Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: VUAjL6+I0EoSfATO9JuDUy5Eew1QOY7JFpOST51+qfk=
Subject key identifier: C4:0E:00:5E:5E:9D:FE:6E:EF:E0:E8:DF:7A:37:2D:A3:1A:EB:54:BA
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 019853442D76A660803B0F57031ECB6AE555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 1329
Signing time: Mon 28 Jul 2025 23:00:33 +0000
Manifest this update: Mon 28 Jul 2025 23:00:33 +0000
Manifest next update: Tue 29 Jul 2025 23:00:33 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: jwVaCTXnBHJIl18A8vz8Zs2R5LQECFTF7bM/E/cLjWM=)
2: bL9sAOLGYhfURofnKnFBFn1wsJo.roa (hash: MQ9wm3ykSQpWjdkgAkUhN5KBzQ/fKRTzO8IDNPZe+jY=)
3: kjcDWuGIuX0pVG6bb41NnKIPOqs.roa (hash: YFnfiVE6rUbpB2uXyovY7NmRfmouuM77f2tO5i352qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:2d:76:a6:60:80:3b:0f:57:03:1e:cb:6a:e5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Jul 28 23:00:33 2025 GMT
Not After : Jul 29 23:00:33 2025 GMT
Subject: CN=c40e005e5e9dfe6eefe0e8df7a372da31aeb54ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:e9:3a:f8:e5:30:c9:7b:75:dc:7d:92:4f:
45:3d:12:65:15:ee:b0:22:cd:48:8c:5f:54:cf:23:
d8:a7:6d:ff:84:dc:04:2b:e9:1f:e9:ea:6a:28:53:
c5:2e:cf:7e:ea:dc:15:11:cd:1b:53:77:a0:ee:36:
a2:e9:61:9b:35:78:fd:14:fa:06:11:31:5e:66:6e:
ce:45:43:4b:8e:2d:5e:c9:2a:38:da:d2:73:2a:ae:
22:ee:27:b6:a3:83:4a:1f:fd:1d:3c:47:d0:38:42:
9f:1e:79:04:22:46:72:6a:be:3c:b7:1f:28:06:10:
54:fe:44:e3:a3:a5:bc:9b:3b:05:1c:15:20:e0:f4:
df:f6:a1:b4:19:a7:9e:c0:e8:b8:d7:ec:3e:72:b1:
8a:aa:25:86:df:c0:c4:11:4d:89:ae:b6:76:2b:46:
6e:37:6e:34:c6:b8:98:d8:68:82:1d:0b:87:68:71:
82:3c:2d:25:68:3b:4f:cb:2e:4a:13:04:a7:8a:5e:
a4:ea:fb:37:58:e4:ea:fc:c3:85:a9:03:3a:eb:94:
98:6a:e0:60:5f:2f:72:69:17:2f:89:98:d2:98:56:
30:05:2f:24:4d:f8:79:89:a1:b5:94:ba:42:9a:3c:
c7:f5:d6:0e:8f:fa:15:6f:7c:30:b4:a4:ed:57:2d:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0E:00:5E:5E:9D:FE:6E:EF:E0:E8:DF:7A:37:2D:A3:1A:EB:54:BA
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2a:3c:9e:e0:0e:61:b2:57:80:53:57:7e:11:4f:96:91:b7:
0e:91:49:56:cd:53:12:cd:bd:b4:c3:4a:72:d0:48:05:11:57:
17:51:5a:92:9f:da:12:66:62:b5:56:10:d3:c1:b4:b3:c3:cc:
b3:31:4f:c9:78:01:7b:be:d3:e4:9b:81:ec:f2:8e:59:f0:5b:
78:46:f5:eb:4a:34:7c:6b:8f:88:74:ef:46:a8:19:96:38:38:
b8:7f:2d:c8:e5:15:58:19:e0:86:09:a2:62:d7:7c:68:0f:e1:
8b:46:8d:d9:23:e8:8b:3e:4e:5e:43:d0:0f:b5:76:cc:72:7c:
10:f6:e6:53:a5:60:63:31:7f:8c:ce:59:f0:e8:dd:3e:e9:5d:
1b:62:48:a0:55:f1:46:f6:96:c6:a1:a9:1a:71:97:f7:f5:db:
42:88:42:2b:66:ec:b0:b4:ba:eb:88:06:5d:44:50:04:30:12:
ae:c4:c3:ef:33:98:df:c0:93:57:1f:ad:69:8a:c6:8a:2d:de:
7c:e4:c1:d2:70:eb:a1:59:27:12:1d:95:98:f0:f8:cf:01:68:
10:40:92:8c:0b:9c:46:0d:55:9f:c4:92:0d:cd:02:9c:13:78:
fc:a0:a8:16:02:18:c8:14:71:01:b0:bd:89:9c:83:fb:c2:06:
f6:d7:cf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:39:36 2025 by rpki-client