Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: 27/vT2i12JqFhzMh1whe0HaBMT+zGie4ESjwOYE7eiQ=
Subject key identifier: 33:1A:F9:8A:9D:3B:A5:71:79:16:AD:D8:EB:EA:F0:3D:48:88:B4:FC
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 019A511970BA4363CF829096CF1E2F91E94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 1431
Signing time: Tue 04 Nov 2025 23:00:12 +0000
Manifest this update: Tue 04 Nov 2025 23:00:12 +0000
Manifest next update: Wed 05 Nov 2025 23:00:12 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: /1Gtk4FoEZRk8c/zDedNK1wnSTSQn32IyXoZ81Pl/VQ=)
2: bL9sAOLGYhfURofnKnFBFn1wsJo.roa (hash: MQ9wm3ykSQpWjdkgAkUhN5KBzQ/fKRTzO8IDNPZe+jY=)
3: kjcDWuGIuX0pVG6bb41NnKIPOqs.roa (hash: YFnfiVE6rUbpB2uXyovY7NmRfmouuM77f2tO5i352qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:70:ba:43:63:cf:82:90:96:cf:1e:2f:91:e9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Nov 4 23:00:12 2025 GMT
Not After : Nov 5 23:00:12 2025 GMT
Subject: CN=331af98a9d3ba5717916add8ebeaf03d4888b4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:1e:51:b8:f0:dd:63:7a:9e:fe:90:fd:5e:
34:98:39:40:4a:85:c9:15:ad:14:1a:50:77:a6:1c:
00:00:3c:41:e4:3f:8d:50:33:60:e1:53:00:04:77:
fa:45:33:27:a5:9f:43:c0:97:d9:00:ae:70:bf:ee:
06:49:44:93:6c:f0:66:88:62:a0:29:82:4b:b7:1e:
bf:ea:06:94:6a:b7:c6:8e:e6:56:78:f6:f1:39:e2:
6f:a4:7d:e1:98:60:cb:15:6e:0a:ba:7f:6e:f2:08:
1f:cd:8c:74:3f:ba:4a:f4:90:c9:77:e7:75:be:13:
87:9e:79:13:73:a9:14:23:d2:ea:6b:3d:15:f1:e6:
ad:9f:10:8a:c4:28:43:e1:e4:78:b6:42:82:9c:5a:
f6:8d:93:d1:c9:68:4d:f7:1f:84:52:8b:46:2c:fc:
6e:60:34:2a:33:7f:f6:12:b9:e6:3f:f7:a5:18:47:
e5:66:49:5e:ea:1e:59:4e:11:0a:16:be:ba:2b:da:
c5:8c:25:ed:fd:5f:cf:5b:9b:0b:ba:9e:48:57:2d:
cf:f1:1e:cb:39:c7:de:fe:e2:c1:c2:7a:62:e8:97:
cb:43:f6:b3:4c:49:25:5b:95:91:43:d4:5e:08:9e:
48:61:aa:58:1f:be:f7:0a:04:1f:ba:84:d0:a2:95:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1A:F9:8A:9D:3B:A5:71:79:16:AD:D8:EB:EA:F0:3D:48:88:B4:FC
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c6:7d:91:a8:9a:a3:e5:ad:79:25:be:4d:f6:55:d0:21:3d:
d5:40:e2:69:8a:37:82:16:d9:10:f9:7f:b8:1a:92:bd:98:fb:
e0:44:7c:56:53:48:50:8d:c9:fc:b9:38:28:42:3a:48:ca:85:
76:04:4f:13:5b:6c:28:f8:b1:e2:37:37:46:6f:26:a2:d5:83:
c4:35:32:0d:05:94:5d:bf:48:45:ea:ad:c6:e1:27:3b:de:a5:
db:a9:bc:e4:eb:68:5a:81:d5:99:ef:bd:91:73:ca:d3:00:4e:
51:4e:5e:cc:4c:78:dd:cb:6d:82:25:39:57:ed:58:d6:8b:a2:
38:e1:6d:6d:18:21:62:48:67:22:7e:99:a8:66:a8:94:c3:5a:
2c:e0:e1:54:b3:8b:c8:da:b4:6a:dd:53:ad:86:ff:18:98:ed:
d4:6a:77:f5:c1:ca:6f:4e:cd:21:9e:a8:ad:e2:3a:aa:88:22:
ee:e6:8e:b8:76:b3:f7:db:18:11:d3:44:34:3f:5c:1f:10:33:
4f:91:37:29:3b:40:46:d0:29:96:4c:b8:ce:f3:3b:99:fc:1d:
58:be:28:e3:da:56:08:0e:5b:4a:df:a1:74:f9:17:e8:6e:be:
08:1a:bd:b1:48:a8:45:22:44:6a:05:50:85:b0:7a:f4:f8:b5:
65:0b:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:28:02 2025 by rpki-client