Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: OFHxQ6K7ifek33YuYTryt0XjVSGCgS7aktOsYPpEMeg=
Subject key identifier: 56:85:E1:88:5E:61:DC:BE:62:69:9B:1C:13:F6:89:A1:53:DB:A0:6C
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 019A4F2B573EC13982F5AA1C0AFDABCC0267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 14:00:31 +0000
Manifest this update: Tue 04 Nov 2025 14:00:31 +0000
Manifest next update: Wed 05 Nov 2025 14:00:31 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: +J6EnX4/kUQ5OXN18+uqxoZ5ztQCTGnnTUe6HVYqHi0=)
2: OS--Lk_-r0Q1zq4QqDjYyZsHuMY.roa (hash: MVTlexALEq+OtJ89dtjZODG5hLFqDXsO9MxPnvJn09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:57:3e:c1:39:82:f5:aa:1c:0a:fd:ab:cc:02:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Nov 4 14:00:31 2025 GMT
Not After : Nov 5 14:00:31 2025 GMT
Subject: CN=5685e1885e61dcbe62699b1c13f689a153dba06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:84:e9:37:ad:16:d0:10:f9:79:f8:83:05:
95:77:db:b2:32:ce:24:b7:b7:a7:ef:e8:45:95:04:
59:27:3f:52:9a:d0:63:4f:93:7b:f1:d4:e9:57:29:
48:fb:f3:c3:d3:af:74:c3:74:76:52:0a:19:ff:ba:
30:bd:71:cd:7c:d7:3d:d9:ab:0f:cb:50:af:32:17:
b0:6e:3d:f8:c4:2d:03:7f:08:51:02:18:28:02:ff:
09:dc:93:86:d1:2c:d4:19:31:4f:19:a0:45:a8:03:
cc:1d:f3:d9:cd:c1:4d:65:e2:59:ca:00:f2:26:d7:
8e:30:92:9c:28:4b:05:d7:ea:c6:f4:3b:ce:16:d4:
82:bd:de:db:e8:44:4c:7c:43:28:78:c8:03:04:68:
af:7c:90:90:7e:47:98:4f:94:ec:cf:e0:ca:7d:40:
80:de:7f:70:78:10:79:20:73:da:94:37:e6:d9:51:
8f:c6:eb:4d:06:1f:28:21:2c:00:de:b4:40:3d:86:
41:ad:7a:8a:86:e5:3a:26:13:56:5d:9c:88:b2:d8:
b0:f5:67:a9:55:06:63:29:5b:7e:81:e1:85:cc:c1:
f6:cc:60:35:9c:8e:a7:71:2d:e1:9c:35:0f:ae:73:
10:88:93:36:83:e5:92:26:1d:0f:33:0a:be:41:8f:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:85:E1:88:5E:61:DC:BE:62:69:9B:1C:13:F6:89:A1:53:DB:A0:6C
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d6:d6:d8:ad:f5:58:90:5f:b8:9b:e8:0d:a7:28:67:4f:71:
ff:af:3c:0f:ed:4b:4f:99:07:7f:f4:2c:2b:c6:ac:15:42:fb:
dd:e0:53:a8:3c:89:05:09:5a:99:64:0d:e8:27:b7:70:d5:1b:
2e:7b:e0:0a:7e:4c:16:9d:44:ef:03:bb:32:2b:40:03:1a:99:
2f:af:40:18:6f:90:90:c1:48:96:aa:ea:26:6e:da:8f:6b:bb:
f3:57:f7:04:0c:0a:1c:8a:f3:04:be:2f:43:2d:00:25:75:5c:
cb:20:00:2b:df:f1:87:32:96:7c:2c:d5:48:48:38:94:2b:a0:
9e:d3:d0:ec:be:99:39:34:31:b6:a2:50:1f:0d:85:6b:ce:39:
7a:88:72:da:91:b3:a8:8a:0a:34:e9:a9:d3:29:91:8c:a6:28:
d9:0f:d5:ff:9c:21:a8:fe:e5:f9:12:dc:29:80:52:44:b2:9a:
f2:48:f6:c1:af:10:eb:23:ce:9c:be:92:02:50:22:20:5a:10:
60:a6:1f:55:e8:84:12:ee:4d:7f:b7:cd:2f:59:71:00:42:cf:
0d:5f:c3:03:8f:0d:16:bd:2d:e1:a1:7d:8b:a9:93:b8:94:0b:
44:e6:9e:41:0c:43:13:12:8c:8a:bb:34:31:ba:d2:a5:1e:4b:
be:2a:67:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:44 2025 by rpki-client