Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: 6QMEsdJeSxJhmaDNipQoyG3faDo4byWc8E02WD3vkeU=
Subject key identifier: 3D:2D:B3:ED:5C:90:2A:60:A8:49:40:F5:9C:62:0E:85:B5:EF:B6:A4
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 019845F68742BB8297D41A668CCD8016B083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 14BD
Signing time: Sat 26 Jul 2025 09:00:40 +0000
Manifest this update: Sat 26 Jul 2025 09:00:40 +0000
Manifest next update: Sun 27 Jul 2025 09:00:40 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: yyfleIHdoMujKructnUHQu95vXgt3WF25gZyjbdSsKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:87:42:bb:82:97:d4:1a:66:8c:cd:80:16:b0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Jul 26 09:00:40 2025 GMT
Not After : Jul 27 09:00:40 2025 GMT
Subject: CN=3d2db3ed5c902a60a84940f59c620e85b5efb6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:fd:35:e0:c1:d9:fe:bb:b7:45:f1:65:12:
98:8a:3c:f0:ca:4a:46:fa:65:93:89:30:22:c8:4a:
26:94:f4:13:cb:81:c5:9d:a1:bb:e2:dd:87:af:fe:
dc:46:df:23:b2:84:d5:64:d3:0b:ac:1a:5a:fb:ae:
6a:2d:fd:cc:6d:36:ca:2f:e9:fe:f7:4a:8b:f1:6c:
dd:0f:5c:3f:ec:d6:54:7d:8b:fb:1e:f3:32:e3:ce:
67:7e:6b:49:53:e1:a2:9d:69:88:75:c7:0d:92:3a:
e0:6c:cc:42:12:0d:98:83:ae:7c:55:42:a2:43:63:
7b:50:1a:2a:ce:ff:a4:83:ac:a8:0d:4b:42:c7:97:
b1:fa:75:c2:3f:4f:f9:22:69:e2:48:fd:2f:48:09:
83:64:1c:97:f1:63:e0:49:d0:98:b0:ae:87:63:d0:
a9:e4:1a:e0:ce:d3:af:7b:5e:c9:17:f4:a0:0f:60:
e4:53:6c:d4:44:de:c2:a9:48:08:b9:46:3b:df:3f:
24:19:28:ad:ee:ed:9e:2d:fd:a3:8f:7f:d3:df:3b:
c8:ab:b4:3e:69:28:49:77:03:fe:32:db:57:9c:df:
51:c2:a8:3e:79:d2:87:f4:0e:3c:05:5f:49:22:9c:
d2:be:d6:58:59:a3:e9:88:6f:a0:3c:1c:57:c9:f4:
7a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2D:B3:ED:5C:90:2A:60:A8:49:40:F5:9C:62:0E:85:B5:EF:B6:A4
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f5:d5:6e:1e:2c:75:c7:4b:56:6e:55:16:3b:50:17:92:57:
5e:60:e0:15:e0:f5:6b:cc:1e:19:8b:3c:db:68:ff:07:b4:50:
fd:58:fe:7a:1b:4a:f7:d0:58:87:d9:eb:28:6d:9d:a4:83:99:
5a:98:1b:f8:4f:b6:bb:2a:29:9a:8b:2c:7e:a2:df:45:5b:fb:
fa:41:df:e2:1f:ce:8d:3d:bf:3d:df:d6:3c:42:b5:66:94:ac:
a3:d4:3d:5f:15:1f:0b:93:13:fb:8d:dd:12:d3:01:e9:bb:76:
18:87:97:a6:51:5d:74:da:db:9b:d4:79:7b:7e:b1:60:c7:9b:
92:6a:2d:48:ca:8c:5f:d0:95:b7:92:a1:71:81:12:8f:f0:a8:
76:59:c4:b9:90:9e:92:e5:b2:4d:b5:f2:e0:dd:fd:f4:c3:6b:
30:e0:2c:ea:03:f0:09:d5:d0:be:36:c0:e5:b6:e7:b2:ce:0a:
f6:f9:0c:39:77:38:3f:62:77:3b:3b:49:85:37:a6:cf:30:97:
43:2c:bf:81:11:23:84:3e:ec:21:7a:92:41:32:4d:2e:72:4d:
02:23:fd:5c:ea:77:18:ca:f4:f9:da:f2:54:01:2c:d2:bc:ab:
19:2f:66:9a:d9:50:18:47:3f:48:2d:58:b5:df:95:eb:b2:24:
96:f1:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:46:24 2025 by rpki-client