Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
File: debiEsY3QbhblXx8l_fFj1teEzU.mft (raw, json)
Hash identifier: T9QJroPdwtv5hSXQQOJkQOKY7dSvrhnQEJnY73ppCwU=
Subject key identifier: DE:6A:88:CB:75:42:93:6C:D2:17:F6:F6:AE:5C:03:E6:6B:D7:D4:CF
Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
Certificate issuer: /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Certificate serial: 019A533F4A52A96A362068D5D650302A7D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 09:00:47 +0000
Manifest this update: Wed 05 Nov 2025 09:00:47 +0000
Manifest next update: Thu 06 Nov 2025 09:00:47 +0000
Files and hashes: 1: bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa (hash: TT4ui96hPVB8JuhJPLD2IoWX5TtqeZQlOzkrZUeBR/0=)
2: debiEsY3QbhblXx8l_fFj1teEzU.crl (hash: iRE+ag8hSnw8t8yn4uykvyBosdcs93SB8Su2NHbp9/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:4a:52:a9:6a:36:20:68:d5:d6:50:30:2a:7d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Validity
Not Before: Nov 5 09:00:47 2025 GMT
Not After : Nov 6 09:00:47 2025 GMT
Subject: CN=de6a88cb7542936cd217f6f6ae5c03e66bd7d4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:90:c6:69:33:89:e5:2c:ae:b8:8e:fe:b8:b7:
40:13:5f:ab:7c:eb:46:06:12:73:3c:f3:c5:3c:7f:
e8:8b:61:ee:44:81:89:d8:81:f4:6f:53:fb:67:b4:
37:85:29:52:78:08:a8:e1:70:e0:66:7d:61:b5:d2:
06:18:c1:e1:b3:c8:aa:c8:89:44:d9:59:51:2e:e9:
51:7d:f5:fe:a4:7c:36:6c:ff:17:cd:8b:9a:4c:46:
5a:3d:0d:d2:b6:a6:7a:26:c2:43:b5:69:69:ac:f3:
f9:60:21:2d:87:3d:a0:13:52:9d:09:6c:01:db:20:
2b:1e:64:6c:b7:a8:4e:d3:ad:87:05:f1:28:35:9f:
87:f8:b7:b9:54:bc:e8:7f:b4:57:e1:06:03:10:a8:
0c:d6:7b:a0:d3:ef:df:f4:c2:72:3e:1b:ff:ab:b8:
2e:ec:c6:86:ef:dd:91:5e:a3:5d:fa:b9:00:e3:de:
28:f2:4f:5d:40:90:18:a1:e1:ed:cd:cf:0b:44:59:
36:23:92:b7:45:06:22:ce:01:70:14:a4:ce:05:3f:
f2:3a:6c:de:06:8b:a8:e3:93:95:16:75:43:55:96:
6e:69:71:5f:ad:ad:20:a6:5e:c5:29:d8:cb:42:02:
69:06:dd:06:df:06:a8:5f:fb:0f:82:0d:91:d2:25:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6A:88:CB:75:42:93:6C:D2:17:F6:F6:AE:5C:03:E6:6B:D7:D4:CF
X509v3 Authority Key Identifier:
keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:73:c3:ef:23:75:67:a4:47:21:52:8a:73:9a:11:21:ba:18:
bd:ab:ab:cf:dc:46:3e:9a:b6:ad:73:ab:88:03:12:9a:41:3a:
2a:59:2b:48:aa:b0:1d:59:f4:90:61:5a:8c:a5:ff:26:61:e4:
7c:e1:9d:0a:fe:fe:4c:9a:01:3d:70:90:70:6d:d3:aa:84:3d:
c0:af:a8:96:29:4e:de:06:b9:92:21:26:df:84:51:f9:36:88:
a3:38:9f:a6:d8:36:84:2f:96:d0:ab:fd:93:11:4d:5f:dc:6c:
79:83:c4:01:d4:e4:4e:3f:74:09:29:a2:50:26:30:07:9f:79:
6d:03:8d:16:e4:04:bf:3d:a9:a1:98:ae:ef:d4:4f:1b:13:f8:
0e:a1:8b:7b:4a:84:6e:2e:b2:9f:fd:26:57:84:6d:94:cc:31:
1f:0d:36:18:74:4d:6d:49:24:ad:9f:ce:4b:6d:f1:ac:cb:0d:
e6:2e:76:d1:d6:92:9e:23:ff:50:cf:ff:d3:69:e7:a9:01:d7:
47:7f:ee:8f:dd:f3:a9:5b:ef:c3:25:fd:97:67:69:5d:64:d1:
f5:dc:da:1c:e3:df:52:2f:71:4a:2a:a6:80:ea:29:24:1c:d5:
74:cb:d6:10:ab:3c:88:9a:89:88:b8:f7:21:b1:55:92:f6:ab:
68:d4:7b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:45:27 2025 by rpki-client