Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: lT+R0oT/AwVcdJSBHEObTsRxg0HrifIZyd+RIU2nisE=
Subject key identifier: A2:2A:B2:D9:EE:F6:5F:3D:DE:A3:E0:BD:B0:21:E9:19:03:78:28:B4
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 0198530EF25EF97F07FD43603739AAB8D8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0A59
Signing time: Mon 28 Jul 2025 22:02:25 +0000
Manifest this update: Mon 28 Jul 2025 22:02:25 +0000
Manifest next update: Tue 29 Jul 2025 22:02:25 +0000
Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: KhYJyivUcQbxE9N3tzvlaUPIGBkfCG3OO4O3KCY3MU0=)
2: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (hash: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:f2:5e:f9:7f:07:fd:43:60:37:39:aa:b8:d8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Jul 28 22:02:25 2025 GMT
Not After : Jul 29 22:02:25 2025 GMT
Subject: CN=a22ab2d9eef65f3ddea3e0bdb021e919037828b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:14:ff:a9:f4:2f:11:b2:f8:3d:88:04:a2:
29:cc:c9:ca:da:ec:e5:8b:aa:6e:1e:ed:7d:36:57:
2e:61:2d:30:c3:63:a5:91:b2:59:7b:c3:f0:9d:89:
5f:7f:8b:08:64:9d:d9:52:10:f9:79:1a:4f:19:2b:
66:e8:96:e1:df:54:a5:7a:f5:77:a5:ea:09:55:a1:
34:4a:5c:e4:20:40:10:e5:40:14:dd:cd:07:46:b2:
16:95:dd:c3:2d:d4:f8:8e:e2:1c:c9:a9:5a:9f:92:
20:12:c7:ad:f2:03:9b:e9:d9:9d:09:e7:c5:18:9c:
08:99:c0:56:42:68:0e:b9:4f:04:11:b2:84:52:71:
fa:b0:0f:01:bc:3e:0e:ed:e2:8c:44:e2:cc:4d:04:
b6:4d:3d:73:40:b5:a5:6e:0e:c2:af:5e:7a:6d:b1:
43:8e:e6:7b:21:1a:62:82:1a:27:a9:d5:2c:9c:8e:
33:75:37:2a:96:be:6a:25:23:69:13:9d:4f:07:72:
9c:c3:0a:01:c0:7e:42:73:6a:a2:b7:40:7a:b3:c2:
61:a4:d9:07:29:23:e1:1e:d9:29:85:22:a5:3f:98:
2e:ee:1d:cf:5d:7f:3b:d5:f6:7a:b4:43:52:74:cb:
e2:24:6f:8a:c2:60:ce:59:20:06:8f:dd:d1:5f:c0:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2A:B2:D9:EE:F6:5F:3D:DE:A3:E0:BD:B0:21:E9:19:03:78:28:B4
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:50:c5:4b:f0:09:90:22:a1:1a:d0:33:a6:2b:99:ab:f3:bc:
a8:70:8b:28:02:02:1f:c6:d8:85:c0:a3:2b:be:cd:1e:e6:29:
e9:3b:c7:e5:8f:35:5a:ac:f5:eb:b0:2c:93:7a:84:c8:02:9b:
02:39:43:5b:cb:08:b5:5f:0c:36:02:4b:46:2c:a5:42:18:60:
1f:fa:f2:32:4e:b0:84:64:3e:23:65:7a:a4:f1:99:78:cb:2f:
eb:62:45:f3:2f:8d:ee:da:20:8d:8a:cb:80:a4:6f:61:94:1e:
a2:2c:03:11:6c:19:d9:3f:63:00:28:07:dc:9b:31:f3:a2:cf:
d3:e8:2b:c4:76:72:16:b5:89:b4:7b:be:66:60:6a:14:a0:ad:
cd:c6:ac:9b:b4:b9:54:75:b6:c6:2d:1a:a2:48:5d:1c:36:f7:
d9:a9:04:4e:ff:90:28:0d:74:78:07:19:8a:d4:61:77:fe:8d:
93:dd:ed:90:6e:06:3d:0f:b7:18:3c:cd:d8:ab:e6:92:d2:fa:
09:cb:90:d2:be:33:ec:04:06:24:e2:19:d2:c1:83:38:91:64:
7f:4f:c0:2f:72:fa:3c:49:ec:61:fc:fb:44:c5:2e:eb:51:a8:
5f:74:f9:46:97:8b:c2:fb:e4:11:d0:c7:21:85:c2:75:cb:a3:
2a:f7:8c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:27:00 2025 by rpki-client