Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: 0J4WcSsPCU8N2sKceDe2p70i02TwRFXM1118Jr2nGIg=
Subject key identifier: 45:FB:8B:2A:1B:42:5D:73:2E:F5:78:27:B1:9E:DD:C7:9A:99:97:BF
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 019A4EF569930BACF5600D3A116557B183B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0B60
Signing time: Tue 04 Nov 2025 13:01:37 +0000
Manifest this update: Tue 04 Nov 2025 13:01:37 +0000
Manifest next update: Wed 05 Nov 2025 13:01:37 +0000
Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: RdEGDfCXY0/oZDisJnGO6wFCh6Xia1wYBD5hCwINws8=)
2: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (hash: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:69:93:0b:ac:f5:60:0d:3a:11:65:57:b1:83:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Nov 4 13:01:37 2025 GMT
Not After : Nov 5 13:01:37 2025 GMT
Subject: CN=45fb8b2a1b425d732ef57827b19eddc79a9997bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:7f:cc:9d:94:52:e5:de:a3:ca:3c:95:3e:
3c:bc:1f:75:d5:67:71:c3:1a:df:e4:c9:f9:f5:d3:
f3:e5:35:c3:17:d3:a6:55:a0:4d:c2:c7:55:8a:b1:
59:c2:4d:e5:43:a1:83:57:1c:a4:8e:94:b3:fb:33:
5e:43:f3:87:84:67:79:30:c2:a8:c1:70:cb:f7:7f:
57:fd:8e:d1:62:2c:49:f2:4b:f8:e4:d1:88:b8:08:
e4:f8:2d:b5:45:e3:b8:af:4b:14:62:56:d5:05:48:
ae:c7:f7:13:ff:e2:29:5c:11:68:ba:b5:1a:b0:f2:
bc:9e:22:61:c0:59:19:ef:8c:91:2b:2f:5c:40:33:
eb:04:3c:2e:b9:d6:b2:c5:fd:77:aa:ec:a9:58:85:
e9:ff:62:ed:f4:3c:fd:35:94:30:73:80:ed:12:ae:
8f:81:7b:46:16:11:91:ea:57:6a:5d:00:8c:38:a1:
f0:51:6a:df:49:12:63:90:a9:65:8d:43:43:99:7f:
f1:0c:fb:79:72:3e:9d:09:04:df:88:1e:43:a8:44:
ea:60:24:a1:b2:01:a0:09:be:a2:20:7d:50:7c:8c:
32:aa:14:71:bc:a6:92:92:9b:4d:1b:b1:74:c6:32:
fc:8a:2a:29:db:7d:ff:78:c3:57:1a:a2:58:e0:8f:
b3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FB:8B:2A:1B:42:5D:73:2E:F5:78:27:B1:9E:DD:C7:9A:99:97:BF
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d5:c9:b6:fb:72:21:1e:17:20:1b:5a:1c:2d:47:69:80:32:
66:25:e7:47:7d:ad:fa:7d:b1:ba:55:db:c1:64:e1:98:33:a8:
a3:79:93:23:3d:1b:61:b8:e6:80:6c:d3:f6:ab:4c:2c:c0:c5:
d2:c2:a6:dd:dc:69:04:e0:68:ac:f4:de:d1:a8:8f:7c:4f:89:
a1:07:71:8a:20:5f:83:6c:74:86:5f:70:65:ce:92:75:2d:b0:
4a:de:6b:4c:f2:78:d6:a4:3a:4f:fa:6e:a1:fc:02:98:f7:1c:
2a:02:7d:63:a5:71:4e:c8:05:3c:26:4f:d7:e5:d8:3b:b9:a9:
de:fe:fe:f9:eb:37:70:b1:88:9d:a9:d8:a3:47:da:e6:47:89:
43:65:98:64:38:d2:4b:fe:54:be:88:f6:1a:8d:16:20:b9:34:
2c:2c:05:2f:cb:4a:08:bf:d3:1f:77:49:a8:b1:74:4f:d6:35:
db:99:95:e5:c5:7b:21:b5:71:2b:8b:2a:ef:50:81:d6:b7:fe:
73:f1:e7:4e:79:de:9b:7d:a2:c6:cc:1b:42:8b:64:2a:1c:fc:
cc:9a:ba:49:94:70:11:1c:58:c9:bb:e1:d9:cd:03:38:c0:1a:
44:e2:32:97:be:70:34:38:bf:2c:16:18:25:77:d4:96:bd:e7:
15:73:7b:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9WmTC6z1YA06EWVXsYO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNjNhOWQ3MDIzYjNjYjAwMzI5MTJkY2FhYzljNTYzYzkw
YTk3NzIwHhcNMjUxMTA0MTMwMTM3WhcNMjUxMTA1MTMwMTM3WjAzMTEwLwYDVQQD
Eyg0NWZiOGIyYTFiNDI1ZDczMmVmNTc4MjdiMTllZGRjNzlhOTk5N2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aN/zJ2UUuXeo8o8lT48vB911Wdx
wxrf5Mn59dPz5TXDF9OmVaBNwsdVirFZwk3lQ6GDVxykjpSz+zNeQ/OHhGd5MMKo
wXDL939X/Y7RYixJ8kv45NGIuAjk+C21ReO4r0sUYlbVBUiux/cT/+IpXBFourUa
sPK8niJhwFkZ74yRKy9cQDPrBDwuudayxf13quypWIXp/2Lt9Dz9NZQwc4DtEq6P
gXtGFhGR6ldqXQCMOKHwUWrfSRJjkKlljUNDmX/xDPt5cj6dCQTfiB5DqETqYCSh
sgGgCb6iIH1QfIwyqhRxvKaSkptNG7F0xjL8iiop233/eMNXGqJY4I+zrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEX7iyobQl1zLvV4J7Ge3ceamZe/MB8GA1UdIwQY
MBaAFONjqdcCOzywAykS3KrJxWPJCpdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDJPcDF3STdQTEFES1JMY3FzbkZZOGtLbDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yZDUzMzctZGEyNC00Y2U4LWEzYjct
YzMwMmMxMGVjNWMwLzEvNDJPcDF3STdQTEFES1JMY3FzbkZZOGtLbDNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yZDUzMzctZGEyNC00Y2U4LWEzYjctYzMwMmMxMGVjNWMw
LzEvNDJPcDF3STdQTEFES1JMY3FzbkZZOGtLbDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9XJtvty
IR4XIBtaHC1HaYAyZiXnR32t+n2xulXbwWThmDOoo3mTIz0bYbjmgGzT9qtMLMDF
0sKm3dxpBOBorPTe0aiPfE+JoQdxiiBfg2x0hl9wZc6SdS2wSt5rTPJ41qQ6T/pu
ofwCmPccKgJ9Y6VxTsgFPCZP1+XYO7mp3v7++es3cLGInanYo0fa5keJQ2WYZDjS
S/5Uvoj2Go0WILk0LCwFL8tKCL/TH3dJqLF0T9Y125mV5cV7IbVxK4sq71CB1rf+
c/HnTnnem32ixswbQotkKhz8zJq6SZRwERxYybvh2c0DOMAaROIyl75wNDi/LBYY
JXfUlr3nFXN7ZA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:26 2025 by rpki-client