Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: 3rQJANaEZ5ClG68K90YjFHodjeMmBqL0YauNkzXoKyI=
Subject key identifier: D2:11:2E:C7:F4:1A:37:F4:67:FB:6D:C8:F1:37:B4:21:0D:E1:DF:C0
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 0197B70EFC807846DC613CB537EE0967B947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 1473
Signing time: Sat 28 Jun 2025 15:01:41 +0000
Manifest this update: Sat 28 Jun 2025 15:01:41 +0000
Manifest next update: Sun 29 Jun 2025 15:01:41 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: iZLu7ehraN/GIonLlLApe/yGtvIPcN+5nwhgukQJTCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fc:80:78:46:dc:61:3c:b5:37:ee:09:67:b9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Jun 28 15:01:41 2025 GMT
Not After : Jun 29 15:01:41 2025 GMT
Subject: CN=d2112ec7f41a37f467fb6dc8f137b4210de1dfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:4d:00:73:be:99:6a:d8:76:96:6b:aa:b2:
eb:92:64:e4:6b:c4:ce:44:5a:8c:03:60:cb:62:f1:
12:46:2d:4e:75:7a:4a:9c:d3:ef:52:ea:0d:db:11:
a0:c2:d7:cb:ec:12:8c:99:cf:15:a2:f3:36:f4:95:
bb:23:14:d7:e4:1b:8c:ab:8c:97:c2:99:a1:6f:7c:
ea:ef:10:69:17:b9:48:c0:da:9b:10:aa:75:60:75:
70:39:31:62:f4:81:ff:b2:4f:6f:0e:51:98:e7:e4:
98:cb:08:52:c1:8e:04:c9:16:58:41:59:bd:99:c3:
e2:a1:ae:ee:fb:d6:da:ec:a8:3e:df:42:48:89:04:
ca:d3:60:ee:e6:c8:a5:ce:50:77:77:a6:53:fd:64:
7c:ac:c8:5b:f7:75:c0:1b:2d:9e:66:81:fc:20:9e:
e9:68:ef:66:46:3c:fa:3a:87:d8:2f:7a:58:c8:35:
8f:52:65:23:c7:a1:b5:92:5b:9d:eb:6c:cc:82:9d:
b9:63:18:90:0d:f5:5c:f0:2a:3c:7e:9a:8f:9d:ff:
9c:75:18:89:51:e9:06:e3:ac:ba:54:11:05:d1:a7:
cf:fc:27:ed:ca:17:d1:48:94:1c:ce:a0:f5:80:b8:
87:37:bc:d8:81:e4:c9:8f:46:be:70:af:69:e7:be:
8c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:11:2E:C7:F4:1A:37:F4:67:FB:6D:C8:F1:37:B4:21:0D:E1:DF:C0
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0a:03:3e:73:e0:df:42:e4:e3:54:f2:18:e9:95:21:f2:97:
ca:5d:36:0a:21:8a:18:3a:6b:5f:18:69:00:8b:ec:78:b0:dc:
d5:fd:11:c8:14:8f:0d:e5:88:09:26:0d:3a:a4:33:bd:dd:08:
e7:1b:ef:08:2c:87:af:b8:9d:df:af:f5:f6:b3:52:24:14:a8:
11:51:34:e3:3d:11:f7:83:e3:a6:c6:2c:1d:90:ee:6b:6a:92:
12:28:03:ee:0c:19:3a:88:6e:8b:59:2e:98:16:e5:dc:f1:c3:
55:64:93:e9:57:4b:5a:10:19:2b:e1:6e:11:89:48:3f:b9:f0:
5e:c1:7a:79:da:a4:2c:7b:08:3f:99:fd:7e:fc:c4:48:9a:21:
b7:3b:d8:b5:dc:e3:00:4b:25:1d:0e:bb:83:21:c7:07:83:f2:
73:66:ea:19:2c:c2:36:7b:f5:54:6f:c9:4d:2f:a3:f0:e6:87:
68:6e:c7:39:30:b4:67:8f:75:b6:a2:ed:fb:84:2d:55:6f:fe:
39:33:a8:8a:8f:49:46:65:a5:93:f9:1d:d6:a5:65:e0:e3:0f:
5c:a2:22:48:70:5f:0f:7e:92:61:df:73:59:5f:7a:20:b8:64:
0b:fb:02:c9:58:0b:2f:7b:06:a0:dc:8f:9c:23:ca:72:cc:14:
1a:f3:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:25 2025 by rpki-client