Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
File: No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json)
Hash identifier: SpWf/91p6MDDnlPGlO+umiElF/pmKA2fid4uO2rYD2A=
Subject key identifier: 05:37:4F:D1:A2:8C:63:52:31:6D:5E:35:5D:A9:93:FD:45:EA:28:C5
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial: 019A71809A7E0CDF849A187BB393CFE3E40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 06:00:44 +0000
Manifest this update: Tue 11 Nov 2025 06:00:44 +0000
Manifest next update: Wed 12 Nov 2025 06:00:44 +0000
Files and hashes: 1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=)
2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: dl6KsEgu6jTYGq73IVwKfTsLgyqYmZeSA9jGFLWCq8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9a:7e:0c:df:84:9a:18:7b:b3:93:cf:e3:e4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Validity
Not Before: Nov 11 06:00:44 2025 GMT
Not After : Nov 12 06:00:44 2025 GMT
Subject: CN=05374fd1a28c6352316d5e355da993fd45ea28c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:81:06:ba:4d:53:86:aa:cd:11:d0:75:42:
f7:8a:ff:95:30:31:9d:5d:30:76:df:8d:01:23:ca:
33:7f:d1:f7:c8:11:e6:fa:d3:d0:0b:20:a2:9f:c0:
7e:61:e4:91:3a:72:00:3a:a2:8b:15:20:9c:bc:cb:
e4:b3:de:ec:17:5b:18:ef:ee:95:67:10:f1:f4:a4:
1d:e6:48:7d:11:b6:b7:50:2e:16:e8:79:13:49:47:
67:8e:48:9a:d7:dd:2f:07:ed:97:5f:65:39:5e:14:
58:4b:58:cf:c7:fd:73:3a:a8:b2:0a:56:c1:47:37:
8d:00:f2:8c:30:cd:61:38:ee:7f:88:99:72:16:ba:
5a:fb:ed:c5:d3:d4:e3:a2:17:7b:48:83:f0:24:49:
07:07:19:7d:aa:e3:86:d3:70:f5:6f:33:c7:07:30:
7c:99:43:30:5f:7b:5f:fb:e0:a2:0b:99:38:fd:01:
50:b1:44:0c:5e:8f:64:64:9e:9a:49:da:9d:b0:30:
66:2e:b8:dc:4d:64:49:28:96:a4:c3:79:93:1c:5b:
38:b1:f2:9e:ca:03:f2:3f:8b:76:be:4b:82:bb:85:
6e:3e:75:93:c3:2d:4a:e6:0b:23:c9:d7:4e:09:1a:
c0:c9:11:fe:a8:fa:37:46:10:b0:fd:9d:89:bf:34:
52:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:37:4F:D1:A2:8C:63:52:31:6D:5E:35:5D:A9:93:FD:45:EA:28:C5
X509v3 Authority Key Identifier:
keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4f:47:86:89:eb:08:38:ac:c2:4c:4d:f9:87:67:4f:2e:5a:
d2:ac:6e:8b:69:db:5b:fb:09:06:da:ae:27:98:8d:e5:5c:3d:
b1:db:be:89:7c:5a:83:d9:68:e7:ff:6c:e1:18:9f:f0:8d:f7:
67:51:96:cf:65:79:e2:58:32:f9:39:38:78:29:eb:48:11:7c:
b6:16:fa:10:d9:ad:43:e6:2a:89:01:e3:51:2b:c7:3c:9e:a2:
e2:d0:9a:90:5f:ee:cd:a3:8d:21:a8:ca:c8:88:ce:3b:6d:d3:
14:f7:e7:72:c8:f9:a0:6e:df:7c:66:8a:0a:66:52:7a:83:fe:
6e:76:07:c3:66:0d:39:46:12:2e:3b:4e:99:01:f9:93:af:39:
2d:4f:27:7c:20:0c:70:67:c2:f5:9b:90:f4:27:69:01:fe:98:
fc:ef:f0:ea:2b:0e:28:1f:93:88:78:74:44:46:c7:6e:2f:ab:
db:49:ce:f2:4c:82:ee:32:49:6d:47:ad:2b:63:61:70:2f:b4:
9f:28:96:07:7e:4c:0e:10:75:7a:e8:7a:27:15:a7:30:99:36:
cf:2b:58:92:1c:76:4b:64:d8:64:06:18:60:7a:0c:3e:24:95:
50:96:45:43:df:50:ee:da:76:ee:66:46:1c:4b:db:7b:64:95:
d4:4a:91:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:40 2025 by rpki-client