Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
File: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft (raw, json)
Hash identifier: Zey7MRX3CAYDtZ3uvSH+Igq7mB4mrq3cNZ20m9NnfyI=
Subject key identifier: CD:EB:C1:B5:04:E2:55:3A:A5:F0:EB:86:8B:43:07:6B:54:2C:D0:80
Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
Certificate issuer: /CN=e35607a494200ff1f3d599e25fc013f38640cd46
Certificate serial: 019A533EA7531A183566973F20A9853D8233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
Manifest number: 3D
Signing time: Wed 05 Nov 2025 09:00:06 +0000
Manifest this update: Wed 05 Nov 2025 09:00:06 +0000
Manifest next update: Thu 06 Nov 2025 09:00:06 +0000
Files and hashes: 1: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl (hash: mL5vBjdz6F6G5d/3eAz2etHRNEU5ePqlTLBCT34PhVs=)
2: g1q1X1vaFeQn5xUDKlEZZNnkMq4.roa (hash: BhX3ai6MXXM39hpgWifIF0fPiVBPvolxXocXWL46aJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:a7:53:1a:18:35:66:97:3f:20:a9:85:3d:82:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46
Validity
Not Before: Nov 5 09:00:06 2025 GMT
Not After : Nov 6 09:00:06 2025 GMT
Subject: CN=cdebc1b504e2553aa5f0eb868b43076b542cd080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:96:65:3a:9a:ea:8b:19:24:d8:35:01:4e:6b:
83:06:5c:21:80:6d:82:b6:c5:07:8a:1c:e0:2b:7e:
da:f9:73:36:bd:33:b6:5c:14:1f:30:51:10:7e:00:
a3:07:1f:ed:0c:88:2d:41:5c:86:89:81:b7:b7:25:
50:6a:be:37:92:f1:ff:31:66:20:19:9b:5b:6e:a7:
67:8a:42:6e:05:62:db:57:c7:bd:cc:27:d7:9b:8d:
37:f0:e2:1e:00:a5:ac:e9:d8:a9:77:95:20:3a:7c:
1d:26:56:2d:ad:2a:3e:5f:17:66:e9:aa:18:7c:87:
51:4c:22:c1:f1:c3:5c:c0:1f:9c:07:c2:8b:20:9e:
d9:a9:8d:b6:b4:b1:74:97:c5:0b:fc:43:2a:58:36:
c9:cf:f9:eb:e9:c3:fc:45:9b:2c:72:60:42:c6:61:
8f:a0:35:d4:1c:fa:4d:60:02:bd:38:bb:9d:b6:12:
b9:41:73:30:57:5c:48:40:73:7f:5b:53:d2:94:a7:
af:71:aa:28:8b:22:13:d9:58:80:d2:09:20:24:df:
85:6b:2d:e2:a0:3d:2e:11:6f:aa:f3:a3:bc:1f:aa:
7a:de:67:56:7c:77:ec:ae:86:49:bc:21:5b:91:66:
9d:ad:05:e8:aa:14:6b:fa:15:86:fd:b1:2e:17:6f:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EB:C1:B5:04:E2:55:3A:A5:F0:EB:86:8B:43:07:6B:54:2C:D0:80
X509v3 Authority Key Identifier:
keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:76:70:35:c3:33:48:d1:a3:9a:21:24:8c:74:28:3d:3c:66:
e6:10:fd:8f:3f:15:e7:75:b8:b5:4a:f7:14:d1:1a:5c:97:19:
6f:dc:d5:1c:e5:8b:08:ca:fc:66:3f:da:07:4b:30:18:b0:d4:
f8:4c:1c:5a:3b:76:61:ef:1f:4b:71:49:3b:74:e1:f7:b4:7a:
d3:ab:41:46:7f:1b:bb:b6:46:d6:85:fd:c0:ca:29:e9:ff:13:
d0:f1:e2:46:36:7f:88:51:13:12:9e:a2:08:88:b7:d9:01:00:
18:15:d9:9d:73:8b:8b:9d:7b:6d:c3:1a:f1:6d:5d:2e:40:1e:
ae:36:0d:d2:40:bf:28:24:77:d6:05:45:4e:14:e8:cb:06:60:
f5:6d:09:16:fe:a3:b6:8e:3d:6c:bb:82:33:c7:66:ec:ab:2c:
ab:57:33:21:30:b5:c9:3b:1a:61:99:85:50:48:a0:db:6e:61:
8f:4b:95:1b:b8:f9:2b:9a:18:59:c3:1a:96:71:5b:68:38:a5:
08:ea:af:f8:b2:b0:13:85:49:3e:68:c8:df:56:72:df:a0:5f:
20:68:d1:bd:9f:37:14:0a:50:b4:c9:78:37:4e:fc:60:69:62:
5a:0d:fc:63:4c:75:e9:ea:39:c1:1f:16:54:e2:4e:10:38:f7:
ca:0c:4a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:31:08 2025 by rpki-client