Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: BAMwrVaCRq5Wd+VpmqxOli/AKUV5D/lvNjnqvfI+uGk=
Subject key identifier: 15:13:4A:09:00:D6:59:C5:7F:10:AC:FF:F1:C3:DD:B3:EB:6D:C5:ED
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 0198499C7AD82493104D2C66933B6A39E294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 02:00:48 +0000
Manifest this update: Sun 27 Jul 2025 02:00:48 +0000
Manifest next update: Mon 28 Jul 2025 02:00:48 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: xfaJktheBv0ABbWQmMWXwOkCMyKDR50eaiMhhjxBl/A=)
2: OS--Lk_-r0Q1zq4QqDjYyZsHuMY.roa (hash: MVTlexALEq+OtJ89dtjZODG5hLFqDXsO9MxPnvJn09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:7a:d8:24:93:10:4d:2c:66:93:3b:6a:39:e2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Jul 27 02:00:48 2025 GMT
Not After : Jul 28 02:00:48 2025 GMT
Subject: CN=15134a0900d659c57f10acfff1c3ddb3eb6dc5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:b7:e2:96:96:eb:df:99:85:50:cb:50:9a:
77:88:9a:94:e1:4a:a9:5b:51:f2:d3:17:78:b6:16:
41:16:f5:22:22:cc:70:c0:5d:ec:77:97:13:71:b0:
00:6b:62:2c:06:35:59:19:4d:d4:b7:c4:ce:cd:84:
e2:78:ec:51:d2:0e:9e:3c:57:05:64:6b:fd:97:63:
d5:7e:c9:d8:b6:9f:cb:3d:13:0f:c4:70:d0:8d:b6:
7c:18:e4:30:b0:a5:1c:68:7b:47:6b:be:71:21:82:
4f:b2:78:d1:2b:22:a7:ec:17:8e:1a:b1:35:e8:11:
3e:cc:d4:19:16:5a:db:a6:69:67:34:c0:3b:8b:0a:
81:72:76:54:0b:94:59:2c:47:72:76:ac:5e:a9:e0:
d4:35:ff:87:fb:a1:b3:78:57:d0:05:79:ed:7b:06:
2c:fa:01:2b:56:53:6c:46:30:83:eb:a1:52:62:14:
1f:84:9e:d9:4a:53:97:f1:a0:cd:dc:0f:3e:f8:4f:
76:86:b6:3f:fb:6e:d7:39:f8:cf:4d:65:28:11:db:
07:f6:af:3c:37:2e:d6:9e:6a:ee:46:83:d5:0b:c1:
07:f8:1b:08:73:8e:b7:b1:f7:b5:5e:d5:dd:0a:ca:
45:ad:b8:50:35:86:1a:a0:6a:0a:83:87:b1:50:26:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:13:4A:09:00:D6:59:C5:7F:10:AC:FF:F1:C3:DD:B3:EB:6D:C5:ED
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8e:ef:8c:d2:a5:c1:e6:75:97:53:e0:e4:4e:81:4a:aa:26:
1f:da:4e:86:76:64:7e:0a:80:4e:c9:20:af:21:66:4c:c8:e3:
ff:67:23:45:a1:d8:d2:3e:f0:36:9c:c1:a0:69:cf:2f:b8:f8:
a9:7c:1c:7e:38:81:f2:41:44:30:93:40:70:f0:3e:48:6d:81:
7c:19:27:eb:44:f1:a4:d0:a3:60:f3:a6:15:02:f9:f8:0e:ea:
cc:9a:ea:12:0e:19:71:40:c9:63:48:66:4b:f2:a8:55:64:06:
a5:a4:b1:4c:61:5a:b8:65:b5:8d:b2:dd:54:34:fc:2e:d5:d5:
75:f6:a3:71:1a:c8:a0:72:5b:36:6f:2f:10:27:45:f6:df:36:
9b:81:85:f0:ca:08:e2:eb:c8:c0:3d:e4:e9:4a:5f:96:60:ce:
8d:c5:b2:de:d9:48:2d:90:e6:b5:3b:5e:e0:5d:f3:c0:e6:e3:
a6:bb:a5:39:0b:4e:72:50:24:46:69:57:e4:36:ec:ea:d3:67:
2b:61:12:89:1b:10:66:59:65:c9:65:87:17:e4:38:7e:c5:b1:
f3:57:7a:a1:f9:70:0a:26:97:59:02:56:bd:72:03:ff:1b:08:
85:56:48:16:79:08:83:b9:be:d5:5a:99:25:bc:e3:58:9e:b6:
7b:9a:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:51:12 2025 by rpki-client