Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier: xJC55t0ZHUxO1UnJtcyJQBP1YKd2QX9wVBrvuNx6QTo=
Subject key identifier: 45:6E:FD:D8:25:88:66:CA:3A:80:BD:55:EC:91:B8:C5:FA:46:A7:BA
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 01984AAF3B0CFE6D48B5C09B071B87BEA3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number: 0A10
Signing time: Sun 27 Jul 2025 07:00:54 +0000
Manifest this update: Sun 27 Jul 2025 07:00:54 +0000
Manifest next update: Mon 28 Jul 2025 07:00:54 +0000
Files and hashes: 1: 1-57HmlNDMcNn-L6phbslRuvJCcw.roa (hash: gyWoPpIB9HWDXzh+b8BPPzXer8C1JA3lUjjaqPhqcUE=)
2: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: kkZdMJrXo5YGJMoLQkkYrcBbMbrhQqPJd520B6JZRpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:3b:0c:fe:6d:48:b5:c0:9b:07:1b:87:be:a3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: Jul 27 07:00:54 2025 GMT
Not After : Jul 28 07:00:54 2025 GMT
Subject: CN=456efdd8258866ca3a80bd55ec91b8c5fa46a7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:1d:e3:cd:be:16:0f:97:2f:0e:6d:0a:ea:
24:16:ac:1f:01:03:ea:88:53:8b:f3:f2:88:39:fa:
4e:65:cc:12:49:7d:f7:32:f1:7d:08:8d:d7:15:d7:
66:48:3d:a0:1f:e0:0c:93:a5:df:f6:af:6b:8f:c0:
61:c5:2d:dd:a4:d9:b0:a4:fb:62:9c:23:f1:50:9e:
71:3c:1d:bd:8b:be:a2:e3:6d:19:1a:f8:87:1c:6d:
89:b8:52:73:67:01:72:d3:aa:28:88:d1:46:9b:b7:
08:ed:fe:4a:84:30:fa:b6:d4:8b:1c:1b:92:cf:2e:
16:d4:b5:7d:23:26:7e:b5:b1:08:69:64:11:7d:8e:
fc:70:65:4c:05:50:71:d7:6d:e7:98:83:52:a3:3a:
57:eb:cb:a1:8f:56:b4:89:9e:fe:ff:3c:bc:04:48:
f4:d1:92:9a:2c:38:c3:ae:4d:25:d4:98:73:f7:70:
9c:c8:fd:b2:8b:5d:e1:98:e8:91:b0:2b:55:8b:db:
93:49:ac:82:54:77:cc:be:40:3d:54:7b:9d:a3:2b:
08:0f:59:0f:4c:d5:45:05:29:8f:9c:f5:05:ed:7c:
d3:e8:d7:25:3c:81:cf:5d:d2:1e:9b:b3:fe:3e:00:
de:f9:71:b6:83:05:93:67:49:a8:29:59:14:32:23:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6E:FD:D8:25:88:66:CA:3A:80:BD:55:EC:91:B8:C5:FA:46:A7:BA
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:64:e3:de:71:6f:c5:b7:a6:05:a0:53:50:f1:40:9f:1e:5a:
57:99:ef:e8:02:99:11:8c:82:5e:34:4b:d2:e5:de:6f:ee:08:
f9:26:5e:8e:d0:9b:55:7c:9c:5a:f3:52:85:eb:5f:3c:38:51:
f8:16:6d:38:1a:63:bf:fa:db:be:07:12:a6:75:7b:2f:f3:30:
f1:ed:11:ed:cb:b8:53:4f:50:7f:ed:05:af:8b:1e:db:90:24:
6e:78:df:0f:c4:81:ff:b2:47:95:cb:7c:a7:eb:2d:d7:85:ea:
3b:ae:85:ec:40:f0:2d:9d:50:13:a8:fe:c1:e6:ef:18:96:ef:
5e:c6:3b:58:24:dd:ad:d8:b5:6a:15:8b:c1:4d:68:7e:9c:0d:
d9:5d:4a:a7:f1:2b:99:2c:0d:dc:f9:dd:ec:14:b2:fb:16:73:
10:7e:c9:98:93:ac:5f:c5:45:db:ee:e2:45:81:cf:b4:7b:f4:
2a:13:1d:b3:93:a8:ed:56:12:74:a9:6d:35:d7:f5:40:8c:5e:
c5:76:55:69:08:e4:e0:fc:8e:eb:11:63:26:03:91:95:1e:87:
8c:b5:78:c0:f3:0a:6d:09:4e:0a:bd:6b:96:3a:f8:bb:52:cf:
34:d3:07:6b:5e:a3:39:6b:b7:62:ae:0c:d0:89:b7:53:3e:45:
40:74:b2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:32:48 2025 by rpki-client