Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
File: r633xfgtvAsdujKChi1T7Ih9XGY.mft (raw, json)
Hash identifier: 4D17MfElBZxJclZZuo81YGpxjGKHy+lXi74FcgXWHLw=
Subject key identifier: D5:05:10:40:13:00:3C:71:A1:85:9A:CA:54:A2:E9:D9:7B:4C:D7:4D
Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
Certificate issuer: /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Certificate serial: 019A4EF5B9FB1965376CCD705051729A59C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:01:57 +0000
Manifest this update: Tue 04 Nov 2025 13:01:57 +0000
Manifest next update: Wed 05 Nov 2025 13:01:57 +0000
Files and hashes: 1: G_uyP800qF9xq38CufvzcASfUJk.roa (hash: wXXcLrJ9H/mm6fOwDIgDVncWMj2oRMLhDL41bJPAtPA=)
2: r633xfgtvAsdujKChi1T7Ih9XGY.crl (hash: HmWBJ9/fuGXGMtalFQlwe+lQfu3b9hb47OYDo+zXiOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b9:fb:19:65:37:6c:cd:70:50:51:72:9a:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Validity
Not Before: Nov 4 13:01:57 2025 GMT
Not After : Nov 5 13:01:57 2025 GMT
Subject: CN=d505104013003c71a1859aca54a2e9d97b4cd74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:4a:04:e1:0c:57:a0:e1:b3:7f:94:05:c9:
25:81:17:3b:7d:6b:76:97:25:7b:af:e4:07:2f:60:
a1:04:49:e2:b8:b0:80:c3:4a:a2:1d:f6:c5:0d:52:
b4:0f:e5:27:5b:c4:cd:31:66:10:08:7a:59:0b:6a:
a0:0b:94:9e:69:d0:d4:ad:73:c9:99:1f:a4:38:56:
e3:a3:de:19:d4:40:a6:22:cf:a4:af:c8:0b:f5:af:
b2:18:02:4e:16:69:41:f7:29:90:70:7b:9f:98:e3:
af:0f:ac:b9:a2:ce:d5:9a:5a:91:54:2c:b5:5d:11:
4f:e4:48:f1:0d:1a:98:04:9c:4b:6b:74:e0:03:b8:
3f:27:07:2b:84:e0:50:16:e8:2b:db:4f:05:88:13:
47:38:b1:44:56:f7:ee:5c:07:c7:84:70:8a:27:ff:
58:3f:25:6e:46:6b:46:c6:4f:aa:55:12:c8:37:6d:
d8:9d:cf:79:f0:d0:19:5b:b5:cc:0d:36:15:30:83:
57:5f:3b:7f:4e:04:86:1a:03:87:47:ff:5d:9f:6a:
2b:f4:29:54:29:10:d5:7d:33:95:02:4b:29:48:0d:
21:93:2c:6c:5a:53:08:5a:3d:3a:23:e9:da:fa:0b:
6d:df:3c:73:1f:a3:d0:1d:33:b6:11:da:6d:ec:22:
1e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:05:10:40:13:00:3C:71:A1:85:9A:CA:54:A2:E9:D9:7B:4C:D7:4D
X509v3 Authority Key Identifier:
keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2d:6c:de:53:21:d3:d3:e6:d0:e8:1a:85:3c:ba:ad:9e:d3:
19:75:98:d7:b3:98:4c:97:90:d1:2c:3a:52:a7:71:9a:12:cc:
86:bf:2f:fe:50:f4:63:77:a3:4d:7b:5a:ca:80:e2:c7:7d:2d:
52:87:2a:cf:77:d5:71:b1:9f:99:8d:f2:eb:d8:57:04:40:24:
c6:77:36:0a:8e:a5:56:35:d1:03:ce:7f:ba:b0:ef:f8:5a:98:
9a:22:4c:24:1f:98:82:b1:da:5c:da:9a:3c:02:87:b5:37:a3:
d0:f6:82:ba:76:fc:12:19:fb:82:9c:6d:3b:7d:75:66:57:75:
90:ca:7f:f6:47:cb:d5:e9:b0:02:26:0c:a7:03:d3:24:25:13:
84:28:05:3b:2c:d9:f4:01:68:4d:4e:66:cb:df:11:99:64:84:
12:ee:ad:9a:b4:47:b4:74:e2:9c:9c:f6:ab:35:23:35:28:41:
e6:b3:ee:1e:f1:6b:7a:99:5e:3a:b8:6c:f5:08:11:73:7e:9c:
6d:0c:05:da:c7:ab:02:72:b9:16:ec:a2:aa:a5:aa:d2:82:f0:
95:01:a7:48:ef:72:6e:47:6a:93:d1:59:54:d3:28:cc:a0:4f:
48:ad:b0:d6:a6:f9:7e:78:9b:a1:37:f7:b1:89:12:a2:80:b6:
c3:78:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:57 2025 by rpki-client