Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: qyqmDonBMqjRb7vP+1DDp+0grAjLdB6JAfWDnWDI6Tc=
Subject key identifier: 68:6D:D3:97:5B:C2:3F:0B:2A:63:57:90:BC:85:DB:3F:22:89:AA:2C
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 0198D4E080794030961D5A39C31BA9077523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 1507
Signing time: Sat 23 Aug 2025 03:02:19 +0000
Manifest this update: Sat 23 Aug 2025 03:02:19 +0000
Manifest next update: Sun 24 Aug 2025 03:02:19 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: oPakbYhxSi4SoNQpIaunJnYFH/eW5wNSPWnk5cIC9iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:80:79:40:30:96:1d:5a:39:c3:1b:a9:07:75:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Aug 23 03:02:19 2025 GMT
Not After : Aug 24 03:02:19 2025 GMT
Subject: CN=686dd3975bc23f0b2a635790bc85db3f2289aa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:e4:53:39:b0:cb:08:ed:4b:43:4d:33:01:
f7:4d:08:71:77:a3:ba:91:6c:fe:4a:14:0d:21:42:
a7:f5:21:35:da:09:e2:0e:a4:b0:bf:b2:31:01:55:
7b:11:2f:b2:b9:75:c1:9b:fb:5f:da:b6:e3:21:f5:
c8:91:0d:4e:78:a3:81:9c:52:d9:6d:89:44:3b:bb:
bd:d5:a9:05:20:32:fb:32:bb:5d:4d:bc:f0:b8:7b:
a0:9d:0b:62:79:1c:34:aa:35:92:33:1a:72:42:49:
66:70:02:cf:e8:d3:3e:f2:c7:aa:b0:28:57:f0:6d:
a3:3f:3c:03:20:c8:a1:3f:45:ba:ec:d2:c3:bc:31:
87:5b:59:5d:ec:81:12:da:96:64:74:95:5a:fa:95:
64:40:df:7c:eb:7d:b9:e6:1f:d7:3d:9f:1f:44:0c:
30:9c:14:98:14:6a:b0:99:9a:d0:b9:95:56:b4:b8:
51:bb:ce:52:0e:9a:48:b2:6c:1d:3e:1a:75:1e:bd:
e6:34:05:5c:81:1d:23:78:3b:ee:d3:45:ed:cb:bd:
ca:ef:64:30:e1:9f:ce:48:9d:ff:1c:1e:5f:6a:28:
09:30:bb:90:d6:61:29:2e:1f:94:08:b4:8c:bd:01:
76:8a:e7:a7:46:40:e7:28:22:bf:14:e6:ca:9d:0c:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6D:D3:97:5B:C2:3F:0B:2A:63:57:90:BC:85:DB:3F:22:89:AA:2C
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:21:02:54:c8:c0:2b:b3:ec:36:4c:a7:2a:71:cd:b7:3b:7d:
43:00:85:0f:17:d8:d3:e6:e6:e2:94:2d:d6:f0:ab:8a:d2:6e:
8c:17:70:0f:f9:28:d3:1f:4b:8b:1c:8c:cb:fb:26:3b:2e:32:
6a:30:a9:ed:c3:e6:c3:d7:b3:02:68:0c:4b:c9:c6:a4:ee:6c:
95:cc:bc:34:96:48:b4:ba:e2:ba:18:b7:62:27:0a:ef:64:82:
11:65:50:1c:dc:9b:02:e2:8a:1e:90:2d:9f:95:d6:de:7f:ba:
01:1d:7d:c2:ab:02:d1:a1:32:80:40:da:78:4a:03:e0:c0:c8:
0a:2d:47:bd:3b:5c:de:85:d2:32:1f:c1:02:49:03:8b:0f:11:
6b:f1:b0:b0:25:2d:c8:1e:1d:35:f2:dd:16:dc:83:9f:09:13:
2c:70:9f:ec:96:f7:31:26:62:f3:57:8b:74:31:d2:50:2f:09:
c6:c9:66:6b:54:48:2d:d4:2a:40:aa:98:e9:a5:47:44:93:4c:
b1:e1:14:27:c6:cc:37:f3:6a:28:47:1c:7e:44:68:24:dc:33:
1b:d9:e9:04:a6:2e:4d:48:32:e0:7f:9f:6e:c6:a4:44:b1:12:
7c:40:fb:c6:c7:61:0b:26:b2:ec:af:9e:32:0b:bf:db:bf:94:
a5:08:4a:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4IB5QDCWHVo5wxupB3UjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNjU0MjA3ZTU0N2QzNzk3ODM0MTRmMjIyMGQ0YTJkNzQ0
NjU4NzAwHhcNMjUwODIzMDMwMjE5WhcNMjUwODI0MDMwMjE5WjAzMTEwLwYDVQQD
Eyg2ODZkZDM5NzViYzIzZjBiMmE2MzU3OTBiYzg1ZGIzZjIyODlhYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0zkUzmwywjtS0NNMwH3TQhxd6O6
kWz+ShQNIUKn9SE12gniDqSwv7IxAVV7ES+yuXXBm/tf2rbjIfXIkQ1OeKOBnFLZ
bYlEO7u91akFIDL7MrtdTbzwuHugnQtieRw0qjWSMxpyQklmcALP6NM+8seqsChX
8G2jPzwDIMihP0W67NLDvDGHW1ld7IES2pZkdJVa+pVkQN9863255h/XPZ8fRAww
nBSYFGqwmZrQuZVWtLhRu85SDppIsmwdPhp1Hr3mNAVcgR0jeDvu00Xty73K72Qw
4Z/OSJ3/HB5faigJMLuQ1mEpLh+UCLSMvQF2iuenRkDnKCK/FObKnQxMlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGht05dbwj8LKmNXkLyF2z8iiaosMB8GA1UdIwQY
MBaAFONlQgflR9N5eDQU8iINSi10RlhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80MjlkMmQtMThiOS00MWMyLWIyMDAt
YzY0MTU5NTU5ZTI2LzEvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80MjlkMmQtMThiOS00MWMyLWIyMDAtYzY0MTU5NTU5ZTI2
LzEvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSECVMjA
K7PsNkynKnHNtzt9QwCFDxfY0+bm4pQt1vCritJujBdwD/ko0x9LixyMy/smOy4y
ajCp7cPmw9ezAmgMS8nGpO5slcy8NJZItLriuhi3YicK72SCEWVQHNybAuKKHpAt
n5XW3n+6AR19wqsC0aEygEDaeEoD4MDICi1HvTtc3oXSMh/BAkkDiw8Ra/GwsCUt
yB4dNfLdFtyDnwkTLHCf7Jb3MSZi81eLdDHSUC8Jxslma1RILdQqQKqY6aVHRJNM
seEUJ8bMN/NqKEccfkRoJNwzG9npBKYuTUgy4H+fbsakRLESfED7xsdhCyay7K+e
Mgu/27+UpQhK9Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:52 2025 by rpki-client