Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier: fsag5X1cp5dAFWeNtpqc/aSThFv6o7DirODmwPZGSHs=
Subject key identifier: AE:71:A3:9A:3C:17:B3:D9:19:F7:E0:4E:18:6D:E7:71:52:BA:BB:7F
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial: 019A71B829B0E01239C6994D1534343EE80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:25 +0000
Manifest this update: Tue 11 Nov 2025 07:01:25 +0000
Manifest next update: Wed 12 Nov 2025 07:01:25 +0000
Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: 5dLDF7PcadPIiIyR54Oh3PINCKst8EWQzRO9Dd4UjGo=)
2: oFJDhlIxFUNhw_-HBfRNlNTaZxk.roa (hash: X5zMaPXKmmEjg88Z3XtKkZigQqgVKFsASLy1XTJf6Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:29:b0:e0:12:39:c6:99:4d:15:34:34:3e:e8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Validity
Not Before: Nov 11 07:01:25 2025 GMT
Not After : Nov 12 07:01:25 2025 GMT
Subject: CN=ae71a39a3c17b3d919f7e04e186de77152babb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:c0:f2:30:e7:dc:fe:78:e5:b9:0b:26:66:
9d:67:44:a8:91:4d:c3:3b:06:b1:eb:33:f3:06:89:
18:f3:0c:b1:20:1f:7e:7f:45:12:bd:af:7a:cd:46:
ff:f9:88:c0:3e:e6:00:9b:4a:f5:87:e8:a4:6f:b5:
50:f6:fc:7a:6b:54:f9:fa:81:07:1c:dd:5b:65:f4:
f7:45:f7:48:c6:ba:a2:c8:21:c6:b4:5c:a5:12:9b:
ea:d0:79:e0:48:e5:64:89:d6:2d:36:23:2a:1e:1c:
d7:ee:a3:57:3e:06:9e:52:28:0b:cc:a5:c6:19:b6:
b8:36:93:c7:53:01:9e:57:c6:f6:75:12:76:2d:bc:
a6:2a:4b:e1:16:9a:32:1f:bb:63:b5:b2:f0:79:78:
6d:9c:a8:2c:3f:04:1f:64:2c:2f:c1:21:12:89:4d:
20:6e:26:2f:e7:61:9d:3e:b4:7e:e9:fc:59:ae:2e:
71:cb:3b:02:56:ee:c8:c0:85:f3:94:b7:5f:9f:e5:
06:03:de:c3:0a:97:82:7b:a3:bb:b7:37:88:d7:3e:
46:77:25:c7:7a:f9:39:9f:09:fc:fa:8d:0f:14:a7:
1c:45:ab:f2:0d:ea:99:70:2b:cd:3e:20:08:6b:11:
e9:79:85:4a:4c:0c:5e:a1:3f:5f:39:64:18:69:2c:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:71:A3:9A:3C:17:B3:D9:19:F7:E0:4E:18:6D:E7:71:52:BA:BB:7F
X509v3 Authority Key Identifier:
keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ae:98:58:2a:e3:f2:e0:02:86:28:80:24:ce:8d:cf:44:17:
6a:fd:bc:80:1e:12:1f:2e:6a:b8:df:6e:4c:15:99:f3:ee:16:
55:d1:bf:ce:58:39:68:bd:5a:c0:45:8f:8b:a1:10:d2:f0:e3:
76:85:e2:ea:c8:d9:42:0f:49:19:da:92:b8:c2:29:b1:28:1a:
d4:28:f9:28:37:96:4c:53:fa:3a:2d:21:00:f5:4f:a2:43:f2:
47:9a:74:df:c3:1b:9d:3a:1f:bd:7d:e7:da:2e:90:78:c7:b3:
1c:b2:02:b5:b8:38:f3:8d:f0:55:76:64:d1:e0:16:4c:34:14:
32:fc:e9:c7:a7:72:e6:14:65:c9:6f:09:8a:20:c9:6c:7a:8d:
6d:79:2c:c8:12:5f:70:d4:4e:95:82:95:40:f1:06:7d:b7:a9:
fe:80:59:1b:c0:2a:3e:01:12:d4:f4:20:87:83:d3:ba:7f:fa:
9f:af:6a:39:c7:d1:46:1e:f5:49:ee:9b:37:25:d4:41:1c:d8:
9c:55:0e:71:3a:02:f9:e5:dd:34:cd:2f:b0:4c:83:67:9b:27:
30:30:44:14:95:23:89:9a:7a:80:dd:34:41:95:40:8b:e5:db:
7f:1a:fc:19:9f:48:f9:b8:a2:7e:c3:04:cf:57:4b:ba:58:2c:
d1:2a:1a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuCmw4BI5xplNFTQ0PugOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNWEwNTZjODI0Mjk3MWQxYTkwYjBiZmE5OGIxYjdhOTMw
NTI4ODQwHhcNMjUxMTExMDcwMTI1WhcNMjUxMTEyMDcwMTI1WjAzMTEwLwYDVQQD
EyhhZTcxYTM5YTNjMTdiM2Q5MTlmN2UwNGUxODZkZTc3MTUyYmFiYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW3A8jDn3P545bkLJmadZ0SokU3D
Owax6zPzBokY8wyxIB9+f0USva96zUb/+YjAPuYAm0r1h+ikb7VQ9vx6a1T5+oEH
HN1bZfT3RfdIxrqiyCHGtFylEpvq0HngSOVkidYtNiMqHhzX7qNXPgaeUigLzKXG
Gba4NpPHUwGeV8b2dRJ2LbymKkvhFpoyH7tjtbLweXhtnKgsPwQfZCwvwSESiU0g
biYv52GdPrR+6fxZri5xyzsCVu7IwIXzlLdfn+UGA97DCpeCe6O7tzeI1z5GdyXH
evk5nwn8+o0PFKccRavyDeqZcCvNPiAIaxHpeYVKTAxeoT9fOWQYaSz8jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5xo5o8F7PZGffgThht53FSurt/MB8GA1UdIwQY
MBaAFONaBWyCQpcdGpCwv6mLG3qTBSiEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84Y2QzYmEtOWQ3Mi00MzRmLThmODIt
YWFiNGJkOGZjZTlkLzEvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84Y2QzYmEtOWQ3Mi00MzRmLThmODItYWFiNGJkOGZjZTlk
LzEvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlq6YWCrj
8uAChiiAJM6Nz0QXav28gB4SHy5quN9uTBWZ8+4WVdG/zlg5aL1awEWPi6EQ0vDj
doXi6sjZQg9JGdqSuMIpsSga1Cj5KDeWTFP6Oi0hAPVPokPyR5p038MbnTofvX3n
2i6QeMezHLICtbg4843wVXZk0eAWTDQUMvzpx6dy5hRlyW8JiiDJbHqNbXksyBJf
cNROlYKVQPEGfbep/oBZG8AqPgES1PQgh4PTun/6n69qOcfRRh71Se6bNyXUQRzY
nFUOcToC+eXdNM0vsEyDZ5snMDBEFJUjiZp6gN00QZVAi+Xbfxr8GZ9I+biifsME
z1dLulgs0Soa5A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:33 2025 by rpki-client