Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier: sn1Rw4pBDNlc6d+G7vjPHvR+vPeSY+aDYoZvrjumvWg=
Subject key identifier: B0:25:E4:8C:5D:8E:68:82:6C:12:AB:39:51:5F:C5:2F:76:49:49:90
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 0199FB460BE2808CE96AE794E6AD041E0498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number: 0AF0
Signing time: Sun 19 Oct 2025 07:01:35 +0000
Manifest this update: Sun 19 Oct 2025 07:01:35 +0000
Manifest next update: Mon 20 Oct 2025 07:01:35 +0000
Files and hashes: 1: 1-57HmlNDMcNn-L6phbslRuvJCcw.roa (hash: gyWoPpIB9HWDXzh+b8BPPzXer8C1JA3lUjjaqPhqcUE=)
2: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: 0HOcK/ExFkExnvDlWvZNsgdan8cX4dEqxkY+NaGVnX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0b:e2:80:8c:e9:6a:e7:94:e6:ad:04:1e:04:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: Oct 19 07:01:35 2025 GMT
Not After : Oct 20 07:01:35 2025 GMT
Subject: CN=b025e48c5d8e68826c12ab39515fc52f76494990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:31:e8:a3:3c:c4:0e:d8:32:02:99:79:ba:
4d:ae:6f:3d:59:4a:7e:4c:64:81:32:f9:42:31:f4:
bb:73:0a:19:90:11:27:db:13:f3:86:74:99:75:32:
e2:69:6a:1f:57:4a:16:4d:3b:43:37:12:6e:10:c1:
d9:84:c6:55:b5:e9:3b:1d:94:85:0b:ef:0c:23:8d:
a2:bd:1f:8a:a0:68:3a:0f:e0:be:0f:46:52:e6:5f:
f8:b8:b9:10:19:ae:aa:23:17:22:fb:57:d1:88:d5:
af:69:57:52:81:f0:cb:74:ee:0d:34:d4:01:11:9d:
2c:27:37:68:21:5b:8b:b1:97:75:fa:3c:85:63:72:
83:a1:63:d7:8e:88:f4:17:95:cb:4f:e7:0f:15:43:
27:1d:a6:f6:4f:e3:20:f8:3f:bf:a0:a3:00:a6:84:
08:f7:f7:31:49:e1:65:a5:7a:23:00:14:ba:a4:be:
09:c7:00:f3:6f:9f:5c:1e:0d:9a:fe:c5:d1:3e:5e:
75:13:01:55:9c:a2:45:fe:08:95:11:0c:ba:ce:52:
f9:77:0d:cc:b7:7f:8e:b1:36:f8:da:b0:15:a0:72:
3a:8c:e6:a9:c4:48:c9:3d:34:27:ed:86:49:34:5a:
44:bc:a6:7f:71:b9:0d:e9:64:df:84:e4:68:cc:c8:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:25:E4:8C:5D:8E:68:82:6C:12:AB:39:51:5F:C5:2F:76:49:49:90
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:62:c8:6f:d6:cf:2b:6b:30:3a:05:58:ef:ee:73:e6:b8:c5:
b0:91:97:5e:d2:43:97:92:a8:7a:45:c7:7f:76:94:fd:a7:be:
14:6f:9b:de:18:ef:a9:fc:37:5a:f8:4d:c0:a5:aa:de:89:8d:
f3:61:1d:24:96:63:57:62:6c:3f:33:0a:20:f8:fa:00:dd:db:
56:d3:66:1c:64:20:25:59:46:52:bc:2c:22:5b:69:ec:77:d4:
79:7e:c2:2e:92:66:40:ad:d4:a4:f0:42:3b:6f:ea:7b:01:d5:
c3:c7:a1:25:8c:73:af:70:5a:21:3a:0a:fd:cd:8b:d1:99:00:
69:a6:e0:5e:f8:10:dc:2d:ba:7f:17:8f:89:1c:fb:a3:ad:f4:
04:67:e1:e2:4f:a9:ab:b3:62:9d:f3:6f:7e:50:72:e3:48:41:
0a:c8:34:18:b8:28:a4:0c:ce:e6:0a:68:1e:11:60:06:6e:f9:
38:28:6e:8e:8a:db:2b:d7:54:e1:5d:a0:0e:f2:d0:21:70:30:
9a:8e:50:af:d4:8a:5e:bb:97:23:61:41:08:cd:8e:ed:e3:18:
05:24:8d:28:de:4d:6d:a8:63:a2:c1:b9:9e:f4:b7:90:e2:bb:
92:ce:7f:8b:a3:09:40:da:8c:5c:c6:21:ab:45:23:dd:b0:51:
c9:99:ef:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:33 2025 by rpki-client