Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
File: No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json)
Hash identifier: MQbdBDzy38GEZ8GSPptdr34aIrxVX5XrBKCNymAKt4A=
Subject key identifier: 38:53:2C:A8:87:A7:98:65:8E:D9:81:40:25:A8:EC:BB:9B:B0:B5:FC
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial: 01984B535EB40E3D1E0AFE9002E24A4363F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 10:00:11 +0000
Manifest this update: Sun 27 Jul 2025 10:00:11 +0000
Manifest next update: Mon 28 Jul 2025 10:00:11 +0000
Files and hashes: 1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=)
2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: 4v+wE3M6K1AqgohWH6NKFFU56ustCUxVcBkp0Y8HeK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:5e:b4:0e:3d:1e:0a:fe:90:02:e2:4a:43:63:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Validity
Not Before: Jul 27 10:00:11 2025 GMT
Not After : Jul 28 10:00:11 2025 GMT
Subject: CN=38532ca887a798658ed9814025a8ecbb9bb0b5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:51:ec:90:9e:61:9c:63:2e:18:2d:37:5e:
61:e6:53:12:24:c5:0a:5e:9e:ca:9b:b4:b9:81:18:
52:56:28:6d:77:20:20:f2:2b:92:e0:f7:c7:3d:15:
65:01:a1:38:6a:a6:13:45:52:a2:59:e8:72:6a:7a:
45:76:e5:4f:3d:e4:49:b0:8e:14:1a:8e:10:6e:1c:
01:b4:08:c4:6f:f0:83:d9:04:a6:9c:98:53:dc:36:
60:29:1e:52:02:1f:70:56:82:59:0a:23:c0:56:b4:
ea:9b:ba:ae:79:62:a4:a8:47:e9:d1:b6:bb:29:70:
cd:a3:a3:ec:44:fa:9f:2d:b6:31:6f:bf:bb:1f:77:
e5:52:58:76:e6:69:8e:2f:72:95:22:92:09:21:b8:
4c:ab:58:a9:70:06:7c:db:8d:86:d3:62:8f:30:76:
e5:5f:2d:22:34:7d:15:64:91:b3:e4:57:72:63:5a:
61:4f:47:82:be:e1:09:51:55:c2:39:93:04:38:47:
0b:cf:6d:67:ee:77:fa:44:cb:8f:ca:3c:81:e9:f6:
32:08:8b:88:5c:fa:b2:bf:e0:b4:04:36:e9:b9:1e:
26:23:78:1e:ab:6f:12:de:92:a4:c7:a2:34:96:e0:
8f:3f:ce:53:9e:92:e5:dc:20:31:ab:f4:4b:21:be:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:53:2C:A8:87:A7:98:65:8E:D9:81:40:25:A8:EC:BB:9B:B0:B5:FC
X509v3 Authority Key Identifier:
keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c5:a8:3d:72:ed:e4:2a:a1:16:32:82:79:27:dd:52:29:84:
1a:d7:55:ff:85:65:36:f8:11:36:8a:ac:de:a7:1f:0a:75:09:
a8:07:1c:7e:d7:aa:c6:7b:b9:a2:f8:29:93:f6:e6:56:9f:4d:
3e:2f:25:3a:de:c6:52:11:40:04:f1:83:e9:e9:22:76:fb:dd:
f1:23:71:7d:28:98:3c:96:a6:46:f9:ec:c9:7f:46:6a:a4:d1:
8f:e0:1a:55:33:58:83:d0:06:f6:7b:d6:d0:aa:4f:73:73:23:
19:c6:1e:38:34:75:d5:a4:16:39:b0:b1:92:48:39:98:4e:9f:
36:6b:5f:b5:ee:fb:7e:1b:8f:7e:6c:f9:8d:4e:8b:89:d8:d7:
81:82:ab:b3:df:10:c1:71:1b:80:08:63:e5:56:55:f4:6e:89:
63:db:be:bf:0d:6c:ad:17:ef:9a:06:73:9e:24:78:51:63:d3:
ea:d0:cb:7b:05:69:44:c1:24:0c:b7:f8:e8:1a:78:5d:a2:f8:
d3:c3:8a:81:cc:2d:c1:81:0a:23:2a:05:a0:c9:f3:04:a2:9c:
22:4f:0f:56:49:aa:b4:cb:e2:77:49:1f:7a:71:2d:2c:bd:5f:
0c:41:01:fb:ec:06:28:b0:bf:22:f2:f1:d2:d6:9c:3d:e7:de:
f0:2d:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:04 2025 by rpki-client