Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: EAm/AflOtBu+m7O7CocUV6t2+BwoGl2778jX0/srQ7I=
Subject key identifier: CA:F9:FB:C7:1B:1A:18:F3:32:12:AA:E5:43:AF:CF:CA:AD:26:F1:94
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 019A4E86A8B175C6165984891DFAC1B7A93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 0472
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: oICEiCY+a6RY6zQP3FOhSiRirqD0CWKPXnrVt95Gl3I=)
2: mKygmLEaAcG12iJKla4NTxN16_k.roa (hash: irq+IO7nYrHgz8agqZ9EA1eioq3hHNo5B7OdnvrxylQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a8:b1:75:c6:16:59:84:89:1d:fa:c1:b7:a9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=caf9fbc71b1a18f33212aae543afcfcaad26f194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:60:c3:fc:8a:e1:a6:48:34:cd:a1:09:0a:
63:3f:29:a9:21:5e:72:05:e8:09:b6:0a:33:06:f6:
c8:cb:5d:2e:45:d6:3a:7d:61:06:3b:e6:11:c6:53:
5d:c1:03:b4:9c:1d:c4:14:8c:91:a3:da:9c:a5:87:
e1:50:5b:7b:0a:d9:19:31:72:f4:7b:16:43:4e:48:
e1:44:ed:03:a4:fc:80:82:88:60:fe:a3:e0:9a:db:
33:c8:09:74:cc:77:b0:27:4c:07:9c:16:ca:a5:27:
85:a5:67:81:cc:99:57:04:d9:55:2d:fc:64:63:d9:
4b:3f:26:d7:e1:b4:89:cd:52:b6:4b:ff:03:c3:8c:
6e:25:51:03:37:1d:d8:5b:29:9a:ed:bc:53:76:82:
ee:76:52:5a:07:a8:63:03:89:dd:cd:c8:3f:39:8d:
2f:41:c4:1f:39:70:e9:20:fa:a7:62:72:43:dc:3a:
9f:e4:e7:70:3a:27:c7:b5:c5:50:68:93:6e:22:15:
0b:7d:42:73:fe:c7:d4:43:9f:01:9d:65:5b:16:64:
55:5e:bd:9f:e7:8b:d3:c5:28:fa:b8:6d:36:90:ea:
e3:1b:26:f9:6a:e3:96:e5:98:71:7b:db:64:b0:d2:
9e:fd:e4:ce:a9:86:2f:8b:7c:e3:f6:3a:59:a7:5e:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F9:FB:C7:1B:1A:18:F3:32:12:AA:E5:43:AF:CF:CA:AD:26:F1:94
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:50:c3:5f:f5:dd:58:b7:bf:c6:eb:35:c0:72:9b:2f:ef:7c:
8a:7a:62:1c:0e:bd:4e:a5:6b:29:f9:29:ba:b1:2a:4d:fb:bb:
80:39:5f:86:72:3f:c0:3b:24:89:36:db:ff:df:9d:4b:02:b6:
8c:7e:e2:ee:fd:db:ad:a6:1d:52:90:0f:76:ff:e0:25:3a:8c:
af:ff:5e:f6:44:97:07:52:52:f3:72:df:50:ce:a4:89:00:52:
6b:c7:cd:18:20:ec:e7:71:08:ce:e2:58:69:bd:fa:d0:31:3b:
e6:0e:d3:6c:d4:b4:7c:b2:00:41:05:50:51:02:ed:f4:d6:35:
5f:e8:2a:24:19:94:01:bd:4a:ee:04:52:07:4f:e9:19:e0:65:
90:c4:a3:33:77:d1:ef:7c:3e:a9:1a:8b:42:8d:86:08:67:16:
c5:9f:06:fe:81:2d:86:4d:73:48:8f:1f:7d:2f:7a:3c:81:2d:
af:d5:98:00:a4:c1:b8:82:80:80:03:61:1d:44:52:be:47:9a:
7e:81:ae:74:87:a8:42:b0:1e:fb:ba:4d:9e:c5:6e:9d:52:98:
78:64:67:09:bb:d6:dc:be:bb:2d:a6:ad:27:ae:30:49:7d:10:
a5:19:cd:cc:06:30:87:03:06:1d:0a:65:30:a5:0b:c1:22:74:
23:51:40:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:01 2025 by rpki-client