Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
File: Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json)
Hash identifier: dDfv1qjLboUUSVsbmQmSgH9SZ/1eVhqPy97bYyHOfZE=
Subject key identifier: 33:F8:1B:09:6C:9C:A7:8F:D5:E0:55:24:4B:3C:BC:48:0B:BF:5C:97
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial: 019A4F9920BFED2EB6632E981D3A492CF34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
Manifest number: 14D4
Signing time: Tue 04 Nov 2025 16:00:26 +0000
Manifest this update: Tue 04 Nov 2025 16:00:26 +0000
Manifest next update: Wed 05 Nov 2025 16:00:26 +0000
Files and hashes: 1: AWRVDrJmsEsB9Z159jyFngqyGLE.roa (hash: DirE8id/agwWNhmtyshobBEdAnWhXbNRd3+Zdg4CPc0=)
2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: R6ZNaEvILqwCU5l+b6S0aP543GfTdot54Kqo28YpBgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:20:bf:ed:2e:b6:63:2e:98:1d:3a:49:2c:f3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Validity
Not Before: Nov 4 16:00:26 2025 GMT
Not After : Nov 5 16:00:26 2025 GMT
Subject: CN=33f81b096c9ca78fd5e055244b3cbc480bbf5c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:74:2a:ad:a0:0c:da:26:9c:3f:b2:cd:dc:
86:be:c5:67:95:27:84:39:ff:e2:ea:5b:95:30:de:
ef:d1:62:26:76:85:53:fb:2a:47:93:56:b8:42:7f:
05:5d:cf:9b:66:67:a4:81:02:7a:f3:ff:f5:41:66:
f1:40:ae:c1:fc:21:fb:9d:75:e7:5a:43:a1:82:b6:
35:1d:41:87:31:13:e8:31:82:79:f1:b7:2e:f1:a6:
7f:e9:7f:04:75:cb:9f:37:31:d5:69:ad:fb:2f:92:
32:36:87:0b:aa:3b:6c:8c:23:a4:96:70:fd:f2:91:
79:8d:a2:02:7c:df:d2:de:d4:55:b1:4c:69:75:e3:
3a:7a:c1:56:90:17:bb:65:03:d3:85:a4:98:78:86:
e2:63:a9:7b:88:90:5e:46:95:c4:03:b6:bc:81:29:
f0:ce:b8:28:3b:86:ed:09:7f:84:96:dc:67:38:b8:
e4:5f:b9:17:f6:30:d8:e4:4c:40:ff:ff:cc:86:59:
05:c7:ff:d2:4b:da:36:76:90:d0:38:ca:b7:98:42:
f2:73:9a:e1:30:96:e3:3b:db:c2:95:fc:b9:5d:cb:
fa:50:f5:76:77:3f:19:de:16:9c:2b:bf:da:d5:02:
cd:d7:69:bc:e2:b6:1f:28:b7:b3:f8:9e:0a:08:fd:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F8:1B:09:6C:9C:A7:8F:D5:E0:55:24:4B:3C:BC:48:0B:BF:5C:97
X509v3 Authority Key Identifier:
keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:29:8f:96:cc:cd:06:7e:ac:56:0d:ec:83:ca:f0:d2:ba:cb:
13:2b:11:e6:c5:6c:f6:49:e9:00:b1:dd:c4:88:bc:19:fc:51:
60:79:ae:5e:3d:34:d4:1e:4b:d9:a5:fe:35:dc:9c:28:bf:b6:
69:cb:4d:f3:e0:12:1b:fa:f2:e2:f7:f8:9e:74:53:cd:ef:57:
16:99:d7:9c:6e:5a:b7:ab:93:ec:53:52:a4:e7:f4:19:c9:b6:
a7:01:d7:c1:88:ea:7d:a8:d2:dc:3e:a3:08:4c:a1:cd:10:2b:
18:f2:2a:16:27:50:76:16:37:9b:fe:5d:7a:3f:be:e3:7f:bf:
22:c0:2d:e2:68:a2:02:5b:dc:6d:b9:3b:41:38:50:81:e2:43:
81:81:5e:6a:5c:93:c0:ef:88:88:84:cf:af:a0:ee:35:0b:be:
4e:73:03:a5:4d:91:0b:65:d2:bc:03:b8:60:60:6c:8e:6e:ec:
e1:38:ba:10:6a:9a:47:a5:d0:33:86:2a:ff:9e:fb:ba:09:b5:
43:9b:c5:3a:b5:d3:b6:de:b4:f6:05:d9:d6:86:dc:62:4b:b3:
b5:fc:c3:ac:d2:11:06:1b:7b:25:c4:98:48:4e:8e:31:8f:65:
df:94:22:90:46:8f:7a:28:e0:97:7d:87:1b:59:6d:07:1a:47:
b2:e6:9b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:08:22 2025 by rpki-client