Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier: yxRpaw0JRDDgb1KF0Fg6pGEzvcVf7Wjrg6gCE+BgpTs=
Subject key identifier: 93:7C:2F:D9:B3:61:8E:D0:A6:B0:1B:C9:26:41:8D:51:BB:AE:FF:CC
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 019A4E4F7B03C91146A9367DEA590D421A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number: 0B1B
Signing time: Tue 04 Nov 2025 10:00:22 +0000
Manifest this update: Tue 04 Nov 2025 10:00:22 +0000
Manifest next update: Wed 05 Nov 2025 10:00:22 +0000
Files and hashes: 1: 1-57HmlNDMcNn-L6phbslRuvJCcw.roa (hash: gyWoPpIB9HWDXzh+b8BPPzXer8C1JA3lUjjaqPhqcUE=)
2: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: VqCDueNd5YnJfRguBLrv6CZgAWXYreJlxnib74r+HTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7b:03:c9:11:46:a9:36:7d:ea:59:0d:42:1a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: Nov 4 10:00:22 2025 GMT
Not After : Nov 5 10:00:22 2025 GMT
Subject: CN=937c2fd9b3618ed0a6b01bc926418d51bbaeffcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:c9:30:d8:3b:9c:62:24:30:49:a8:a1:92:
09:0e:74:31:d3:84:b9:cd:19:d9:df:9b:3d:b3:d5:
f5:6d:9a:6f:b4:ec:3a:70:a7:a5:b8:df:ce:61:33:
b3:87:d6:da:91:6b:7b:57:82:42:13:d0:9a:ea:01:
1d:7e:09:ff:75:28:58:8d:95:d7:6d:20:7f:c9:51:
ee:e0:38:37:df:4f:03:d0:d7:48:80:ed:1b:01:25:
a0:9c:3d:82:67:a5:b1:1c:52:3a:d8:72:8e:b5:53:
26:13:ac:95:2d:50:fb:6d:0a:dd:b7:c4:28:29:25:
b2:d9:8b:00:df:25:d0:c3:f9:47:99:39:54:26:9c:
fa:22:4f:9a:cc:45:65:07:e5:f8:de:a0:81:5d:e9:
e5:41:43:d5:47:47:59:70:53:2b:51:e4:e2:14:85:
fd:b3:9c:a4:4a:29:ed:72:cf:fc:a2:05:58:73:1c:
b3:a2:30:cf:18:8b:f6:ea:bb:70:b3:ac:65:a2:3f:
92:1d:67:07:5b:e9:fa:5d:08:fd:b3:97:8c:28:32:
dd:44:4b:62:a6:09:f8:d6:a3:e4:37:eb:3f:91:4b:
d4:b3:8b:18:81:46:57:13:c3:a8:68:a2:66:9b:b7:
c3:10:59:be:11:b4:44:99:8f:a1:bf:cf:69:07:e3:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7C:2F:D9:B3:61:8E:D0:A6:B0:1B:C9:26:41:8D:51:BB:AE:FF:CC
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d8:c8:8f:e3:77:58:f3:97:50:71:09:9e:50:88:bd:8c:27:
e6:67:44:c5:c3:00:46:ab:10:d1:00:48:0b:3c:55:38:5d:42:
11:11:34:51:34:f6:07:79:fe:e5:c0:43:78:4d:03:93:6d:29:
81:07:97:e4:b5:ec:cc:16:76:82:50:7d:79:48:e9:7a:89:fb:
0a:34:a6:31:62:4c:51:1c:af:37:b8:dc:c4:ca:4b:b5:99:ae:
1d:34:8f:21:8a:c2:28:ad:24:b4:86:05:c6:57:2f:de:a9:d3:
df:49:3e:bd:c7:46:27:d1:40:0f:dc:fc:91:ed:b8:f2:c8:2d:
10:38:3d:42:e1:01:28:cf:e7:f7:b2:9b:9b:2f:c4:dc:84:08:
2e:e9:a3:dc:fa:5e:59:2c:02:eb:56:08:a3:f6:72:a4:af:1d:
50:25:98:bf:f9:5f:06:6c:20:e0:e5:fb:b5:3c:01:86:b4:39:
11:a0:fb:df:c3:15:62:a7:0e:ff:29:bd:5d:93:32:0d:07:ae:
8d:b3:ec:54:98:78:92:c1:8c:fd:3b:e6:63:48:22:31:13:3a:
34:93:66:d4:7a:d6:48:3c:cc:dc:0d:48:ad:bc:86:82:b4:d1:
6c:7d:6a:f6:c3:2a:b2:ce:a4:3e:aa:c4:42:c9:b5:76:ad:6e:
8d:f8:b9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:15 2025 by rpki-client