Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: 6e7Ql1Nms0hW4jKugax7E9nZmWFqacq2l+gGpHQ/acI=
Subject key identifier: 5D:8B:D1:E9:0F:03:6E:73:8A:96:96:E1:03:36:5F:48:99:54:50:4B
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 019A4DE1EC5C6FD51CE4DC0E860B3CEA461C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 13CE
Signing time: Tue 04 Nov 2025 08:00:42 +0000
Manifest this update: Tue 04 Nov 2025 08:00:42 +0000
Manifest next update: Wed 05 Nov 2025 08:00:42 +0000
Files and hashes: 1: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: mkiTql46LpUJn2w1yCBb5gwEOiEvTsnUqLiBIKKETDM=)
2: Xi7lkR0c05Etap_dSBWpiwrEM4M.roa (hash: AVQnmWgZkK9yLrT3rnvMnMOzEJkOrW4pUBp2ldNlySk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ec:5c:6f:d5:1c:e4:dc:0e:86:0b:3c:ea:46:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Nov 4 08:00:42 2025 GMT
Not After : Nov 5 08:00:42 2025 GMT
Subject: CN=5d8bd1e90f036e738a9696e103365f489954504b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c5:2b:fe:91:8d:82:32:78:12:b4:67:4f:3c:
87:31:b4:5b:bc:4f:5d:bf:37:37:08:2c:8e:7d:70:
db:34:5e:a0:c8:57:cf:95:ee:d1:5e:f4:a0:b8:00:
28:1d:cb:1c:cf:b9:9c:96:ee:26:d9:de:2d:5f:c4:
a5:38:16:5e:92:7f:10:5f:f6:2e:57:0f:24:25:b5:
ec:f3:a2:d6:6a:43:27:5c:53:a4:cd:62:16:5e:a6:
ce:52:05:3a:9b:56:00:43:9f:5b:1d:b0:9e:73:ae:
1d:ee:1d:ec:ee:ca:6e:f9:cb:a4:29:ab:61:48:65:
c3:68:e1:88:9f:8c:48:95:44:2c:b5:de:e8:d5:35:
a8:b4:9f:f6:61:10:cd:d6:25:72:ec:64:86:d3:68:
5c:15:0e:29:e1:08:c3:1b:dd:19:2c:3a:21:9e:52:
72:96:52:6a:e8:d9:8f:3a:f1:86:d9:54:fe:ad:6c:
ab:b8:a3:17:ac:9d:50:bc:45:03:4e:05:1e:07:60:
5e:ed:f6:8f:34:1a:66:c2:52:3f:aa:6c:cb:6a:af:
99:3c:33:f8:77:41:ab:e1:72:bf:5b:ba:53:c2:81:
06:24:ef:b1:7f:09:49:59:84:d6:d3:57:60:1a:d2:
f1:21:89:f7:dc:60:d1:60:89:7e:0a:80:70:91:92:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8B:D1:E9:0F:03:6E:73:8A:96:96:E1:03:36:5F:48:99:54:50:4B
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3e:68:ec:af:6e:10:54:2b:de:d6:e5:dd:77:84:bc:81:08:
5d:b9:ca:63:b9:1b:3f:fd:79:56:26:55:16:1c:73:ad:65:f1:
ee:4a:e7:70:f8:0d:b8:1a:0a:22:9f:41:c2:f5:f5:af:59:45:
de:39:11:d0:8b:ab:a7:6b:e3:f6:b8:78:98:c6:1a:eb:f4:53:
49:eb:5e:56:cf:a1:c0:38:d1:d8:cc:8b:c7:e5:a3:9b:e6:a7:
59:65:e8:88:b5:fe:d9:ca:e8:09:96:ed:ec:fb:4e:4a:e4:df:
f5:c3:e8:e6:f3:bc:2b:2a:67:f1:be:20:94:17:8c:42:72:bb:
9f:23:de:78:48:b6:90:39:3e:78:0f:8e:b1:35:94:4a:47:4b:
8f:27:5e:cc:23:68:98:69:8c:fb:68:59:66:ae:af:41:ab:e3:
e6:51:25:07:63:05:b3:90:70:83:36:81:fc:66:6c:9b:cb:4c:
69:83:3a:f4:76:bd:11:fa:2f:55:59:ba:de:36:ed:65:00:94:
fd:ab:a7:d2:6b:c1:0d:8f:a8:28:c2:c8:b0:89:db:23:e1:80:
3c:46:9e:b1:b4:14:2d:8a:77:5e:ff:92:86:f5:ea:36:fd:3c:
fc:d8:3d:c9:f5:4a:15:dc:eb:70:a3:5f:e5:13:af:31:ba:c9:
0f:b0:e6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:20 2025 by rpki-client