Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: ngO7pSLbo3vL26o2z32gI4xNhP/h0TmgkyoFL1UPJGY=
Subject key identifier: 25:21:FC:1D:42:B5:C6:03:1E:E3:8B:C5:5A:24:E0:DE:5E:51:67:E0
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 01993802A6895FF27015B315706E808D6FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 1681
Signing time: Thu 11 Sep 2025 09:02:01 +0000
Manifest this update: Thu 11 Sep 2025 09:02:01 +0000
Manifest next update: Fri 12 Sep 2025 09:02:01 +0000
Files and hashes: 1: NhjTM3dOPnMsLQ7ebQq_0aK61EU.roa (hash: pDZlPFnX9elEIPNsw2D7ajm33IBeKqhaDpBvumlLRQw=)
2: O9m05o_UDIKemPeCfI7Sc16B69Y.roa (hash: yXqGk5sjcirZhyM4OHBNZEpEXcAXLb0N0cHRwAFg1zo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: zbXDbrmf+mrmVwBEUJ+Opbs+gyHHw8uJJ41UUBKgShA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 09:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:a6:89:5f:f2:70:15:b3:15:70:6e:80:8d:6f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Sep 11 09:02:01 2025 GMT
Not After : Sep 12 09:02:01 2025 GMT
Subject: CN=2521fc1d42b5c6031ee38bc55a24e0de5e5167e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:7d:c0:87:a4:0c:0f:df:77:5a:f0:f5:60:
ff:c1:ec:3b:64:d4:e6:56:a7:72:2e:cc:08:ac:d6:
08:fd:a4:4c:64:c9:f8:5b:6b:bf:b4:cc:8e:05:7b:
7f:d3:48:d8:ab:74:bd:f1:c7:4f:06:06:13:bb:85:
7b:20:7a:ca:ff:e3:37:1d:d6:1e:6d:d2:03:14:80:
58:d6:ff:73:8a:fc:c2:cf:67:bd:32:ca:aa:96:1e:
9d:a3:bc:86:73:c7:8f:9c:33:a5:eb:3c:d8:11:13:
04:0b:78:fb:45:57:e6:18:a6:73:e4:0e:ed:c6:43:
06:9d:58:06:32:a8:60:1d:67:7b:9a:85:d3:4f:b9:
4a:56:b1:56:13:01:09:b8:fc:0e:b8:b7:b0:85:cb:
df:29:e1:30:fc:5c:a8:4a:da:fb:f6:07:8a:5a:6f:
53:c0:bf:3b:48:b3:54:0d:0f:f0:21:d4:5d:0d:73:
bf:b8:83:56:22:74:67:21:69:9e:f2:8d:78:ed:79:
39:f1:0b:61:b2:fa:dd:88:48:3a:d5:30:3e:50:32:
47:46:a9:ed:fe:38:ce:35:6e:08:88:25:d9:93:fa:
d5:01:a9:b9:8b:5a:35:95:68:7e:a6:50:9e:94:dd:
d6:f5:9a:87:a2:b4:63:53:0a:f1:da:43:2d:a0:11:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:21:FC:1D:42:B5:C6:03:1E:E3:8B:C5:5A:24:E0:DE:5E:51:67:E0
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9e:18:0a:58:b1:da:a5:99:b4:40:1f:6e:3c:9c:3b:18:0b:
06:07:7a:3d:de:19:35:10:a4:72:dc:39:67:4c:72:90:ce:d4:
a5:1d:8b:16:00:ab:13:0e:aa:d7:98:4f:44:48:3e:88:c8:e1:
44:9e:73:fa:20:d1:69:94:74:c3:04:4a:e5:2a:f2:97:e4:e1:
54:13:aa:46:82:46:69:5a:4d:f7:09:b6:10:a1:9b:19:52:99:
44:3b:ff:bc:2d:94:03:f2:cb:8f:0b:2b:49:ae:8b:b5:0a:d6:
16:c5:3e:e6:d8:01:c7:05:3a:60:c0:94:0e:6e:da:61:b2:31:
fd:15:3e:44:bd:57:3f:8f:e6:d1:ef:32:a7:ca:82:2e:a6:82:
09:aa:26:cf:c8:60:c4:33:ab:3d:7f:16:67:fa:e0:16:a8:a6:
7e:49:ab:53:6d:0a:89:89:ec:2c:b7:40:a1:67:73:a9:81:51:
d0:6f:91:9b:35:4c:cb:72:27:f3:74:6a:38:fc:91:21:54:8e:
fe:ef:13:28:37:07:c2:86:7a:7c:af:73:e7:ed:07:b2:59:b1:
38:e4:4c:22:46:e9:d2:e1:4e:bb:33:a2:8e:ec:1c:4a:fa:11:
42:b6:7a:8f:0d:32:2e:76:43:cb:6d:31:29:34:31:0d:b2:7f:
9b:ec:42:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 18:56:38 2025 by rpki-client