Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
File: No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json)
Hash identifier: nJkhzHBKTwR/zLw6CHbBKZpxRUUQBrk8SNZmw+qF6mc=
Subject key identifier: FA:61:B3:42:C4:B7:57:DD:B9:BE:DF:BA:B5:AB:85:07:F5:19:A5:E6
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial: 0198D47320EFDF704870C5EEFB2F55BE6D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:02:51 +0000
Manifest this update: Sat 23 Aug 2025 01:02:51 +0000
Manifest next update: Sun 24 Aug 2025 01:02:51 +0000
Files and hashes: 1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=)
2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: FMAnN6R0RozUBAaSb/iQmrS7y5XEZmPlOi4QhUnxbLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:20:ef:df:70:48:70:c5:ee:fb:2f:55:be:6d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Validity
Not Before: Aug 23 01:02:51 2025 GMT
Not After : Aug 24 01:02:51 2025 GMT
Subject: CN=fa61b342c4b757ddb9bedfbab5ab8507f519a5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:7e:f9:ec:2c:a8:b5:42:76:88:ff:1f:e6:
41:4a:76:8c:e6:dd:1a:f8:17:ec:29:22:d6:2f:83:
e3:1c:c6:3e:5d:14:32:be:c4:47:5b:02:15:5f:b2:
87:aa:90:1c:d2:04:32:4a:f5:44:7f:a9:45:cb:23:
50:d9:67:74:bd:65:5c:42:34:57:ac:d5:5e:01:52:
24:c4:3c:d7:34:cb:6c:d7:22:0a:c9:5a:d0:ad:74:
13:43:1f:71:71:b4:2c:cb:0a:98:a7:f3:18:79:2c:
01:a8:67:84:13:36:e4:b6:77:b1:1f:94:a5:15:83:
5f:7c:2e:0b:e5:7e:98:98:dd:89:2d:85:eb:de:23:
70:51:de:e4:29:64:14:d1:83:a2:4a:a9:99:72:e1:
83:dd:62:46:21:2a:b4:ce:df:57:c9:a2:1c:c7:43:
63:cb:3b:b9:97:e1:c2:05:6a:86:3f:ed:e1:48:e5:
0e:e3:b8:9a:e0:a8:5f:0d:44:5b:05:dc:c3:2e:2e:
b5:c9:5e:31:61:37:38:23:61:cf:8a:71:e7:37:3f:
6e:a4:98:f5:5c:bb:f8:2c:65:a1:05:d8:cf:7d:ad:
fc:59:78:42:7d:5f:8e:25:39:71:c0:bc:4d:9b:cd:
af:37:a0:16:48:ec:7b:ed:be:61:3b:39:4f:47:2c:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:61:B3:42:C4:B7:57:DD:B9:BE:DF:BA:B5:AB:85:07:F5:19:A5:E6
X509v3 Authority Key Identifier:
keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b8:9a:4e:ed:6f:c2:88:60:b3:b0:45:e4:22:af:33:2c:07:
a0:5b:c4:ba:c7:1a:e3:89:89:07:8b:8a:e5:e2:cc:f3:5a:05:
e1:f0:7b:a3:f1:f0:cc:3f:7e:57:aa:50:a8:a8:ec:19:05:8b:
79:09:43:1b:87:53:b9:4b:c6:ad:c5:3a:fb:26:a7:dc:5a:c0:
23:e9:87:25:c3:c7:5c:15:da:26:6d:91:4b:99:22:0a:b7:70:
de:af:79:63:c9:3f:a2:b9:f2:88:6a:d2:0c:ed:d5:07:a6:b4:
1b:23:f4:60:87:75:3f:fe:ae:52:a8:a5:cc:20:6d:dc:47:f3:
cb:ce:63:61:7f:72:df:5a:36:ba:5f:32:66:51:3e:60:64:16:
58:94:8d:7c:c8:ef:3a:69:af:3d:f2:96:4f:ac:26:aa:48:11:
39:53:31:8f:57:fc:88:8d:b1:a5:3c:0d:6f:0a:fc:f4:6d:2a:
41:b9:0a:1c:16:0a:c0:85:9e:dc:a2:68:e4:03:61:f4:2c:ef:
03:2b:92:7c:65:46:7c:91:b5:0b:0e:f0:54:00:b9:d5:cc:38:
10:c1:be:e5:b5:1f:79:93:92:ea:bc:47:93:63:d0:79:0a:c9:
dd:73:d5:c1:dd:c5:4c:ce:01:7d:a1:f6:85:e7:59:6f:d0:b7:
da:c0:fc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:28 2025 by rpki-client