
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier: pyavSt4zjoPSynFKTzPScwXKaFcKlS4qiJRLAFFOEgY=
Subject key identifier: 98:8A:ED:F3:DA:77:22:64:BB:81:E8:93:07:19:D5:2F:DD:04:94:CA
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial: 0198458A0468D6409C6AABAA9C8BD8EE5E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 07:02:09 +0000
Manifest this update: Sat 26 Jul 2025 07:02:09 +0000
Manifest next update: Sun 27 Jul 2025 07:02:09 +0000
Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: YwhCytUCsLhK9JKhErLikvPlYumqI0oLRaBMUfxpdlg=)
2: oFJDhlIxFUNhw_-HBfRNlNTaZxk.roa (hash: X5zMaPXKmmEjg88Z3XtKkZigQqgVKFsASLy1XTJf6Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:8a:04:68:d6:40:9c:6a:ab:aa:9c:8b:d8:ee:5e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Validity
Not Before: Jul 26 07:02:09 2025 GMT
Not After : Jul 27 07:02:09 2025 GMT
Subject: CN=988aedf3da772264bb81e8930719d52fdd0494ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:32:83:0a:a2:74:54:fd:82:a0:0a:b2:46:
ad:cb:d2:ed:8a:5e:4b:c3:3c:a3:d8:c4:f8:3e:00:
b2:2f:c3:95:b6:e7:d3:7c:a2:77:4e:85:82:dd:96:
ad:ed:77:00:cf:3c:b3:52:39:aa:00:69:62:b0:ce:
25:05:b6:dc:90:09:56:e1:da:7f:d1:6d:a8:0b:88:
b4:91:22:3f:d0:e6:a0:d0:21:b7:62:e3:df:98:4c:
81:3f:53:68:84:b1:2e:15:8c:33:f8:d2:82:64:a6:
40:0b:e3:44:55:40:84:5d:61:04:5b:67:6f:de:fe:
bd:a3:3b:df:7a:a7:8e:ae:56:dd:c5:fd:59:c7:d4:
a9:e7:d4:dd:1e:fb:ce:85:bc:21:c8:a9:5f:58:0b:
b9:e7:9a:73:e5:3a:de:ec:4b:20:56:56:97:d0:66:
c6:99:4d:b0:0b:73:96:38:40:0a:1a:f0:54:d4:47:
04:aa:b2:22:c6:0f:0e:c3:2b:00:a6:b4:c6:42:68:
9d:aa:d3:a2:ce:23:3c:d8:84:eb:e4:87:f8:95:af:
47:93:86:4b:49:fc:74:85:a1:94:9c:4b:ad:aa:9b:
19:88:6b:c8:21:b2:be:35:f8:dd:74:82:9f:ad:d8:
b4:fb:28:9d:5d:ae:f4:3f:5a:49:ed:03:f0:f7:68:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8A:ED:F3:DA:77:22:64:BB:81:E8:93:07:19:D5:2F:DD:04:94:CA
X509v3 Authority Key Identifier:
keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:73:64:55:7e:6f:a2:55:64:1e:f0:c6:fd:85:a1:de:36:1a:
40:93:64:45:3f:2f:40:32:ff:97:f4:59:0f:ff:bc:83:62:3a:
5e:34:5b:a9:85:9c:53:3b:55:1f:de:76:18:f3:cb:80:53:70:
9c:47:06:33:8d:8d:8e:83:59:db:17:1b:f4:1f:38:5a:a4:8a:
bb:45:2d:38:71:7a:f6:d4:a0:3f:2f:44:54:13:5f:1f:3f:34:
bd:72:d3:1c:96:06:c6:b0:10:3c:88:0b:bc:86:0c:1c:e4:aa:
dc:4d:d0:57:00:9d:82:be:8b:fe:65:03:e3:f2:2f:cc:6a:70:
03:7a:e1:bf:cc:22:d7:19:e8:8d:db:8e:8c:20:b9:fa:f0:80:
6c:82:03:ee:fe:2c:d9:a0:a5:5d:29:f2:c5:da:99:35:c0:8f:
2f:55:af:37:f8:63:45:e2:6b:f6:92:b1:de:c0:49:9e:95:ef:
7f:d2:da:0a:30:22:68:45:6d:66:de:05:ea:89:ec:03:f0:6f:
c7:41:08:d1:f6:60:4f:0e:c6:a0:11:6a:8a:38:87:df:61:0c:
c8:8f:c5:4e:75:0d:02:9b:11:34:a2:f2:fa:dc:84:06:3b:c6:
1d:e9:87:2b:d5:34:82:cc:da:77:98:49:fb:2f:2c:96:60:42:
9a:4c:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:26:09 2025 by rpki-client