Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: PcnvaAW03JkfElYJKObZ9pqz8JY5mDnVq7xxc5+GNSk=
Subject key identifier: 6C:82:01:91:EF:34:2B:AD:A7:58:E6:08:4F:E2:35:06:A3:50:C8:27
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 019A71EEF19226166BBCFBCD36BAC6ED2F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: tuQUj7D7u6GPkq4DPuYRsy65qWESIiiaC2mbA2l0tJI=)
2: OS--Lk_-r0Q1zq4QqDjYyZsHuMY.roa (hash: MVTlexALEq+OtJ89dtjZODG5hLFqDXsO9MxPnvJn09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f1:92:26:16:6b:bc:fb:cd:36:ba:c6:ed:2f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=6c820191ef342bada758e6084fe23506a350c827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:e3:a4:55:2d:61:d4:2f:2c:a8:d1:c9:4e:
e6:6f:71:62:10:59:d1:d5:11:7c:6d:71:1c:09:be:
40:6d:15:5f:97:a2:60:30:34:a2:6d:aa:ca:19:4f:
cd:d0:a9:78:2a:f2:f7:87:b3:bf:1e:9c:e0:28:e1:
0c:cd:f1:14:c8:95:3f:50:ac:23:5e:d3:6e:7e:de:
47:ce:26:9b:b3:bf:65:78:f5:43:61:42:66:bb:cd:
3f:91:36:2d:a3:84:65:25:39:d2:0b:a7:21:32:89:
3b:8d:f8:81:71:80:be:6a:c0:47:21:77:d4:c0:8d:
ac:ae:40:5b:07:b3:ec:81:ad:e8:91:7a:4b:3c:c2:
3f:40:a6:56:46:fe:11:8b:ef:91:0c:83:f4:f6:97:
12:62:34:0c:75:ee:e2:43:95:b3:eb:0e:99:70:0e:
78:f9:28:5f:69:dc:7a:25:cb:22:fc:58:41:43:ef:
22:a0:00:f1:4c:d3:18:cd:79:2f:7f:ac:ad:52:7f:
97:8d:f3:77:70:11:3e:0f:04:a6:6e:06:55:e2:f3:
7d:b3:b7:ce:ea:ca:3e:20:e9:92:e3:30:93:10:9b:
99:92:4f:73:2c:78:57:50:9e:2b:2a:47:3d:8e:38:
c1:43:7f:cb:84:8f:79:bc:04:5f:d6:ae:1e:70:13:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:82:01:91:EF:34:2B:AD:A7:58:E6:08:4F:E2:35:06:A3:50:C8:27
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a7:cb:83:ef:62:a9:19:9a:38:85:65:54:5c:4e:e3:84:19:
26:f2:17:54:01:6a:d2:09:21:39:3f:48:6e:88:4f:c2:25:25:
ef:a8:6c:0a:84:eb:5e:d5:ed:70:0d:77:01:7b:bd:0c:dd:63:
b0:59:af:e2:e2:8f:1c:bb:3a:bf:50:88:dd:17:f1:02:d4:a1:
f2:c5:3b:81:5c:db:76:85:dc:a5:ba:5f:3a:fa:d7:d3:34:78:
9d:9a:c1:9c:16:36:10:aa:c0:19:2e:14:43:17:1d:64:10:ee:
e6:c8:8a:29:34:a1:b3:49:18:fe:ee:dc:de:a2:ff:66:0e:a3:
42:af:85:9b:54:ba:c1:ae:7a:10:aa:89:51:a6:ca:ef:75:ad:
60:a4:c7:71:ad:c9:17:0b:6d:11:f0:73:20:2d:a3:98:62:6f:
2d:79:87:50:50:0d:ca:a1:e5:28:3e:a6:d0:84:50:14:9a:a8:
61:f5:81:30:35:43:74:75:83:f0:ff:4c:ad:35:f0:fe:44:30:
99:33:fe:dc:66:da:df:f8:ed:7a:93:9f:93:e1:71:9e:3b:cb:
8f:2f:a3:97:37:f2:1b:61:dc:15:6c:fa:a1:f5:4e:c3:3c:2f:
18:53:3b:48:14:d5:fa:7a:ac:03:b1:c0:7c:e0:60:c4:9f:82:
d2:0a:fb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:04 2025 by rpki-client