Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: ISgYBMJWUKGI1gv8uDwy1ZTUlx7ufhl8TKujLlgdw9Y=
Subject key identifier: CA:2F:98:2D:92:27:C7:97:4E:94:62:9D:89:9A:EA:59:85:A6:BC:05
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 01995DC55E270050131C8AE511DBAD9C00C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 13B3
Signing time: Thu 18 Sep 2025 17:00:39 +0000
Manifest this update: Thu 18 Sep 2025 17:00:39 +0000
Manifest next update: Fri 19 Sep 2025 17:00:39 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: JHM2n1A1lUk/61wRzX2LPgzOJyJW0r7vuxzR0YWcRHE=)
2: bL9sAOLGYhfURofnKnFBFn1wsJo.roa (hash: MQ9wm3ykSQpWjdkgAkUhN5KBzQ/fKRTzO8IDNPZe+jY=)
3: kjcDWuGIuX0pVG6bb41NnKIPOqs.roa (hash: YFnfiVE6rUbpB2uXyovY7NmRfmouuM77f2tO5i352qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:c5:5e:27:00:50:13:1c:8a:e5:11:db:ad:9c:00:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Sep 18 17:00:39 2025 GMT
Not After : Sep 19 17:00:39 2025 GMT
Subject: CN=ca2f982d9227c7974e94629d899aea5985a6bc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:90:f0:c8:a3:3a:a6:49:e3:ec:12:23:1c:
54:35:b0:19:6e:79:93:ed:27:84:42:9b:ff:61:ff:
02:e5:d8:59:a7:d0:8f:9e:59:2a:c1:96:f8:7d:4d:
6b:30:3e:00:3e:37:16:16:f6:e2:e3:39:60:23:b0:
2f:09:20:1b:ea:02:a2:fb:4b:4b:c8:41:28:5f:71:
66:80:3a:7f:05:3e:68:1d:79:a9:4a:03:36:e5:8c:
de:77:e2:5a:6b:ed:61:f5:ae:d6:09:f0:b6:6d:14:
d2:d2:77:7b:f0:f6:d4:31:4d:63:7d:ec:b1:ed:8b:
8e:91:a8:00:55:78:f3:01:2f:a6:bf:c0:4d:93:b1:
b3:b9:a9:71:0c:ce:a2:bd:ed:1f:5d:06:f1:10:18:
59:8f:8b:32:3e:d8:ba:6e:90:80:fe:23:52:1c:df:
1c:ba:8f:21:48:9b:62:f5:28:ae:63:ad:ee:84:e7:
6f:55:e5:d5:04:de:46:84:b3:e7:35:bc:d1:4d:d5:
bc:e6:fa:69:0e:62:68:bc:45:d8:c3:7a:c8:56:31:
32:76:be:5a:21:31:c0:6d:73:db:3e:8d:29:44:00:
5b:0d:f9:5f:93:ab:51:ff:38:81:cb:b1:d7:31:2f:
87:ac:8c:c5:4b:f0:3e:5f:bc:c9:6b:01:1d:52:4c:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2F:98:2D:92:27:C7:97:4E:94:62:9D:89:9A:EA:59:85:A6:BC:05
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d8:2e:c0:fc:df:82:f8:93:99:47:75:60:39:58:74:db:b2:
68:46:40:03:32:ab:2c:50:aa:63:e3:74:16:96:de:ea:8f:c1:
83:72:9f:d3:c0:49:c9:1b:2c:40:f5:e1:0a:69:e8:a9:cd:14:
c9:db:16:98:6a:6a:d1:76:48:e4:74:e5:1d:21:13:ff:ff:a8:
08:58:54:37:c0:21:19:c2:6a:43:d4:dc:a1:32:44:0e:1f:97:
54:14:98:72:a8:03:f2:95:b4:5d:cb:b7:11:78:b1:c4:74:d3:
ac:fb:1a:a3:32:2d:ae:08:19:67:44:36:df:c6:47:ce:31:41:
78:5f:54:52:d2:92:cb:f0:41:19:e1:1c:af:34:1b:a4:1f:d3:
f1:8b:43:95:46:83:ba:4d:a9:37:20:c0:40:72:30:00:86:9f:
b9:0b:a1:0f:a4:d4:55:37:d5:18:89:2c:c6:a2:2f:3a:d4:0c:
f7:09:fc:81:79:1a:9a:51:e6:46:67:25:c0:b4:ea:d4:95:a6:
35:1f:1a:7a:7b:66:30:af:40:3c:56:fc:1c:36:ac:4b:2c:9e:
6d:12:7f:6e:59:c3:7a:a7:a8:6f:87:09:a5:84:d2:78:8a:db:
5f:76:20:6b:f7:52:67:c8:ec:1a:1a:58:0d:ea:90:89:7a:6d:
5a:10:57:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZldxV4nAFATHIrlEdutnADEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOGQ4MjIxNjVlN2YwMWY3MjJjOTczOTY3Zjc1NTQ2MDUy
NDA4MDIwHhcNMjUwOTE4MTcwMDM5WhcNMjUwOTE5MTcwMDM5WjAzMTEwLwYDVQQD
EyhjYTJmOTgyZDkyMjdjNzk3NGU5NDYyOWQ4OTlhZWE1OTg1YTZiYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHiQ8MijOqZJ4+wSIxxUNbAZbnmT
7SeEQpv/Yf8C5dhZp9CPnlkqwZb4fU1rMD4APjcWFvbi4zlgI7AvCSAb6gKi+0tL
yEEoX3FmgDp/BT5oHXmpSgM25Yzed+Jaa+1h9a7WCfC2bRTS0nd78PbUMU1jfeyx
7YuOkagAVXjzAS+mv8BNk7GzualxDM6ive0fXQbxEBhZj4syPti6bpCA/iNSHN8c
uo8hSJti9SiuY63uhOdvVeXVBN5GhLPnNbzRTdW85vppDmJovEXYw3rIVjEydr5a
ITHAbXPbPo0pRABbDflfk6tR/ziBy7HXMS+HrIzFS/A+X7zJawEdUkyJ9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMovmC2SJ8eXTpRinYma6lmFprwFMB8GA1UdIwQY
MBaAFEuNgiFl5/AfciyXOWf3VUYFJAgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEt
NWFmOTU4Y2VhZjZlLzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEtNWFmOTU4Y2VhZjZl
LzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9guwPzf
gviTmUd1YDlYdNuyaEZAAzKrLFCqY+N0Fpbe6o/Bg3Kf08BJyRssQPXhCmnoqc0U
ydsWmGpq0XZI5HTlHSET//+oCFhUN8AhGcJqQ9TcoTJEDh+XVBSYcqgD8pW0Xcu3
EXixxHTTrPsaozItrggZZ0Q238ZHzjFBeF9UUtKSy/BBGeEcrzQbpB/T8YtDlUaD
uk2pNyDAQHIwAIafuQuhD6TUVTfVGIksxqIvOtQM9wn8gXkamlHmRmclwLTq1JWm
NR8aentmMK9APFb8HDasSyyebRJ/blnDeqeob4cJpYTSeIrbX3Yga/dSZ8jsGhpY
DeqQiXptWhBXeA==
-----END CERTIFICATE-----
Generated at Thu Sep 18 22:44:03 2025 by rpki-client