Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: dbHejOqlBbe8lt2B5hjkgXKO0IFHeJTpsuUd/HpB06E=
Subject key identifier: 4C:D2:B1:DE:47:44:53:6A:B9:CC:68:DB:97:78:1E:99:0B:AA:A9:49
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 01974A43A86AE10FF90DF583AC391229C0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 09D0
Signing time: Sat 07 Jun 2025 12:00:37 +0000
Manifest this update: Sat 07 Jun 2025 12:00:37 +0000
Manifest next update: Sun 08 Jun 2025 12:00:37 +0000
Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: ROK4+OdaYYMMgwdXV7oZ52TupEimycKkkrUWYnbBmA4=)
2: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (hash: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:a8:6a:e1:0f:f9:0d:f5:83:ac:39:12:29:c0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Jun 7 12:00:37 2025 GMT
Not After : Jun 8 12:00:37 2025 GMT
Subject: CN=4cd2b1de4744536ab9cc68db97781e990baaa949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:7c:09:0a:4a:49:d5:a2:7a:39:e7:f5:1f:
b3:9a:9a:05:08:6d:39:4c:44:b2:8e:76:c4:a9:a8:
68:08:7e:2a:3e:d8:cd:f3:0b:d1:ce:71:10:b8:f6:
a4:a6:b8:fe:87:08:54:26:f1:12:20:a8:21:62:07:
03:75:ec:e7:d4:a9:e2:0d:fd:07:f6:c1:b5:26:c7:
0a:aa:fc:d2:5b:c6:a8:52:d4:d0:5d:fa:4a:84:bc:
f0:c1:bc:55:1c:70:52:54:d7:6b:66:1b:0d:34:6b:
e6:05:5a:4d:ac:73:e4:df:b2:46:62:3b:2a:03:f2:
b2:b1:55:bc:d5:e2:78:eb:36:a1:f7:21:dd:72:6b:
13:c9:89:6a:e5:61:5f:c3:f2:ab:c8:7d:bf:f6:8b:
4c:63:7a:df:8c:3e:dd:ca:a9:43:f1:8f:3b:cc:37:
0f:5e:8b:8a:df:9e:23:35:77:3f:57:00:de:0a:01:
be:e3:7f:b4:1f:5e:d0:11:54:51:99:f0:a2:4f:d7:
97:d2:28:68:e9:05:2e:04:e9:8a:fc:57:02:a0:09:
cb:d7:7e:05:38:a4:1d:f7:e4:3c:55:28:ee:23:52:
05:22:f1:5f:6f:8a:27:7d:c9:8f:11:ec:1b:ee:f4:
4f:73:e1:13:a0:0f:35:2c:e5:cc:3b:6d:84:00:70:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D2:B1:DE:47:44:53:6A:B9:CC:68:DB:97:78:1E:99:0B:AA:A9:49
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:70:44:f0:74:14:e9:eb:2d:2f:9d:73:42:1e:68:2a:fb:b0:
5a:67:f7:35:1f:8c:53:79:e8:d4:66:ee:96:05:9c:dc:be:47:
ba:f9:97:75:07:07:a9:10:b3:34:ce:db:e7:5f:fb:f1:14:07:
79:28:b1:c5:f0:3b:d7:e3:d5:5e:3a:8e:57:4e:bf:3c:ec:02:
7b:85:6f:c7:a1:da:ec:13:46:9b:0a:8c:25:23:34:de:f6:a2:
d8:ef:37:dc:01:de:c4:05:d8:d7:73:33:4c:7d:fb:70:a0:01:
ac:1d:7d:63:eb:36:2f:19:e5:73:93:a2:31:8a:99:38:d6:66:
2e:84:f5:36:e1:da:a0:76:a0:d3:8f:88:d8:9f:f9:98:3d:fc:
b2:fc:23:a7:16:1f:e9:21:c2:7e:84:2c:a9:cc:cb:ab:a7:cc:
db:8a:a2:e5:64:8a:77:00:37:4c:07:b5:1d:47:a0:63:20:66:
d7:cf:9b:3f:0d:e9:48:6e:83:02:99:b3:5b:fa:0b:b4:65:7d:
cb:b8:7b:e1:88:e6:c1:e5:23:b7:ae:56:77:4d:b0:7d:3f:33:
34:85:fe:72:75:ac:b2:4d:6d:51:b2:07:1a:fa:b1:cc:06:9e:
10:e6:ff:0e:89:14:cb:6c:8c:43:ef:2e:b7:fc:08:ff:d1:c0:
c5:00:4c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:50 2025 by rpki-client