Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier: 4kXvTYC/NvSt3lCRpA7ak81FZEgmOFLSUn3CgnmXHhg=
Subject key identifier: DC:E6:40:9E:06:60:1D:DF:77:41:4E:4B:A8:0D:E3:89:3B:FA:71:8C
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial: 0199FDD8D431DC1C4A2EDD20D18FCB5ED498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: 7kh82GskTz+r3SoOjFALByhbDTlwc/Mf87u4gKErFz4=)
2: oFJDhlIxFUNhw_-HBfRNlNTaZxk.roa (hash: X5zMaPXKmmEjg88Z3XtKkZigQqgVKFsASLy1XTJf6Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d4:31:dc:1c:4a:2e:dd:20:d1:8f:cb:5e:d4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=dce6409e06601ddf77414e4ba80de3893bfa718c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:04:c2:61:b1:67:fb:08:8d:30:2a:94:be:
9e:a2:ea:79:bc:b6:2e:00:13:85:88:bf:49:d6:f3:
7a:4e:63:63:7f:b9:f3:bb:1e:92:a6:34:4f:aa:1d:
5a:15:e9:53:d2:17:41:75:6d:1c:44:82:7f:8f:83:
af:a3:86:26:b8:d9:42:1a:b4:e8:ef:29:cf:05:10:
ee:7e:3d:44:26:a2:3a:29:e5:3e:dd:a5:5b:36:5c:
7e:5e:63:ff:04:0e:99:ab:9e:ee:80:fc:5f:80:3e:
79:cc:e9:41:41:fc:84:88:a5:dd:98:48:ea:67:88:
60:c1:09:7e:76:3b:65:71:64:29:09:b8:52:1f:a1:
9e:7f:2a:e9:17:18:18:b4:2d:03:3f:83:17:f3:ba:
5a:c6:e8:b2:2f:33:e1:0d:20:8e:de:0d:5b:60:2b:
7e:2e:3a:1b:71:f8:da:0a:04:fd:fc:c4:3b:3a:c4:
1b:16:6a:ce:0c:5b:27:cf:61:55:f7:6b:9e:d1:ba:
16:b3:99:80:06:29:3b:6b:6d:5d:1e:1c:91:fd:89:
02:ea:6f:63:1f:c3:4f:ce:4a:2b:93:ed:f7:f5:b7:
26:5a:a9:87:56:5f:e7:57:30:cb:d3:6a:59:4d:86:
6f:76:cc:96:f7:5f:ac:d9:4b:81:ca:d1:d5:6f:0f:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E6:40:9E:06:60:1D:DF:77:41:4E:4B:A8:0D:E3:89:3B:FA:71:8C
X509v3 Authority Key Identifier:
keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2a:ff:3b:f1:6d:43:67:cc:5d:5f:be:5e:19:4d:fa:2c:6c:
d5:18:9d:ac:d1:42:c9:78:3a:3b:63:4e:f7:f5:b2:7b:ac:b1:
ef:1c:e5:38:ce:c5:b8:04:4a:ae:31:ac:00:19:93:f1:87:11:
0f:46:f4:28:4f:46:b4:58:bd:c5:9a:83:2b:fd:1e:53:c3:d0:
d4:4b:b0:4e:ef:70:bf:87:12:bf:85:50:17:7d:96:13:95:2f:
b4:d1:7f:2f:4d:1d:a2:29:9c:d7:91:a9:63:b3:93:b6:2e:e9:
3f:b0:46:17:e7:7a:b0:79:ad:84:60:01:a0:dc:1a:95:de:aa:
8b:c8:6d:e5:a9:2f:7c:24:0d:89:7a:e9:94:06:27:79:d0:b4:
1b:bb:e0:fa:ff:35:8a:7b:cd:18:46:51:27:86:5c:5e:44:9c:
7c:7a:ff:36:41:e7:02:9c:5d:06:45:5b:b2:ce:0f:63:a3:bc:
6e:ac:20:12:c7:44:e9:80:1d:32:b9:91:3e:c8:a9:0d:5f:43:
a9:82:e3:70:48:32:73:75:61:6d:6a:5c:4f:1a:02:a8:8b:6f:
c1:ba:f3:58:47:8b:95:64:9a:62:c4:a3:2d:92:41:34:1a:cd:
81:7c:a4:16:87:7e:55:96:fd:1c:0b:00:63:37:5f:5d:29:fe:
2c:a6:fd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:31 2025 by rpki-client