb:3d:d8:c4:ea:94:e9:
e3:58:98:98:71:ec:88:67:0a:6b:e4:0a:e4:87:64:
3e:5b:66:79:c6:e3:71:56:ac:7e:8e:d6:fd:58:8b:
d3:df:56:0d:d6:ad:a9:9d:21:42:9b:e6:82:2a:f5:
8f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:68:85:FA:49:7B:5B:65:F4:01:7C:91:75:B4:8E:93:E7:D7:29:9F
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:af:29:bf:11:f6:f8:8c:ac:68:e3:b7:2b:bb:64:5e:73:71:
1e:16:a2:88:00:c6:4d:f1:c3:54:2b:f9:63:e6:af:ca:5c:97:
5f:bf:9a:f3:41:00:83:47:f7:6c:5e:c3:48:fe:d1:8a:91:28:
f5:9c:45:c5:79:71:da:a1:08:62:69:14:67:77:83:fb:fa:a1:
5a:7a:60:72:b7:7e:db:7d:41:da:89:ab:06:3c:22:b9:08:a8:
03:2e:d1:c0:7b:55:2e:c6:12:7e:32:a1:e9:a8:26:e9:53:36:
9c:c5:8d:a9:c7:aa:79:b4:3e:3a:2b:d7:15:99:44:28:d7:8f:
8d:e5:9e:9f:6d:64:2a:ca:3e:85:f2:68:07:a0:dd:09:4d:97:
87:44:d9:74:d6:2e:89:07:91:65:46:bc:01:f3:3c:a5:4d:a4:
a7:bf:b4:dd:06:ac:e3:66:c4:ac:bd:84:d2:02:e6:f8:4f:11:
e9:86:d9:1c:8b:f9:85:a1:8d:c2:af:99:8e:95:5f:d2:cb:fd:
82:8d:dd:33:2e:b9:31:5d:0d:be:7f:62:93:a4:2b:62:81:7c:
a3:9a:8b:51:5c:f6:05:9f:33:d6:32:68:18:2c:0e:c5:79:91:
4f:3a:af:43:dc:ce:ac:29:f3:9d:00:a1:9e:4f:41:fa:22:47:
06:96:53:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:52 2025 by rpki-client