Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier: UKa+gVV8RPyl3AYFcXzfHNmH18EuTt0h5GsEhJ6fp2M=
Subject key identifier: 16:1C:DB:BB:DE:E2:53:D3:18:3F:6E:D6:67:67:23:A2:3A:ED:9C:08
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial: 019A4EF490BC746B1EBD0CDC3E17AC8981CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:00:41 +0000
Manifest this update: Tue 04 Nov 2025 13:00:41 +0000
Manifest next update: Wed 05 Nov 2025 13:00:41 +0000
Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: KECwszI8FxySPGCDEs4ECVv7HqlulGBQFjgRYJe9//M=)
2: oFJDhlIxFUNhw_-HBfRNlNTaZxk.roa (hash: X5zMaPXKmmEjg88Z3XtKkZigQqgVKFsASLy1XTJf6Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:90:bc:74:6b:1e:bd:0c:dc:3e:17:ac:89:81:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Validity
Not Before: Nov 4 13:00:41 2025 GMT
Not After : Nov 5 13:00:41 2025 GMT
Subject: CN=161cdbbbdee253d3183f6ed6676723a23aed9c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:2a:0b:e9:5c:2c:e7:e3:95:b0:4a:6a:3c:
c1:94:bb:91:9e:2d:11:c1:ce:5b:7f:9c:09:e5:31:
5e:56:bd:27:31:8d:7f:67:5b:b3:05:d1:b9:35:aa:
a2:13:11:ed:49:de:da:72:63:1d:1f:c8:69:af:e7:
7c:d1:e1:4e:33:93:91:48:fe:f4:75:84:61:a2:a2:
6a:46:5a:50:1e:9e:34:ca:de:21:e2:43:be:a5:99:
a1:71:41:be:96:0c:18:ad:b7:5c:c4:65:a8:06:a7:
9e:ba:f7:55:80:df:8a:13:27:47:10:83:de:5f:d9:
72:ac:0c:1d:04:07:e4:2c:ad:da:47:a9:da:d7:61:
4d:c8:6f:0f:3c:68:28:e1:fd:39:19:c2:62:f2:84:
5c:fb:b5:13:c1:54:db:e8:55:08:7c:02:48:74:79:
f1:bf:ba:86:dc:4d:ab:aa:c6:bc:98:80:12:cd:9b:
e8:f9:66:05:6a:73:1a:2b:1e:0e:5d:13:a7:8a:c9:
2b:28:f1:de:f2:fc:06:58:16:3e:a6:30:ef:c5:bb:
5f:41:05:c2:53:c7:5b:54:76:1e:b3:7b:99:76:dd:
94:da:d3:73:c0:84:c0:de:31:85:e4:c2:0c:5f:cc:
94:98:82:a3:ca:b2:0b:5b:94:41:14:fc:61:bb:41:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1C:DB:BB:DE:E2:53:D3:18:3F:6E:D6:67:67:23:A2:3A:ED:9C:08
X509v3 Authority Key Identifier:
keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:61:6f:0a:3b:47:1b:39:65:2b:1a:a3:ca:1b:32:18:c5:4a:
77:e6:7d:d1:96:eb:a3:c3:71:ba:22:61:a3:99:91:41:d9:92:
ac:29:e1:ec:ef:9f:b8:13:af:fc:d8:b3:69:c8:e0:62:07:22:
d4:cd:fe:d5:df:6a:94:41:cb:f5:28:f4:94:25:26:e8:90:28:
5c:56:86:0a:65:73:fb:da:5a:da:01:3a:eb:82:0c:f0:63:fc:
dc:c9:e8:30:80:6c:6a:bb:07:c3:19:8f:49:53:31:df:1a:31:
50:7c:42:75:a2:be:c9:13:7c:2a:1f:e9:eb:9c:9c:eb:b4:6d:
b3:d9:46:a0:05:67:ff:a7:e4:21:6e:56:5e:2f:4a:6a:94:8c:
95:d0:da:e9:17:06:3c:a1:3a:4c:65:6f:27:87:cc:8a:55:58:
cb:86:89:a9:7e:cf:b1:15:a8:7e:05:9d:be:4e:de:8a:3c:26:
6e:7f:2b:10:98:94:d8:6d:bf:1e:88:4e:33:06:3b:f3:1f:b1:
ed:41:cf:50:ab:0b:9c:3a:cc:9c:89:8d:b7:4f:11:85:da:f4:
c2:48:53:9a:b4:62:30:39:e6:86:19:33:ff:3c:cf:82:94:e9:
c3:92:a8:ea:47:44:32:62:65:22:22:19:cb:b7:5c:f6:de:6d:
a7:9a:87:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:56 2025 by rpki-client