Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: gGOqsAmWovDAPnfMi6ZAHV0xTU7F77VsEZOSoHrRNJk=
Subject key identifier: B2:AE:8B:13:09:2F:28:A4:A8:1F:FD:94:1B:1E:54:1A:B4:2A:EE:24
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 0198745086C07A981D7FC9C92EFE571CC361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 14D5
Signing time: Mon 04 Aug 2025 09:01:30 +0000
Manifest this update: Mon 04 Aug 2025 09:01:30 +0000
Manifest next update: Tue 05 Aug 2025 09:01:30 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: gRfkkWp0vlnCPDk9HHp0+VK4aqfHEjb10OEf979kX6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:86:c0:7a:98:1d:7f:c9:c9:2e:fe:57:1c:c3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Aug 4 09:01:30 2025 GMT
Not After : Aug 5 09:01:30 2025 GMT
Subject: CN=b2ae8b13092f28a4a81ffd941b1e541ab42aee24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:ea:07:2b:b5:2c:a9:b5:87:1d:c2:b2:16:
d4:a0:1b:d8:ef:c2:d5:f8:e1:7c:02:94:f0:1f:fa:
3f:96:d7:bb:02:00:6d:f0:06:5b:31:04:00:91:6a:
44:11:c7:eb:bd:d6:90:ad:ff:32:8c:85:e6:0b:fc:
d5:6a:2a:25:72:b9:6c:0d:34:15:1e:31:43:28:4d:
bb:7c:70:c5:4a:a8:33:7e:4e:5d:4d:b8:61:1f:f5:
2c:51:5a:09:92:ae:36:c2:1e:11:e7:c9:88:e5:d8:
2e:25:d1:b6:3d:4d:aa:67:ea:d5:f5:a0:35:e6:b0:
74:da:ba:c5:fc:b6:90:f6:a3:30:67:f3:c3:68:a4:
bb:21:6e:0e:03:c4:34:17:91:0a:bd:fb:61:63:2b:
29:30:a1:47:23:63:e7:e7:4f:9f:20:1b:7d:0f:67:
7c:0f:77:c2:f4:0f:bb:44:91:77:82:88:b0:46:f3:
a5:4e:d1:35:0c:6c:bb:6a:be:9b:2e:fc:79:e9:a5:
f5:a7:8f:02:6c:ea:ed:d6:db:7d:43:77:c3:ab:0f:
a8:ed:b5:54:34:ab:2a:21:08:be:64:98:54:89:64:
e7:a8:a0:f0:35:a4:32:bc:d7:67:82:88:96:7a:c7:
f8:97:55:4b:5e:ad:5e:ad:41:2d:21:0c:0e:ed:16:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AE:8B:13:09:2F:28:A4:A8:1F:FD:94:1B:1E:54:1A:B4:2A:EE:24
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e1:d9:b8:08:77:70:cb:04:f2:87:38:9c:1a:16:ef:bd:da:
1d:0c:73:b6:de:18:21:3d:c0:a1:c9:f6:69:55:35:f4:06:ed:
d7:31:98:f1:59:8e:7a:d6:f8:4e:f8:a4:52:5c:ce:6f:00:93:
fc:ac:c0:bf:50:c5:bd:12:84:2e:ed:75:58:60:14:d5:1a:36:
ca:88:b1:45:48:6c:7a:b0:d2:9c:a4:c7:29:f0:22:57:ad:8d:
02:ad:35:39:94:95:24:fa:50:54:73:04:61:4c:16:9f:7f:4f:
82:95:df:84:b0:e7:b2:9a:40:1a:2a:4f:5b:42:76:06:37:82:
3c:f3:33:7b:6a:c2:5d:f5:23:c2:3d:4a:b2:be:2c:96:74:24:
32:22:3f:15:bc:17:3e:f4:71:18:f9:6a:3d:c8:a3:b0:b9:de:
48:53:46:c6:0f:d3:62:b1:29:96:76:c9:9f:89:44:e7:1b:34:
e2:99:48:22:d9:31:a8:c4:11:f5:be:2e:e5:ce:26:a5:8f:c6:
0e:fe:41:03:0e:54:e6:fa:5c:da:b3:67:66:05:ab:f7:5c:10:
de:75:52:43:49:43:9b:4f:5c:ed:fd:c5:74:41:26:4e:8f:89:
8b:3d:a7:2b:03:36:66:5d:47:4f:eb:88:08:a6:71:d3:83:ab:
e3:51:aa:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UIbAepgdf8nJLv5XHMNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNjU0MjA3ZTU0N2QzNzk3ODM0MTRmMjIyMGQ0YTJkNzQ0
NjU4NzAwHhcNMjUwODA0MDkwMTMwWhcNMjUwODA1MDkwMTMwWjAzMTEwLwYDVQQD
EyhiMmFlOGIxMzA5MmYyOGE0YTgxZmZkOTQxYjFlNTQxYWI0MmFlZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZrqByu1LKm1hx3CshbUoBvY78LV
+OF8ApTwH/o/lte7AgBt8AZbMQQAkWpEEcfrvdaQrf8yjIXmC/zVaiolcrlsDTQV
HjFDKE27fHDFSqgzfk5dTbhhH/UsUVoJkq42wh4R58mI5dguJdG2PU2qZ+rV9aA1
5rB02rrF/LaQ9qMwZ/PDaKS7IW4OA8Q0F5EKvfthYyspMKFHI2Pn50+fIBt9D2d8
D3fC9A+7RJF3goiwRvOlTtE1DGy7ar6bLvx56aX1p48CbOrt1tt9Q3fDqw+o7bVU
NKsqIQi+ZJhUiWTnqKDwNaQyvNdngoiWesf4l1VLXq1erUEtIQwO7RZBKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKuixMJLyikqB/9lBseVBq0Ku4kMB8GA1UdIwQY
MBaAFONlQgflR9N5eDQU8iINSi10RlhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80MjlkMmQtMThiOS00MWMyLWIyMDAt
YzY0MTU5NTU5ZTI2LzEvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80MjlkMmQtMThiOS00MWMyLWIyMDAtYzY0MTU5NTU5ZTI2
LzEvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouHZuAh3
cMsE8oc4nBoW773aHQxztt4YIT3Aocn2aVU19Abt1zGY8VmOetb4TvikUlzObwCT
/KzAv1DFvRKELu11WGAU1Ro2yoixRUhserDSnKTHKfAiV62NAq01OZSVJPpQVHME
YUwWn39PgpXfhLDnsppAGipPW0J2BjeCPPMze2rCXfUjwj1Ksr4slnQkMiI/FbwX
PvRxGPlqPcijsLneSFNGxg/TYrEplnbJn4lE5xs04plIItkxqMQR9b4u5c4mpY/G
Dv5BAw5U5vpc2rNnZgWr91wQ3nVSQ0lDm09c7f3FdEEmTo+Jiz2nKwM2Zl1HT+uI
CKZx04Or41Gq1A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:59 2025 by rpki-client