Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: UnkekTD5mHxLoRUt8dQvsAsVCpfDndVBWdyMeoBtBo0=
Subject key identifier: 72:77:D5:6A:19:89:DC:1D:BE:07:2A:1B:C4:63:4B:BF:1D:54:AA:6C
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 01988B0EC09F4634B44AA76EFD1EB3EF6E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0A76
Signing time: Fri 08 Aug 2025 19:00:56 +0000
Manifest this update: Fri 08 Aug 2025 19:00:56 +0000
Manifest next update: Sat 09 Aug 2025 19:00:56 +0000
Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: 9ym/c7kEw42woc65QTcu3pT5Qoi6dyiUEGd3O6Xh5Uk=)
2: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (hash: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:c0:9f:46:34:b4:4a:a7:6e:fd:1e:b3:ef:6e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Aug 8 19:00:56 2025 GMT
Not After : Aug 9 19:00:56 2025 GMT
Subject: CN=7277d56a1989dc1dbe072a1bc4634bbf1d54aa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:cb:e4:e1:e9:09:f1:cf:3d:13:90:b8:22:
91:b5:31:eb:6b:ef:86:dd:0f:db:9b:19:11:46:8c:
61:9a:e7:d9:d9:91:a6:be:4c:a1:02:72:f7:73:2e:
ab:30:9d:89:13:ae:e4:70:14:ab:33:e0:a1:a3:1a:
81:65:b9:47:16:9d:9a:c1:f2:11:1d:b7:ec:d6:88:
53:dc:26:f5:40:ce:c6:35:68:6f:f1:2f:6d:2b:b4:
1e:ce:1c:9b:c2:ba:51:05:b1:c8:b4:de:07:50:b8:
60:bc:88:15:5c:8a:1d:77:99:ea:ba:c3:ac:d8:a1:
07:4e:79:16:2a:bf:c2:10:cf:e1:7e:80:cb:f2:b2:
5a:53:ad:0b:09:7d:3d:54:d4:82:61:0c:77:5c:8d:
a3:a7:d1:57:f3:47:c6:b7:74:51:e3:ad:a6:8c:4a:
2d:f7:91:47:f7:82:fa:a3:3b:9d:38:a3:a5:5c:dd:
87:9b:95:3e:90:af:8d:2d:7f:75:6d:f1:a0:ab:c0:
a1:9b:f4:c3:4c:c5:cb:b9:89:4b:d5:a5:c2:91:b9:
a3:3a:c9:c6:33:c3:c1:36:0c:dc:d9:75:6b:db:c8:
9e:18:04:57:10:ea:c3:7f:bf:d3:de:7e:a1:76:9e:
b2:53:a5:54:0d:fd:4a:62:97:e6:32:b6:eb:6f:bc:
81:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:77:D5:6A:19:89:DC:1D:BE:07:2A:1B:C4:63:4B:BF:1D:54:AA:6C
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:74:b3:89:d0:b4:0f:42:e1:fe:67:a7:7c:be:a2:de:cd:a1:
eb:70:b4:48:5e:f6:48:8f:53:f4:f7:88:41:74:31:73:b1:9f:
65:32:09:0e:0c:32:97:b4:63:52:81:8e:7c:85:17:8c:26:9e:
b6:b6:84:60:a6:21:15:d3:33:87:4e:79:03:87:dc:65:23:f2:
94:33:37:07:ad:34:e9:4d:d1:97:e8:66:d9:16:f9:83:5e:96:
5a:0e:68:84:fa:78:7e:83:d5:71:bf:eb:3b:e5:39:e7:6d:4e:
c7:7e:49:50:bc:88:92:be:05:b4:5c:69:77:74:05:91:1e:79:
c5:77:0b:8b:e0:da:b1:69:b1:ea:58:f8:38:d3:dd:40:ad:7b:
99:bd:a5:9d:a7:44:a1:ee:a0:db:4b:70:89:f4:f5:06:b7:7e:
eb:58:51:ae:f9:a8:1a:80:89:21:e4:e8:da:06:bf:ee:b2:38:
36:53:92:27:37:02:c5:da:f4:6d:23:de:68:fb:79:d7:a8:82:
5d:63:3f:4c:ce:b8:e4:cb:4f:94:48:4c:c4:7d:1c:a2:41:36:
c0:fb:06:20:65:17:02:f6:e0:41:be:22:08:f2:f1:a6:48:33:
76:9c:69:fa:ea:9a:9a:35:2e:1f:0b:06:e9:9a:4f:b6:c0:a6:
bb:66:1d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:21 2025 by rpki-client