Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: r0BePK2lj5vk5UlmGNoboRlp9kEIstcv2kpYzEwL05w=
Subject key identifier: 3C:C6:78:F9:ED:F3:20:E0:69:A9:45:48:3B:29:69:E1:97:33:30:B7
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 019A4EF5992C98C1E3638E60F574E8CED6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0DDD
Signing time: Tue 04 Nov 2025 13:01:49 +0000
Manifest this update: Tue 04 Nov 2025 13:01:49 +0000
Manifest next update: Wed 05 Nov 2025 13:01:49 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: 3w0o6uO1to+sCKZD3iqT6wqvxVtOR+KBM+iMMaZRZ+I=)
2: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (hash: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=)
3: Xwst9NE_3divRmhP7hMoEPIJ7JI.roa (hash: mL30JNi0AE38khocNGadQDEvIJt5kPRBkClagiJzVtg=)
4: uhJiD75LxMes30E_4QTof6b_YKo.roa (hash: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:99:2c:98:c1:e3:63:8e:60:f5:74:e8:ce:d6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Nov 4 13:01:49 2025 GMT
Not After : Nov 5 13:01:49 2025 GMT
Subject: CN=3cc678f9edf320e069a945483b2969e1973330b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:3b:dc:7c:56:ed:31:4d:59:dd:05:0c:d5:
b2:90:28:81:a3:0a:88:c5:ae:0d:8a:98:94:65:ad:
7b:a6:2e:2f:f3:09:15:34:46:fb:28:af:08:5c:79:
4c:1f:4d:62:b1:e3:3b:1c:43:4a:07:b3:99:41:51:
09:99:b0:9f:3d:85:93:fc:70:f7:86:64:97:91:ed:
8d:59:8e:ff:3a:03:a7:54:35:fb:66:ce:25:f1:a2:
38:a7:48:77:db:65:fa:52:df:5a:ff:aa:e8:69:f8:
4a:14:4c:67:29:3e:3a:ae:1c:4e:4a:9b:24:34:b9:
0b:6c:57:22:0f:e0:ee:61:5e:19:3a:94:61:b0:01:
13:5e:59:4d:92:46:ad:ce:07:a1:d8:9b:5e:0d:fc:
7c:6b:18:eb:7f:f2:5a:cb:b1:56:9e:1f:da:aa:8f:
d7:87:69:a6:a7:63:19:9c:06:2d:f9:09:93:b7:02:
5e:e1:29:e6:c5:a9:03:c6:e7:97:86:bd:89:1a:47:
38:d8:2a:2e:fe:07:d4:f2:20:66:8e:0f:15:99:86:
cd:cc:9e:77:5b:f6:86:09:7a:11:48:6e:10:10:c7:
15:2d:08:8f:fd:04:05:d2:8c:bf:19:19:69:74:8b:
40:7c:fe:7e:ac:a2:28:5f:e4:87:89:af:78:59:84:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C6:78:F9:ED:F3:20:E0:69:A9:45:48:3B:29:69:E1:97:33:30:B7
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3f:46:8d:7d:23:5d:02:d1:e6:aa:c0:4f:79:d3:ad:30:07:
2b:8b:cb:68:4f:bc:d2:08:e6:70:4d:29:7d:3d:df:66:df:3a:
dd:73:2e:6f:9e:eb:66:22:d9:7e:61:42:b1:5a:a8:f5:1b:87:
b2:c0:f5:0e:18:6c:24:b7:36:83:44:33:be:18:d8:48:44:13:
42:5a:e8:5b:ad:b2:1b:81:88:f6:a9:d6:89:de:1a:9e:92:07:
0f:e0:52:d0:ee:49:e4:e8:8e:46:ad:ed:73:30:12:31:cc:d1:
16:67:b7:ee:fb:dd:e0:0d:f3:50:bd:b1:5f:d0:06:83:7e:03:
20:1a:7c:7d:e7:cf:b2:35:fc:27:37:05:31:6c:21:96:ad:60:
da:74:63:ee:16:51:37:04:ae:e3:4b:59:22:57:43:d5:7b:96:
75:17:ff:17:89:dd:28:c1:09:a3:7e:b1:3c:1e:22:08:ce:c5:
db:98:f0:16:b4:92:0e:0a:c1:96:7c:d6:81:fc:2b:83:7f:5e:
65:6b:58:02:be:cf:7e:68:95:00:25:70:90:71:c0:23:14:5c:
9d:63:8f:eb:3a:1f:61:e7:e8:71:ad:95:84:3a:28:a7:f5:fa:
fb:2d:a1:84:eb:24:98:18:71:bd:7c:ee:ee:3d:97:30:c9:11:
70:ab:85:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:49 2025 by rpki-client