Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: yUVrw4ZPzNtPxq8qeACQEu4Xxavr1EwVNy7y8AGUauA=
Subject key identifier: 33:DE:42:EA:EC:9B:BF:15:68:75:16:B0:73:53:D1:4F:84:4A:30:D9
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 019A4EF4049C5346342E812B174B74504F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 141E
Signing time: Tue 04 Nov 2025 13:00:05 +0000
Manifest this update: Tue 04 Nov 2025 13:00:05 +0000
Manifest next update: Wed 05 Nov 2025 13:00:05 +0000
Files and hashes: 1: 26OroNSilLDsLnRmS90OawnRg8M.roa (hash: 2vZiL1ss373Q0TX+B8Q8SMDZKCr1m9fpyjjeqgVg0rI=)
2: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: dUxWhtv1RPXmMvdMm71wV2AqIk0i80+Bx4ombA4iPlk=)
3: yFq0JfOaNjdhRiNZMahKgBz5pBs.roa (hash: HLvs21UJM8ndMu/vC6YjvpshtGffGUPV1RHDv0ERCAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:04:9c:53:46:34:2e:81:2b:17:4b:74:50:4f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Nov 4 13:00:05 2025 GMT
Not After : Nov 5 13:00:05 2025 GMT
Subject: CN=33de42eaec9bbf15687516b07353d14f844a30d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c3:1f:c7:62:24:94:bf:19:62:7d:9e:5b:0a:
31:43:58:d2:5b:15:83:9d:df:4b:fa:6c:e5:28:5f:
0b:94:21:06:ae:d3:1b:3a:c1:7d:7d:8c:f9:d8:1f:
6e:21:29:f8:7e:24:45:f9:82:dd:e1:11:90:1a:c3:
98:f5:65:07:3e:e9:2b:b7:90:0d:c1:e9:69:52:1f:
1c:82:16:51:26:84:fa:ec:46:a5:60:b0:35:22:e8:
cd:82:14:77:69:40:4e:17:ed:07:f1:c5:78:8d:c2:
1d:52:5c:d2:47:f9:96:72:06:e4:f8:dc:13:04:46:
be:d5:da:7d:3d:64:6a:76:cb:1a:14:44:38:f8:4a:
fd:0b:8b:3e:34:dc:29:e8:1c:06:a3:3f:6e:cb:13:
a1:ae:1d:ee:00:c7:06:b8:47:2b:46:f5:c9:cf:0f:
d1:1e:53:54:d9:4e:0b:ed:24:05:2e:34:b7:43:49:
19:4b:f8:31:4f:68:98:ca:3a:48:e5:eb:8b:08:90:
fb:d1:08:c6:7d:84:7c:63:de:90:f9:0e:b0:fe:fb:
e3:af:ab:27:12:a2:f8:66:ac:12:26:02:b0:5d:7f:
19:3a:5e:0d:d3:d7:84:2b:cb:86:00:89:5f:c5:c2:
7c:4c:f8:7b:59:54:c1:10:49:8b:fd:8c:c4:04:8e:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DE:42:EA:EC:9B:BF:15:68:75:16:B0:73:53:D1:4F:84:4A:30:D9
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:40:f2:d5:7f:51:41:9a:fc:57:b9:a5:37:22:e2:dd:f6:76:
61:de:02:5d:a3:bb:d5:75:6e:12:00:1f:ed:5a:be:83:e3:57:
75:2e:5f:c5:76:f7:87:26:2f:cd:ff:ae:22:f3:62:9e:94:be:
fa:91:02:8d:aa:02:ed:f5:bb:13:cf:91:7e:b4:05:1e:7a:d7:
56:78:45:cf:4f:dc:5a:5f:96:14:cc:cc:91:51:bf:38:4e:e6:
b7:52:12:1f:f6:10:59:d1:bf:68:3a:3a:4e:10:93:ae:8c:fe:
00:1f:e2:df:75:08:c2:15:3c:9c:27:49:2e:2e:bc:36:5e:4e:
36:78:20:b1:8e:e0:51:4c:47:f7:f7:e0:9c:c4:a2:c0:d5:a3:
04:a9:6e:2b:12:cd:5c:2b:48:ec:a5:f6:97:a0:26:b1:3d:25:
32:17:ad:96:67:cb:29:fe:72:a7:fa:c7:b6:19:dc:0e:30:9c:
c3:cf:f9:ad:02:b9:ed:3b:21:b2:1d:5f:e2:87:ef:74:9c:2a:
fc:71:8d:bf:57:c0:5e:c4:eb:97:03:80:01:80:7a:61:ff:3f:
16:d2:31:36:9b:87:bc:9f:96:79:7c:e8:70:cb:5c:c7:41:4d:
2c:21:93:13:06:81:b0:57:15:44:cc:63:69:83:63:2b:df:89:
ef:a3:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:05 2025 by rpki-client