Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: s01/u4zJOEz6e53fwJugIeBXrOOs29dVc6ahwIXA8/o=
Subject key identifier: E1:DF:F0:75:B6:B1:DB:AC:2B:9C:05:AE:5D:1D:E0:45:0F:3C:2B:ED
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 01988B45BC590C842B7E5D9F7A89612FC571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 1628
Signing time: Fri 08 Aug 2025 20:00:59 +0000
Manifest this update: Fri 08 Aug 2025 20:00:59 +0000
Manifest next update: Sat 09 Aug 2025 20:00:59 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: +p57i9r66zjvmnLO3Mwvf566QIrKVw98Bi9NTESQZHw=)
2: OS--Lk_-r0Q1zq4QqDjYyZsHuMY.roa (hash: MVTlexALEq+OtJ89dtjZODG5hLFqDXsO9MxPnvJn09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:bc:59:0c:84:2b:7e:5d:9f:7a:89:61:2f:c5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Aug 8 20:00:59 2025 GMT
Not After : Aug 9 20:00:59 2025 GMT
Subject: CN=e1dff075b6b1dbac2b9c05ae5d1de0450f3c2bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:c0:47:9a:31:a2:63:09:2a:4b:33:0d:68:
c8:8c:18:06:e1:d4:19:24:5b:7a:3e:11:05:4a:7a:
b7:1b:48:01:2b:49:4b:ff:7a:5e:8d:7f:81:7f:fe:
0c:18:83:a5:50:5b:9e:c1:ee:ea:8d:74:9d:3a:ab:
c9:d5:d8:31:6b:5d:49:8a:3b:11:39:de:34:da:12:
cf:70:36:80:33:22:c2:77:cf:bb:9a:4a:21:0b:d9:
9e:45:22:fd:84:2a:2c:30:0b:c6:9e:cc:9d:ac:ae:
cd:1b:0a:e3:52:66:25:bf:b5:62:b5:1a:01:c1:e0:
24:96:ae:06:89:ef:ad:dd:9b:c3:fc:74:96:8f:8b:
4e:64:04:04:43:5e:21:cd:c9:c2:c0:33:70:85:eb:
7d:30:74:83:c1:91:b2:63:a6:e2:8e:50:eb:94:5e:
89:4c:33:39:76:ec:59:4c:1b:fa:df:0a:d5:e9:93:
3b:ac:42:88:f6:47:ce:6d:67:a2:68:98:b6:93:21:
5f:bc:81:b4:b9:bd:a5:e3:d0:23:79:d7:b1:25:cc:
04:23:95:ed:d3:c1:82:53:02:97:14:58:d9:fb:df:
56:04:5e:71:eb:9e:ea:4d:75:18:f8:3b:51:6a:66:
0f:42:7b:2f:7b:87:6e:52:84:ba:0a:ff:57:aa:28:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DF:F0:75:B6:B1:DB:AC:2B:9C:05:AE:5D:1D:E0:45:0F:3C:2B:ED
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:af:32:8d:b3:c2:61:a2:e6:6e:62:cf:e0:8e:be:bb:cc:3d:
3a:43:cf:4e:01:56:be:9e:eb:80:8e:32:a6:f4:3b:5e:aa:61:
be:c2:8f:68:cf:ae:d5:1d:b2:8f:2f:67:f0:ce:84:1f:9a:e0:
17:36:22:65:87:44:18:c9:56:35:92:cf:ff:13:3b:45:42:25:
5b:8f:49:bc:61:b0:3f:1f:fc:c7:3e:86:65:8c:da:c1:9c:d7:
b8:66:ea:73:58:cf:8d:d9:07:e0:f8:76:a2:a2:8a:ed:01:98:
8e:8e:76:fd:d1:9c:06:1f:fb:cd:47:3a:e2:ee:b4:cd:46:f8:
5c:1c:3d:7b:ce:cf:1f:a3:4b:7b:ee:e2:d4:83:b2:47:66:dc:
10:29:47:6e:99:f7:01:e8:61:4e:1c:b9:9c:37:af:8e:27:d2:
1f:70:fd:74:52:ed:58:5b:e1:64:9b:15:12:f4:29:80:52:26:
fa:a9:07:08:f7:6e:73:99:e3:17:f0:d1:a2:7f:55:84:46:af:
e2:4d:cf:f2:48:ec:3b:31:80:23:e7:a4:92:96:9a:45:6f:6c:
f5:bd:9c:14:d8:37:bd:77:2a:f6:2c:5e:9f:cf:9b:c1:65:a1:
f0:cb:be:3f:52:b2:fc:74:66:36:19:55:aa:c4:b2:bc:33:65:
81:f7:6e:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRbxZDIQrfl2feolhL8VxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNmI0YzU4ZTZjZmQ5ZmE3ZTcyMjJhNThiMzYyNmRiN2I5
ODUzMjQwHhcNMjUwODA4MjAwMDU5WhcNMjUwODA5MjAwMDU5WjAzMTEwLwYDVQQD
EyhlMWRmZjA3NWI2YjFkYmFjMmI5YzA1YWU1ZDFkZTA0NTBmM2MyYmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DrAR5oxomMJKkszDWjIjBgG4dQZ
JFt6PhEFSnq3G0gBK0lL/3pejX+Bf/4MGIOlUFuewe7qjXSdOqvJ1dgxa11JijsR
Od402hLPcDaAMyLCd8+7mkohC9meRSL9hCosMAvGnsydrK7NGwrjUmYlv7VitRoB
weAklq4Gie+t3ZvD/HSWj4tOZAQEQ14hzcnCwDNwhet9MHSDwZGyY6bijlDrlF6J
TDM5duxZTBv63wrV6ZM7rEKI9kfObWeiaJi2kyFfvIG0ub2l49AjedexJcwEI5Xt
08GCUwKXFFjZ+99WBF5x657qTXUY+DtRamYPQnsve4duUoS6Cv9XqigRZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHf8HW2sdusK5wFrl0d4EUPPCvtMB8GA1UdIwQY
MBaAFONrTFjmz9n6fnIipYs2Jtt7mFMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZDdkZjgtYjQ2NC00Y2E3LWJhNmMt
ODAwYzk5ODUxMzY4LzEvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZDdkZjgtYjQ2NC00Y2E3LWJhNmMtODAwYzk5ODUxMzY4
LzEvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGa8yjbPC
YaLmbmLP4I6+u8w9OkPPTgFWvp7rgI4ypvQ7XqphvsKPaM+u1R2yjy9n8M6EH5rg
FzYiZYdEGMlWNZLP/xM7RUIlW49JvGGwPx/8xz6GZYzawZzXuGbqc1jPjdkH4Ph2
oqKK7QGYjo52/dGcBh/7zUc64u60zUb4XBw9e87PH6NLe+7i1IOyR2bcEClHbpn3
AehhThy5nDevjifSH3D9dFLtWFvhZJsVEvQpgFIm+qkHCPduc5njF/DRon9VhEav
4k3P8kjsOzGAI+ekkpaaRW9s9b2cFNg3vXcq9ixen8+bwWWh8Mu+P1Ky/HRmNhlV
qsSyvDNlgfduEQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:56 2025 by rpki-client