
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
File: No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json)
Hash identifier: G6tbWuIg5N13Ajm5hKOea1C96qP37bm4RMxajGZUNz0=
Subject key identifier: 5D:A3:B3:29:D4:BD:23:29:6C:D0:46:BD:E2:7A:10:A3:08:D2:01:BF
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial: 0199FBB36BF8AA93FB32D9F1260128F47449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 09:01:03 +0000
Manifest this update: Sun 19 Oct 2025 09:01:03 +0000
Manifest next update: Mon 20 Oct 2025 09:01:03 +0000
Files and hashes: 1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=)
2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: BwWsLUPAdKWqQf87l2HXaK5z8TvlPBJq1feAzasZA7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6b:f8:aa:93:fb:32:d9:f1:26:01:28:f4:74:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Validity
Not Before: Oct 19 09:01:03 2025 GMT
Not After : Oct 20 09:01:03 2025 GMT
Subject: CN=5da3b329d4bd23296cd046bde27a10a308d201bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:33:de:11:00:5a:9e:8c:68:74:08:4d:ac:35:
01:f1:23:f1:8b:74:98:63:a6:fa:f8:b5:24:e1:dc:
ad:5a:d8:01:5a:a7:db:31:19:b7:b1:07:76:30:c7:
03:61:5c:b8:36:9e:8f:98:a9:09:40:46:da:29:49:
62:92:e7:b0:3c:1c:be:25:1f:60:bc:2d:72:47:b8:
62:ad:aa:2f:a6:1c:e1:6d:50:7a:f1:74:dd:4f:fd:
46:b2:55:4c:90:fa:f1:b0:04:d9:59:2d:a1:8b:d8:
37:67:ba:cd:23:54:75:4f:82:08:31:19:0b:2b:49:
1c:32:1c:b1:87:ae:3a:70:da:8f:90:b2:24:b9:cf:
6d:5a:d4:ca:ff:25:ac:e2:da:0d:cc:a5:7a:1e:71:
59:cb:a0:f7:9a:30:97:ff:85:05:f3:1e:2f:01:0d:
7e:20:54:27:a0:8b:29:2c:04:7b:d6:a7:dc:14:ab:
48:a7:50:34:d0:e8:c6:e9:d9:56:85:e1:fd:0d:02:
8e:86:19:75:ed:b4:76:81:2f:bb:ed:64:eb:15:59:
f1:50:78:d9:d5:5c:25:46:82:65:1a:8f:30:bc:16:
ed:88:b7:08:52:ab:18:69:7d:1d:98:3c:5f:98:d9:
da:63:3c:46:77:02:15:12:40:40:53:af:2e:2a:97:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A3:B3:29:D4:BD:23:29:6C:D0:46:BD:E2:7A:10:A3:08:D2:01:BF
X509v3 Authority Key Identifier:
keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bf:25:8a:1f:20:3c:7a:6c:7b:26:9d:ab:40:91:bb:5b:30:
61:9c:35:08:70:cf:64:c3:cd:99:23:25:e5:1d:4b:36:c3:12:
b5:a0:4d:da:22:aa:1e:0a:40:29:a8:93:7f:b3:12:2a:10:2f:
ad:5f:d4:d6:db:f7:e2:d2:99:74:ee:a0:96:e4:ae:da:28:6a:
da:3c:d7:c1:ac:64:c0:75:8a:af:f3:24:e3:b3:42:ee:95:2c:
8f:2a:23:ec:6b:c1:ad:b3:c1:07:c9:4d:bd:47:ce:dc:0d:2a:
cd:89:9f:c1:4b:5a:42:0f:21:db:52:49:c7:2e:e5:36:8e:4a:
c7:df:df:60:18:9c:ab:4b:8f:17:6d:00:fd:92:77:a6:70:c2:
32:53:92:b7:de:ae:97:38:5e:7e:0b:71:57:02:db:15:28:b1:
87:38:93:ed:c6:57:87:46:22:6a:b9:70:6c:20:33:63:d2:f9:
7b:4d:a0:8d:a4:05:1f:77:81:f5:7e:e2:8c:00:29:1c:64:a9:
9c:64:aa:a4:cb:7b:2d:67:c5:fa:d7:cd:c1:07:1e:74:e1:de:
e9:e1:b6:07:76:90:04:fe:02:0e:3b:82:65:29:5a:2e:6c:dc:
f5:77:fa:41:b4:97:61:33:0e:d7:09:7a:26:4d:26:bf:64:92:
2d:cd:48:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s2v4qpP7MtnxJgEo9HRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGUzNWEwNWYyNzA3YjVhNzQxYzJhNzJmNWU0YmIzNGM5
YjA5YTgwHhcNMjUxMDE5MDkwMTAzWhcNMjUxMDIwMDkwMTAzWjAzMTEwLwYDVQQD
Eyg1ZGEzYjMyOWQ0YmQyMzI5NmNkMDQ2YmRlMjdhMTBhMzA4ZDIwMWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TPeEQBanoxodAhNrDUB8SPxi3SY
Y6b6+LUk4dytWtgBWqfbMRm3sQd2MMcDYVy4Np6PmKkJQEbaKUlikuewPBy+JR9g
vC1yR7hiraovphzhbVB68XTdT/1GslVMkPrxsATZWS2hi9g3Z7rNI1R1T4IIMRkL
K0kcMhyxh646cNqPkLIkuc9tWtTK/yWs4toNzKV6HnFZy6D3mjCX/4UF8x4vAQ1+
IFQnoIspLAR71qfcFKtIp1A00OjG6dlWheH9DQKOhhl17bR2gS+77WTrFVnxUHjZ
1VwlRoJlGo8wvBbtiLcIUqsYaX0dmDxfmNnaYzxGdwIVEkBAU68uKpc1BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2jsynUvSMpbNBGveJ6EKMI0gG/MB8GA1UdIwQY
MBaAFDaONaBfJwe1p0HCpy9eS7NMmwmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYjU0ZDEtODkyZC00NzExLWE5Y2Yt
NzZmMTM1YzRmMzExLzEvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9iYjU0ZDEtODkyZC00NzExLWE5Y2YtNzZmMTM1YzRmMzEx
LzEvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACL8lih8g
PHpseyadq0CRu1swYZw1CHDPZMPNmSMl5R1LNsMStaBN2iKqHgpAKaiTf7MSKhAv
rV/U1tv34tKZdO6gluSu2ihq2jzXwaxkwHWKr/Mk47NC7pUsjyoj7GvBrbPBB8lN
vUfO3A0qzYmfwUtaQg8h21JJxy7lNo5Kx9/fYBicq0uPF20A/ZJ3pnDCMlOSt96u
lzhefgtxVwLbFSixhziT7cZXh0YiarlwbCAzY9L5e02gjaQFH3eB9X7ijAApHGSp
nGSqpMt7LWfF+tfNwQcedOHe6eG2B3aQBP4CDjuCZSlaLmzc9Xf6QbSXYTMO1wl6
Jk0mv2SSLc1IKQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:53 2025 by rpki-client