Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: 4+saaS+RlovR2NhCwN68QNwD7FrPbJkvmykVogCNqk8=
Subject key identifier: 8C:CA:95:D0:D5:62:BB:6D:57:F5:04:8D:51:F3:38:8B:45:09:EB:0E
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 01976F99F91B789B7B23AB5287F3D3578B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 144E
Signing time: Sat 14 Jun 2025 18:00:51 +0000
Manifest this update: Sat 14 Jun 2025 18:00:51 +0000
Manifest next update: Sun 15 Jun 2025 18:00:51 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: 97AyrWkWcLtB6CJrGdzBfF1/qPjrQNdS6ce5y9NeVQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:f9:1b:78:9b:7b:23:ab:52:87:f3:d3:57:8b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Jun 14 18:00:51 2025 GMT
Not After : Jun 15 18:00:51 2025 GMT
Subject: CN=8cca95d0d562bb6d57f5048d51f3388b4509eb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:db:64:bd:4b:03:c5:5c:d7:22:45:78:19:
09:4d:6e:23:3d:d2:ca:b8:0c:aa:71:94:86:cd:ac:
43:13:f4:47:0a:0e:2a:a3:bc:60:e5:6a:ed:62:3e:
66:32:69:c0:58:8d:04:77:a2:01:c5:81:79:d9:7b:
f2:d5:a8:34:14:d6:70:b1:f0:93:fa:a0:01:77:6c:
34:17:44:85:69:83:39:ce:6c:da:5f:c9:9c:32:4f:
33:1e:37:22:90:f5:50:f8:54:a5:fe:1e:a0:36:98:
3b:ae:d5:06:36:87:89:f3:3b:9c:2e:f5:87:8a:b6:
96:36:7b:83:b6:18:5c:55:f7:71:af:6b:55:f0:9a:
ed:c2:d5:e8:e1:e0:b4:cb:19:1a:7f:af:cf:33:7e:
7f:df:a3:0b:fb:e3:dc:22:73:fc:de:bb:4e:ff:e6:
ca:32:84:c1:21:ce:dd:d5:f9:95:fa:2e:af:6d:a2:
2a:37:f3:81:13:3e:53:f6:fa:55:9e:fd:f8:ca:ce:
75:72:d9:94:40:58:57:7a:25:a1:d9:01:01:52:34:
b7:f7:ef:ad:37:7e:ae:e6:82:36:1b:e3:71:56:d7:
85:76:7c:b1:c1:35:e8:3e:23:21:32:20:13:41:06:
00:79:3f:9b:ec:f9:e5:db:18:47:d1:ba:dc:21:55:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CA:95:D0:D5:62:BB:6D:57:F5:04:8D:51:F3:38:8B:45:09:EB:0E
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8c:38:f0:db:be:11:c9:75:3e:2a:61:48:d9:22:08:f5:1d:
19:f6:48:74:f9:5a:08:78:d4:79:56:e7:07:e9:cf:99:24:30:
7c:d4:83:20:94:73:3f:87:d3:7c:e7:83:0b:19:db:47:5f:38:
31:5f:68:2d:9b:be:9b:32:8f:21:3f:a1:84:f4:9c:a4:be:d2:
db:36:6f:d1:90:47:6d:ef:63:b3:a6:cb:4b:f4:53:ca:2d:3c:
ab:16:4a:ca:02:cf:7f:cc:dc:01:c3:1c:a2:8f:b9:4b:f8:0d:
ca:57:58:d2:e3:d0:3c:30:93:a7:bb:30:05:06:35:96:08:f8:
25:39:da:39:e2:6f:c7:2c:d3:b5:0b:65:ef:aa:57:cb:ff:43:
f1:fd:63:b2:4e:8d:af:e8:b7:17:59:a8:fd:c8:c3:8f:be:72:
67:30:b1:e5:a5:f7:5d:61:56:8f:c5:aa:b0:d3:a7:0e:68:47:
f7:ec:03:06:a1:91:5d:73:a9:1b:ec:d4:0a:9e:18:6d:55:0b:
20:bc:51:05:05:8f:cb:ce:ce:73:c7:1e:48:d3:41:ae:d1:5a:
b7:cc:73:11:1c:ca:8f:8e:83:5f:f2:16:7d:1f:e8:f1:75:f5:
d3:3a:43:3a:2b:bd:0a:e7:f8:23:c4:59:d6:fa:ce:11:08:30:
58:ea:bd:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmfkbeJt7I6tSh/PTV4tjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNjU0MjA3ZTU0N2QzNzk3ODM0MTRmMjIyMGQ0YTJkNzQ0
NjU4NzAwHhcNMjUwNjE0MTgwMDUxWhcNMjUwNjE1MTgwMDUxWjAzMTEwLwYDVQQD
Eyg4Y2NhOTVkMGQ1NjJiYjZkNTdmNTA0OGQ1MWYzMzg4YjQ1MDllYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt7bZL1LA8Vc1yJFeBkJTW4jPdLK
uAyqcZSGzaxDE/RHCg4qo7xg5WrtYj5mMmnAWI0Ed6IBxYF52Xvy1ag0FNZwsfCT
+qABd2w0F0SFaYM5zmzaX8mcMk8zHjcikPVQ+FSl/h6gNpg7rtUGNoeJ8zucLvWH
iraWNnuDthhcVfdxr2tV8JrtwtXo4eC0yxkaf6/PM35/36ML++PcInP83rtO/+bK
MoTBIc7d1fmV+i6vbaIqN/OBEz5T9vpVnv34ys51ctmUQFhXeiWh2QEBUjS39++t
N36u5oI2G+NxVteFdnyxwTXoPiMhMiATQQYAeT+b7Pnl2xhH0brcIVUCqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzKldDVYrttV/UEjVHzOItFCesOMB8GA1UdIwQY
MBaAFONlQgflR9N5eDQU8iINSi10RlhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80MjlkMmQtMThiOS00MWMyLWIyMDAt
YzY0MTU5NTU5ZTI2LzEvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80MjlkMmQtMThiOS00MWMyLWIyMDAtYzY0MTU5NTU5ZTI2
LzEvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4w48Nu+
Ecl1PiphSNkiCPUdGfZIdPlaCHjUeVbnB+nPmSQwfNSDIJRzP4fTfOeDCxnbR184
MV9oLZu+mzKPIT+hhPScpL7S2zZv0ZBHbe9js6bLS/RTyi08qxZKygLPf8zcAcMc
oo+5S/gNyldY0uPQPDCTp7swBQY1lgj4JTnaOeJvxyzTtQtl76pXy/9D8f1jsk6N
r+i3F1mo/cjDj75yZzCx5aX3XWFWj8WqsNOnDmhH9+wDBqGRXXOpG+zUCp4YbVUL
ILxRBQWPy87Oc8ceSNNBrtFat8xzERzKj46DX/IWfR/o8XX10zpDOiu9Cuf4I8RZ
1vrOEQgwWOq9ag==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:51:41 2025 by rpki-client