Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: 650qFWlGChGsQOhqSfnmDL6OjINdgoogU1J+1TKxq9Q=
Subject key identifier: 41:74:75:3C:B5:2F:89:39:EB:FA:4D:0C:C0:9D:A5:8E:91:1E:60:C9
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 01987DC0CDC3FE1BE0B5DF18F5B117EBBEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 133F
Signing time: Wed 06 Aug 2025 05:00:44 +0000
Manifest this update: Wed 06 Aug 2025 05:00:44 +0000
Manifest next update: Thu 07 Aug 2025 05:00:44 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: WKGTFasBzUXuWHijqwNQAVDi0CccyXydl5N7dgGmF0Q=)
2: bL9sAOLGYhfURofnKnFBFn1wsJo.roa (hash: MQ9wm3ykSQpWjdkgAkUhN5KBzQ/fKRTzO8IDNPZe+jY=)
3: kjcDWuGIuX0pVG6bb41NnKIPOqs.roa (hash: YFnfiVE6rUbpB2uXyovY7NmRfmouuM77f2tO5i352qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:cd:c3:fe:1b:e0:b5:df:18:f5:b1:17:eb:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Aug 6 05:00:44 2025 GMT
Not After : Aug 7 05:00:44 2025 GMT
Subject: CN=4174753cb52f8939ebfa4d0cc09da58e911e60c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:95:1f:52:1c:9d:70:4a:cd:1a:75:6d:86:
2e:95:1f:e3:02:54:78:e2:d1:d0:8f:58:d0:90:76:
90:da:01:9c:c7:97:f0:51:3f:5e:70:64:27:60:bb:
f8:55:93:52:73:b4:f1:ca:e5:c4:48:87:77:d1:fb:
02:28:06:b5:48:ba:fa:b7:a9:ab:3a:18:9b:f3:ea:
95:9b:c5:65:5e:55:25:9b:e5:41:3e:07:93:f0:41:
7b:94:fa:c8:06:b4:68:71:2a:90:bf:60:b1:0a:ac:
f4:c5:27:76:04:8d:10:ac:43:3f:77:13:74:f4:49:
a1:01:91:7c:1d:69:6d:f3:5d:fe:68:38:8e:37:10:
bb:3e:4a:22:25:86:5d:ad:d7:78:0d:21:5b:a9:e2:
6a:d5:4a:02:62:36:0f:f4:71:67:fd:78:93:2f:38:
e6:7e:89:47:05:00:5e:4d:ec:6c:00:5b:76:fc:69:
e1:a2:2c:1d:12:97:16:48:85:30:e7:8c:f0:31:65:
e3:e9:6c:8f:2c:d5:22:41:68:8a:99:a5:7b:8a:67:
69:2c:18:2c:3d:87:43:5a:23:ce:94:91:16:9d:e6:
2a:a8:5d:6c:0a:fa:e6:ec:8a:6e:7a:b1:2f:32:ab:
05:3b:16:84:0c:05:ca:fd:06:48:64:c2:3d:50:4a:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:74:75:3C:B5:2F:89:39:EB:FA:4D:0C:C0:9D:A5:8E:91:1E:60:C9
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e0:54:08:0e:c8:2b:26:e6:78:1a:5b:f6:0f:52:ca:2e:48:
47:14:e6:c6:0a:f9:d7:b4:42:ec:0b:86:e6:9c:99:bb:a8:7b:
c2:ff:7c:88:d7:cd:95:cf:ee:01:05:e8:b8:8d:c0:67:c9:e2:
75:30:eb:11:e4:80:a9:cf:8a:02:2d:b4:f3:8a:47:45:3c:b1:
2d:62:f9:6a:c7:38:1e:bd:61:23:54:b2:27:3f:97:4a:24:ed:
0e:3e:c2:e1:c1:65:8d:7b:38:b2:7b:be:57:94:2b:36:f0:66:
20:07:1c:65:77:65:89:39:e9:cb:ae:97:62:b5:3e:a3:b7:cd:
f0:4c:b0:00:80:4a:21:72:52:e7:0b:aa:22:dd:b4:5c:1f:0a:
92:33:4d:33:6a:32:b6:51:2e:42:56:28:4b:2a:a2:31:12:c1:
42:42:69:70:e3:10:4f:b4:09:47:93:b3:80:e5:ff:24:57:56:
47:04:b6:d0:5b:b2:c3:f1:77:c1:e5:d5:14:a3:0b:01:5c:2c:
5f:96:36:f1:eb:64:84:f0:bf:dd:48:d2:12:df:44:60:2e:be:
77:98:5d:0b:00:b3:93:5a:5c:dc:4f:23:ae:16:4d:15:ef:f6:
b5:25:5c:24:b1:db:59:e3:c7:38:34:ba:83:1b:bd:1e:a0:b6:
62:9a:df:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:41:56 2025 by rpki-client