Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: x+Rnfi7HhgsW07B5GcdczAPeBdOtlHuBSdHPFFtV9JE=
Subject key identifier: 58:9C:D4:C1:A4:BE:F0:44:3F:00:E0:31:B2:CC:41:4D:6A:59:D8:C3
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 019A72259D082C9D0E7A5B7B0B637D893479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 15DD
Signing time: Tue 11 Nov 2025 09:00:58 +0000
Manifest this update: Tue 11 Nov 2025 09:00:58 +0000
Manifest next update: Wed 12 Nov 2025 09:00:58 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: KnYzxe8jRf+OedZuEummvsJQtb83JaDQsbG/PChreb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9d:08:2c:9d:0e:7a:5b:7b:0b:63:7d:89:34:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Nov 11 09:00:58 2025 GMT
Not After : Nov 12 09:00:58 2025 GMT
Subject: CN=589cd4c1a4bef0443f00e031b2cc414d6a59d8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:10:ef:33:85:57:d8:af:cb:9f:37:b0:29:
86:4f:65:90:96:41:eb:f2:64:31:fa:3c:9e:99:03:
6d:21:46:8f:8b:cd:19:20:b9:4a:eb:19:2a:a3:3e:
c6:7f:6d:5e:56:08:6b:42:8d:07:23:24:f6:91:28:
13:30:c0:21:94:b7:0f:9f:c3:b6:5d:ab:be:23:ac:
31:6e:e1:81:48:cc:8d:bf:c3:48:29:d2:f7:60:0a:
cb:97:db:1f:0c:e5:cd:6a:b2:32:81:60:43:2b:64:
3c:21:c0:d7:34:37:48:02:87:e6:39:d3:b4:30:ab:
8b:d2:68:60:a8:65:0d:8b:8e:5b:85:a1:e7:7d:f7:
57:f4:0c:88:72:de:b6:2b:69:61:6c:00:e9:31:81:
2e:86:bb:ee:d9:76:c5:9e:ba:e9:0f:23:77:4b:7b:
7e:6c:27:bf:9a:7c:25:fe:77:98:b6:2c:38:c2:1f:
18:da:19:fc:c5:96:b5:a0:f2:6c:33:bb:93:ab:0f:
4f:cf:15:20:ec:61:0e:1d:68:d1:94:26:7f:b9:05:
f0:d3:dd:6b:36:a0:2d:ff:4e:b2:f4:a0:a3:b8:43:
44:b9:3e:bc:67:24:d7:62:fa:0c:f4:1d:81:52:47:
2a:72:f0:c0:32:8d:d1:69:48:99:59:cd:87:63:14:
e9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:D4:C1:A4:BE:F0:44:3F:00:E0:31:B2:CC:41:4D:6A:59:D8:C3
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d0:4c:51:99:fd:1d:b3:ff:fd:2e:9c:00:bb:09:8e:0b:f7:
6e:bf:8e:9b:4f:f9:f4:46:17:61:72:5e:4c:ee:a7:40:43:98:
a6:e1:ff:7a:f9:18:da:7c:c6:11:a0:ba:37:57:b8:f0:89:e5:
41:5c:f4:8a:56:2d:1b:0e:ae:ec:74:fe:99:e1:0c:be:e0:97:
48:20:59:aa:dd:a2:65:32:03:89:fe:75:58:00:36:41:56:27:
68:bc:13:4b:0e:e3:e7:39:1a:72:53:4d:dd:e1:ab:8a:22:3b:
f2:b7:d3:3f:da:19:d2:90:79:69:78:0e:78:45:82:75:ee:df:
cc:68:2f:30:2d:0f:35:e0:b9:a6:74:88:16:2f:a1:cb:68:ca:
31:0f:a5:f4:db:8f:08:6a:b1:de:9e:ff:14:44:ce:2d:5e:75:
f5:0d:d6:c4:a9:40:62:d9:25:20:0f:d3:1d:07:14:eb:ec:ce:
e3:ca:5b:47:11:ae:a1:3e:5b:f6:17:e2:f8:f7:5d:01:63:6c:
70:d5:67:e9:9e:85:68:50:f4:1d:9a:1d:a4:af:7a:56:6d:29:
23:f2:3d:ef:6d:3b:29:bf:f0:ec:75:0e:35:9b:40:33:40:0b:
67:5e:31:ab:35:ba:be:a2:22:f6:e6:7d:9d:e2:fd:d7:41:3f:
75:d2:13:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:42 2025 by rpki-client