Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: GQBeglZKSG1ly8wQZfbft4iD0fXa4OEzs+S8Vxh/f3M=
Subject key identifier: 1C:59:81:37:D4:67:CB:CE:4F:EC:51:77:9D:74:7F:06:AF:DF:5F:9D
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 019748FA0DBC289E07AE980174686199E003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 143A
Signing time: Sat 07 Jun 2025 06:00:36 +0000
Manifest this update: Sat 07 Jun 2025 06:00:36 +0000
Manifest next update: Sun 08 Jun 2025 06:00:36 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: x2VbEVW5dGlxExUm7n7c5gmr+qdmgz+5iCYjkk0pt1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:0d:bc:28:9e:07:ae:98:01:74:68:61:99:e0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Jun 7 06:00:36 2025 GMT
Not After : Jun 8 06:00:36 2025 GMT
Subject: CN=1c598137d467cbce4fec51779d747f06afdf5f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:fc:96:25:94:32:a9:17:69:88:ad:8e:f8:
d5:e3:99:36:ac:0f:86:9d:a4:22:19:9a:7b:f6:23:
73:9f:70:88:b5:03:93:0e:34:8b:2c:2a:86:af:c6:
87:4c:43:ae:8b:f2:8f:a1:bf:93:6a:ba:1e:94:e9:
c8:15:d0:6b:f1:13:2d:db:69:d1:a8:cf:36:14:b1:
c3:f5:4c:37:6b:51:59:56:0a:33:71:56:f2:61:de:
83:38:6c:42:3a:fa:7d:ba:14:7f:bb:4f:56:9b:22:
a8:85:98:02:cb:4a:a2:ae:f7:90:41:a2:59:18:6e:
47:a0:18:0e:37:40:ec:e8:58:36:69:1a:8c:c5:e3:
28:ca:3b:9d:f1:ba:ed:fc:d2:55:47:65:5b:a0:e8:
9e:08:c4:09:78:60:aa:0a:51:bc:b7:d8:c2:49:aa:
76:b1:e4:90:3e:c9:70:b6:fc:0c:31:70:76:f5:e6:
7a:f7:4a:50:80:11:3e:d0:e8:b1:8c:f6:f2:bd:5e:
8e:c6:85:39:36:f3:86:a9:04:38:96:7e:61:b5:11:
87:da:31:eb:63:15:8a:2b:20:80:01:7a:55:b9:ca:
b2:1f:02:99:67:21:55:bf:74:2d:45:f4:87:80:5f:
f7:73:57:60:20:f6:ec:91:ab:80:e8:c8:39:89:c5:
12:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:59:81:37:D4:67:CB:CE:4F:EC:51:77:9D:74:7F:06:AF:DF:5F:9D
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7a:9a:62:c9:6b:35:6c:f8:86:97:69:12:86:47:8f:9f:ef:
f9:87:c8:da:c9:f6:04:4d:25:40:a1:36:c5:42:17:30:1f:bc:
4c:e0:1b:ee:38:15:de:e4:c6:a4:43:8e:80:76:4f:39:cb:b3:
df:9e:1b:ab:51:af:7b:46:6a:2e:67:bd:41:66:a1:31:7f:eb:
24:17:04:3e:61:cc:2c:87:a0:85:20:a4:e3:4e:8d:1e:e3:e8:
62:c5:85:2f:a6:ab:fa:06:ad:2f:a2:f8:6a:d0:c7:53:e1:f8:
a6:1d:e8:a2:a7:13:e1:c9:23:c3:36:11:84:35:e8:2e:86:24:
7a:16:de:2b:99:c1:2b:22:48:91:30:0f:7d:ac:3e:6b:30:32:
99:da:4a:f8:96:85:35:69:c9:e2:32:02:c4:6f:b1:3d:54:58:
65:a1:8f:57:e7:cf:a5:27:14:23:9c:ff:f8:49:0c:d0:e1:7c:
ea:05:98:37:19:dd:ea:b6:d4:32:6f:0d:36:65:d3:2e:9d:af:
fc:8f:90:5c:5d:38:fe:86:84:2e:d3:5a:23:85:e4:f6:5c:ef:
0a:4c:4c:5c:f0:2c:df:5d:5c:b5:b0:f2:fd:d5:26:71:01:ea:
f7:a6:6a:bd:b9:2c:30:28:68:93:47:22:8b:3e:65:33:37:01:
7c:1b:df:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:02:58 2025 by rpki-client