Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: teCCifgy4vSsjg55AXCmNiiFXAlzdKeVHPlNV1DLhgc=
Subject key identifier: AB:8D:F4:08:9F:C6:61:97:0E:B0:D8:47:DF:61:05:BF:15:CE:30:03
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 019A4DE1E829A2F226A87D778D9A5D930A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 1563
Signing time: Tue 04 Nov 2025 08:00:41 +0000
Manifest this update: Tue 04 Nov 2025 08:00:41 +0000
Manifest next update: Wed 05 Nov 2025 08:00:41 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: nvfPBLEOdCcDboiOg+gK/1KHYWZ4f4xixr6uz2xPK94=)
2: qHrO8lQhK3GafyUc6jw1PxQPaXs.roa (hash: tPnDIOggIIc+29booONquHAPxQns3cD0Gn6JnfE+V54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e8:29:a2:f2:26:a8:7d:77:8d:9a:5d:93:0a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Nov 4 08:00:41 2025 GMT
Not After : Nov 5 08:00:41 2025 GMT
Subject: CN=ab8df4089fc661970eb0d847df6105bf15ce3003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:98:94:c2:20:3c:64:5d:f8:80:6b:b0:e2:
cf:86:d9:ab:56:d2:74:7c:43:36:30:6e:84:6e:bd:
fd:31:90:62:b4:6b:35:73:fd:f0:7e:2f:3e:00:a0:
28:ec:4a:a2:7a:27:8d:b5:cf:3f:84:3e:81:d4:d3:
16:2f:2f:2b:4d:be:bb:bc:07:b1:7a:65:93:db:c4:
59:0a:76:51:42:79:da:e4:f2:9d:d8:8b:41:b2:2e:
31:ab:f6:f7:10:3d:16:fd:e7:e5:08:5f:72:b5:2c:
5f:75:9f:b3:c5:e3:75:22:3e:53:11:46:bf:2e:e2:
c0:58:ff:e9:1f:61:93:aa:de:96:b6:a1:5c:72:8d:
86:fc:b6:7c:ee:b9:12:3d:02:37:15:28:58:00:7d:
e7:0f:72:31:81:c8:52:6d:72:89:6a:ac:15:15:ba:
9a:95:6b:4d:c6:37:22:2e:77:05:a5:fb:e3:5f:77:
4f:fe:42:5e:17:3e:06:bf:c2:a1:58:6d:16:44:b4:
f3:35:72:c2:55:3c:c1:06:c6:60:e7:fc:e5:f7:6a:
78:0f:6d:e7:39:02:6d:68:56:d9:35:b9:48:a4:fc:
aa:c4:95:bc:59:19:63:23:e6:54:80:4e:fe:30:75:
69:c5:bf:cd:f9:4e:5a:73:31:f8:af:6e:4f:24:be:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8D:F4:08:9F:C6:61:97:0E:B0:D8:47:DF:61:05:BF:15:CE:30:03
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:31:f9:30:3a:81:66:2c:ac:63:ef:df:a3:0d:60:c7:29:89:
9c:86:48:6d:59:f7:07:71:23:f1:b5:ae:f2:43:cd:fe:1f:dd:
a5:37:55:28:e4:3a:b7:50:3c:f2:8d:0a:d5:ee:80:67:7e:e6:
42:49:1d:95:d4:92:05:50:61:c2:a6:d6:1d:5e:fa:a7:65:da:
8d:c0:a4:05:4b:da:6c:9d:15:46:9e:7d:53:3c:69:05:da:45:
f9:55:51:40:dc:4f:21:87:78:be:fc:9a:e5:b4:0e:3b:a1:5b:
cf:03:25:ee:5e:39:df:ec:8f:ab:55:14:b2:4f:b2:54:b9:39:
24:36:12:fb:99:af:0e:13:af:81:c0:68:92:4c:db:eb:7c:22:
65:3f:37:de:02:e3:12:a4:a3:40:c0:53:57:71:d4:c2:f4:22:
ad:3d:2d:23:bb:b3:1c:0a:ed:94:c6:6b:49:ca:4d:c8:70:d3:
14:4c:11:4e:c7:c6:b4:9f:69:ac:26:eb:74:95:56:aa:80:02:
e7:98:fd:bc:56:af:45:a9:54:47:ef:c2:31:b2:be:63:4f:48:
08:81:4d:f1:12:71:41:a8:2e:76:03:d6:88:1c:51:88:53:13:
7e:25:13:fb:a2:51:d2:95:66:cb:50:7d:79:b4:6a:0f:ba:95:
bb:a8:d8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:18 2025 by rpki-client