Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
File: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft (raw, json)
Hash identifier: LBy7R4AQ6jZfPllk93JUYLuXYgY21ScUtnF1qS374hw=
Subject key identifier: F2:E4:29:1A:84:25:64:2A:CE:2D:37:C2:3B:C8:76:5D:04:53:BD:4E
Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
Certificate issuer: /CN=e35607a494200ff1f3d599e25fc013f38640cd46
Certificate serial: 0199FA6A3B24D71C6637BEDCC16EFA829B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
Manifest number: 0F
Signing time: Sun 19 Oct 2025 03:01:29 +0000
Manifest this update: Sun 19 Oct 2025 03:01:29 +0000
Manifest next update: Mon 20 Oct 2025 03:01:29 +0000
Files and hashes: 1: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl (hash: EneuFPNC1mU4kDmGNV2dhwlj/XHwNzor6aLYPNTf5A4=)
2: g1q1X1vaFeQn5xUDKlEZZNnkMq4.roa (hash: BhX3ai6MXXM39hpgWifIF0fPiVBPvolxXocXWL46aJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:3b:24:d7:1c:66:37:be:dc:c1:6e:fa:82:9b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46
Validity
Not Before: Oct 19 03:01:29 2025 GMT
Not After : Oct 20 03:01:29 2025 GMT
Subject: CN=f2e4291a8425642ace2d37c23bc8765d0453bd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e3:f0:4f:db:3e:c2:1a:b3:28:6e:ec:60:23:
44:80:4b:d5:5b:05:2c:24:6a:21:66:91:7c:8f:f1:
76:3f:77:c6:20:84:36:49:3c:ee:8c:0f:4a:db:a5:
28:ec:35:83:51:5a:9c:22:07:08:0e:9c:d1:77:9d:
96:34:9c:7d:48:12:f3:d7:d9:d2:ce:eb:c7:51:80:
64:38:28:e9:20:37:b7:1f:2e:21:23:0e:34:1b:df:
8c:28:a5:81:c0:cc:8d:b0:5e:00:fb:90:b2:b8:ea:
81:72:87:4e:6d:85:63:cf:40:c4:3f:d7:47:e8:b8:
dc:1b:36:ca:4a:c3:e4:da:46:8f:2a:5e:28:76:8b:
f6:78:dd:67:62:8b:8c:d6:57:23:01:f1:f8:79:cb:
a1:be:8b:0b:8f:8b:fa:9d:8b:ab:6a:fd:fb:96:bf:
46:73:50:4b:3a:78:c4:d2:66:dd:89:09:cd:8b:08:
28:1c:76:56:7b:ce:93:04:af:e5:93:be:4c:8b:c0:
8d:6c:ce:08:fe:a3:76:70:34:23:44:d3:bb:95:b1:
95:4d:bf:6c:59:0b:04:c9:64:cb:de:1d:c1:d8:8c:
17:a6:97:e5:16:b7:36:c5:40:5b:5e:3e:65:b3:14:
88:b3:31:27:0d:0c:e1:1d:2f:67:bc:f7:18:9d:fe:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E4:29:1A:84:25:64:2A:CE:2D:37:C2:3B:C8:76:5D:04:53:BD:4E
X509v3 Authority Key Identifier:
keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:dc:b1:7d:e8:24:a5:b1:e6:30:d7:0e:f0:2a:9a:bd:cd:04:
8c:09:ed:5f:2b:31:6f:47:ea:2e:9f:6a:6b:fe:81:c7:b5:7e:
35:11:09:c0:75:b9:d1:4e:be:28:98:19:30:3b:9f:c0:28:40:
66:c7:02:34:ea:d0:5c:4b:99:5c:a7:93:5c:c9:e0:84:a0:e8:
4e:54:6d:3f:d6:9e:8f:23:a4:66:c2:9a:8f:b8:1f:53:5e:05:
c7:31:41:b3:39:7e:eb:b7:fa:ce:18:75:ca:cd:7d:c1:a6:02:
2a:93:4e:52:aa:af:3c:a3:2a:5f:7c:33:a8:8b:23:3a:0b:9d:
5f:00:f3:b2:46:06:0b:d4:3b:82:78:27:74:e7:ea:5a:e9:42:
c4:1e:06:bc:65:46:12:1d:e4:36:d5:f8:cf:5d:93:68:09:24:
b4:a7:1f:02:7a:26:3f:5b:e6:76:17:b1:39:76:90:83:23:e6:
d9:3c:5b:fb:f1:c9:0d:90:36:07:39:53:60:a4:50:cb:42:44:
47:94:25:12:bb:2e:49:db:42:8e:d7:8c:0f:59:a1:03:42:fc:
28:cf:b9:49:c8:5d:37:93:e2:fd:1a:bd:63:fd:bb:de:bb:9f:
ec:6e:56:e9:3b:16:9b:c6:ab:60:27:a5:d5:11:cd:d2:0f:37:
79:27:e9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:19 2025 by rpki-client