
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
File: No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json)
Hash identifier: SI1GFD5TqmWUnlGkRyZxkE7yXaF2YTMJSDi3yT5sRZw=
Subject key identifier: 91:33:84:01:CC:34:6A:B2:88:FF:EC:FA:A5:9D:93:F5:41:06:0E:21
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial: 019873E33F86EA2FA75DBAF56E17F7016EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:02:09 +0000
Manifest this update: Mon 04 Aug 2025 07:02:09 +0000
Manifest next update: Tue 05 Aug 2025 07:02:09 +0000
Files and hashes: 1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=)
2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: s3xS39sEd5qP2/4YLkRJlQAjGnmeStC+V+doCZZfrgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:3f:86:ea:2f:a7:5d:ba:f5:6e:17:f7:01:6e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Validity
Not Before: Aug 4 07:02:09 2025 GMT
Not After : Aug 5 07:02:09 2025 GMT
Subject: CN=91338401cc346ab288ffecfaa59d93f541060e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:fe:bd:a2:a1:f5:23:bd:96:3e:30:2d:f9:
08:87:24:26:96:f5:6e:a3:e5:ab:a3:48:86:67:31:
38:51:11:40:10:30:e3:d7:ce:f1:3d:5b:2a:36:1b:
7c:13:3c:7c:be:45:85:da:52:97:ec:c5:84:aa:db:
19:f0:76:1a:5f:52:57:e7:b1:18:8e:57:07:b4:40:
21:7f:b6:7b:82:de:8a:52:b2:12:f7:2c:32:ac:4d:
97:1b:57:62:a4:87:cd:61:f7:14:4e:07:7c:16:ae:
05:d3:ac:ef:f1:81:e8:62:f6:24:14:68:1a:8b:76:
85:19:36:e6:32:88:03:d5:6b:37:e0:fc:a9:ff:08:
8d:80:6a:89:4d:c4:e3:54:9f:c8:04:4a:76:e3:da:
f0:f6:70:8b:d0:53:40:c9:56:dd:23:84:73:e5:0e:
12:a5:b5:fa:70:59:20:d9:17:3b:1d:04:0e:57:b1:
60:88:e3:9b:91:40:e4:d7:50:51:84:45:62:b4:16:
08:97:0d:65:2e:d0:3c:66:4b:1d:4d:95:6a:7e:8e:
a7:09:5e:42:66:1f:95:e7:78:01:5f:97:e3:4d:b4:
87:48:2a:4c:03:a3:aa:e5:95:8c:c6:7d:77:f1:6a:
35:3a:1b:c5:48:9c:63:6b:bc:6b:e6:bf:6c:2b:62:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:33:84:01:CC:34:6A:B2:88:FF:EC:FA:A5:9D:93:F5:41:06:0E:21
X509v3 Authority Key Identifier:
keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:25:eb:9d:44:69:a3:e6:83:02:bc:bc:3c:35:a9:b5:df:4c:
52:ea:e8:52:c6:3f:a2:82:af:81:dd:f5:11:52:d5:65:13:31:
bc:2f:79:ae:1d:11:88:dc:53:bb:c0:28:96:9d:a0:17:fd:cc:
65:65:c1:5e:c9:c1:70:03:9b:1e:e8:9d:39:bf:11:3a:e3:ec:
a0:b1:7c:ed:42:47:7d:f6:ba:ca:1f:a7:c2:d7:dc:8c:3e:f2:
29:8a:a0:10:57:a5:2d:81:e2:68:54:ca:f7:a1:5f:da:94:d6:
c8:1c:67:af:18:c7:e7:35:c2:9a:ae:32:5e:86:2a:09:9c:cb:
5c:7f:6c:01:91:e0:c8:3d:e6:d4:bb:81:7f:13:33:a4:06:f6:
17:65:8b:72:1a:31:72:ac:0c:f5:17:50:d5:4a:95:4e:fc:2d:
36:9c:37:2d:95:5d:37:ac:2f:58:76:95:55:b5:bd:8e:5b:5d:
98:9a:fc:cf:e6:6d:f8:07:bd:21:7c:14:36:95:79:a0:b7:15:
7f:b1:0c:58:bb:6f:44:c2:d5:02:8b:69:e9:6b:cd:a9:70:9b:
5f:08:f8:a7:9c:39:a7:df:a6:38:f7:46:f1:ce:d5:cd:61:76:
c3:f5:c9:a8:4f:08:37:06:97:b3:14:53:86:ff:0e:63:9a:84:
cb:7c:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:23 2025 by rpki-client