Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: 1NIgvC2HrF0VLImWUwDK6eoPWuMgh3CZFInMTrD8z98=
Subject key identifier: B9:ED:76:F1:88:F6:C4:3B:B9:A8:3D:DE:D1:86:71:A9:09:14:07:56
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 019A2667920BE1B6895F637412002789306E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0B4B
Signing time: Mon 27 Oct 2025 16:01:53 +0000
Manifest this update: Mon 27 Oct 2025 16:01:53 +0000
Manifest next update: Tue 28 Oct 2025 16:01:53 +0000
Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: MN818iK448jQAPrhwPq3Cq/LCNwTGIgWM22SvzqWVns=)
2: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (hash: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:92:0b:e1:b6:89:5f:63:74:12:00:27:89:30:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Oct 27 16:01:53 2025 GMT
Not After : Oct 28 16:01:53 2025 GMT
Subject: CN=b9ed76f188f6c43bb9a83dded18671a909140756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:0b:6b:99:bc:95:27:f0:0c:5b:37:95:e9:
46:02:3b:c5:81:3a:d0:ea:d6:7c:3f:52:30:c4:b1:
6e:e8:3d:f8:cd:7c:4a:93:af:5e:e0:cb:b1:f4:7d:
84:3b:77:dc:9c:a4:ff:86:a2:e6:a0:53:7e:33:b8:
d2:08:03:d5:c9:0c:4f:57:4b:33:00:05:3a:ea:8c:
b5:7b:06:e4:b4:b8:b9:8b:90:79:0b:81:79:a4:24:
11:7c:2a:66:00:e9:70:db:5b:3d:91:3b:b6:36:b5:
e5:9b:03:a7:de:d8:2e:98:0f:21:6c:40:f3:73:84:
ab:5d:77:fe:5d:98:83:49:7d:45:47:7e:61:83:9a:
51:4c:06:ec:05:49:35:65:f1:50:7d:b7:fa:7c:59:
8b:f0:19:9b:d1:6a:b8:8a:65:8a:b8:29:86:9d:d6:
b5:91:f0:8e:1a:9e:c2:28:4e:62:37:e9:36:05:6f:
ae:cb:12:6e:6c:16:56:d1:b1:42:50:c6:36:5a:d5:
a7:38:49:65:34:bc:f1:ec:10:02:09:0a:2e:6c:25:
0d:b5:15:9b:96:61:1d:7e:ba:cc:aa:fe:b0:00:9f:
28:54:df:2f:f4:e9:1d:26:76:9a:f8:c3:3f:31:34:
23:d2:87:0b:37:c2:be:bd:b3:c9:74:4d:5f:f4:ff:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:ED:76:F1:88:F6:C4:3B:B9:A8:3D:DE:D1:86:71:A9:09:14:07:56
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b6:6f:96:64:ac:1f:6c:96:0b:27:f8:12:28:ba:ef:07:d2:
83:5c:4b:74:79:b5:f6:6e:e5:94:5a:95:1f:ed:32:59:45:fb:
56:17:06:c8:5d:3d:0d:c1:cd:3d:0b:ae:48:a2:3b:dd:e4:5b:
5c:b6:4e:b6:cd:65:16:18:b2:27:4e:8f:8e:85:4d:07:f7:f5:
b9:54:69:4d:bc:ea:ec:6b:4f:26:c2:ac:4f:18:8b:98:0a:d3:
16:e8:ef:b1:79:0f:ea:20:d1:ae:77:2e:ff:d4:f4:75:1b:33:
f7:a6:2e:6c:af:d3:bb:70:42:94:95:1f:4d:e1:b9:88:23:3c:
49:fd:60:d5:65:4b:db:54:c2:95:83:91:97:cf:5f:60:d3:69:
56:de:03:78:ef:96:50:47:09:1f:83:69:b6:45:9b:92:37:65:
da:56:4d:fe:6d:8f:35:fa:26:61:8e:57:1e:53:ba:43:30:c3:
cb:fb:fd:1e:0e:70:9b:65:73:b1:16:f3:15:04:81:55:a0:bb:
b7:b7:43:eb:13:34:04:80:e6:4d:93:99:9a:04:8a:e0:c5:1c:
1a:35:d7:4f:fa:c0:87:f0:67:9d:a1:5e:81:46:fd:48:b1:73:
50:70:9f:11:aa:28:86:1f:2c:c3:56:b0:5f:49:a2:ca:9a:13:
12:61:74:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:14:49 2025 by rpki-client