Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier: X+N57dKJT/k9dWW7a2di0NUUWL6m0tbg8jIBirBb0iI=
Subject key identifier: 95:6D:2C:F3:FC:C1:2B:91:B8:17:34:70:04:89:CB:AC:A5:2F:7D:F0
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 01987ED3F534A0841A54A49DAFB9C8581C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number: 0A2B
Signing time: Wed 06 Aug 2025 10:01:16 +0000
Manifest this update: Wed 06 Aug 2025 10:01:16 +0000
Manifest next update: Thu 07 Aug 2025 10:01:16 +0000
Files and hashes: 1: 1-57HmlNDMcNn-L6phbslRuvJCcw.roa (hash: gyWoPpIB9HWDXzh+b8BPPzXer8C1JA3lUjjaqPhqcUE=)
2: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: okrLgEFhc3L/V9KvPuBvrG9GG7iXC9hOEzaRylaSOJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:f5:34:a0:84:1a:54:a4:9d:af:b9:c8:58:1c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: Aug 6 10:01:16 2025 GMT
Not After : Aug 7 10:01:16 2025 GMT
Subject: CN=956d2cf3fcc12b91b81734700489cbaca52f7df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8c:47:b7:12:ed:37:5a:78:67:00:64:0c:07:
0f:fc:c9:86:be:f3:f1:72:6c:75:60:48:8c:87:74:
2e:e7:1f:7a:19:57:21:6d:a7:50:2b:f8:3b:d7:a1:
bc:71:d6:78:63:78:79:2c:9a:76:6e:f7:a2:0e:d3:
97:ea:e8:2a:9a:29:db:21:58:26:40:be:2b:62:91:
4a:4e:0b:5f:a2:63:11:89:c9:61:58:f9:b9:1e:14:
84:5b:a2:ab:e8:f1:2a:15:ac:62:34:43:e2:ef:29:
6b:fe:0d:f7:36:64:dd:55:15:05:4f:09:00:94:1e:
37:a1:1d:3a:e3:97:27:3c:25:54:a4:af:49:73:61:
f6:9c:ee:78:7d:4d:14:1b:8d:39:ce:ad:66:b0:9d:
05:4e:96:02:59:d9:59:b3:fd:d8:8d:72:b3:32:06:
b2:2d:b5:31:aa:c0:26:1d:be:19:e4:8f:b8:9c:c3:
08:1d:a8:20:c5:a0:7d:60:5e:c7:ae:f1:c4:14:db:
ec:da:df:96:ef:02:38:4c:5a:a7:7f:4a:0f:f7:67:
fa:50:b5:e3:7a:c4:a9:bf:af:54:3b:b6:97:4e:73:
28:74:87:87:96:3e:ab:05:e5:a1:be:5e:98:1a:87:
d7:76:a6:8b:af:b9:4b:62:d9:e2:dc:69:50:ae:1f:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6D:2C:F3:FC:C1:2B:91:B8:17:34:70:04:89:CB:AC:A5:2F:7D:F0
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:09:b5:d5:52:bd:9b:4a:58:1d:41:78:7f:3c:aa:fb:85:da:
74:5e:93:2b:ca:f9:62:83:7a:e5:1b:06:0d:d5:dd:9e:88:dc:
2e:b9:5f:29:ed:14:15:72:1b:6d:b3:27:c1:97:85:b8:46:13:
39:d5:30:51:be:2e:a9:d8:2e:39:f3:27:6d:7f:dd:7e:c6:52:
f1:05:93:32:72:18:59:71:83:c4:1c:07:98:09:5f:79:ba:4d:
c9:95:46:50:69:e1:7e:70:c6:8c:ac:9f:84:fc:53:e9:77:16:
5e:06:ff:df:f8:5b:e2:f1:17:ba:e4:3e:dc:74:c4:8f:09:88:
9a:ad:97:3c:ec:cf:eb:82:52:19:ab:75:52:dc:48:64:dd:7c:
cc:3d:65:18:62:6e:ef:83:15:fa:5a:d1:c4:77:2c:d4:08:c0:
5f:21:5d:f0:38:77:7b:f8:af:36:67:46:3a:53:2a:fa:57:83:
b1:f5:f2:68:89:f9:e4:a0:45:94:ba:ec:a1:be:34:c7:11:4b:
9b:eb:4f:36:b3:53:28:97:e7:94:e5:3c:ab:38:d5:6f:2b:ff:
5d:02:25:95:2c:39:c7:ea:af:50:a8:d1:6e:b2:98:01:8b:64:
f3:bb:5c:ea:fa:b1:31:79:2f:9b:24:5d:7b:ac:7a:92:d0:5c:
58:21:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:26:18 2025 by rpki-client