Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File: RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier: COfYTnfeBF+DI+aoTCtvU7Glri68J5WOB1EHE95pAcM=
Subject key identifier: 44:F2:6D:18:48:FC:7B:03:96:DC:8E:CB:2C:60:7F:ED:50:BA:C7:A3
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial: 019A4FCFFF635F52273CD44010B11DD955A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 17:00:22 +0000
Manifest this update: Tue 04 Nov 2025 17:00:22 +0000
Manifest next update: Wed 05 Nov 2025 17:00:22 +0000
Files and hashes: 1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: VoQQJ0AlSngS5sQwx5LYSgBkN9xrPNjj82PXm9dGZPM=)
2: ktIncahrfLa4AKcR1V4yol-a_BI.roa (hash: Mx4NBM7kiKGaNo0WSweTZJBXr6mw6+aPoRI2jYSEHVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:ff:63:5f:52:27:3c:d4:40:10:b1:1d:d9:55:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Validity
Not Before: Nov 4 17:00:22 2025 GMT
Not After : Nov 5 17:00:22 2025 GMT
Subject: CN=44f26d1848fc7b0396dc8ecb2c607fed50bac7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:fb:28:31:a8:33:47:bf:19:7f:e8:63:bc:
45:8c:34:14:19:f4:c3:d7:69:8b:2f:d9:c1:79:bf:
5c:27:e1:76:0e:02:41:d4:04:c2:03:00:06:2c:d7:
11:61:ab:1f:4d:af:b7:f0:02:c6:b5:f7:6a:bd:c9:
ee:ca:78:17:c2:b4:63:41:ff:d2:e7:e8:d5:bc:e9:
2d:95:e9:a9:e3:b1:bf:9d:dc:54:8f:38:71:26:7a:
49:d0:b4:54:f2:2d:52:96:db:e4:7e:06:80:b1:1e:
d1:c6:97:b8:6d:bf:49:37:f8:06:3a:aa:0a:47:94:
ee:c3:e9:72:79:12:bd:6b:fa:09:55:c3:1a:42:0d:
84:05:4a:5c:4b:34:97:8c:84:cb:a7:64:82:45:0a:
ab:c8:1a:37:0e:e4:37:80:2a:7a:29:82:ee:fd:1c:
e2:bc:7c:36:1a:fd:50:9f:d0:df:eb:13:89:54:c3:
d2:8a:d9:3b:a4:19:07:27:a7:e9:ab:8a:01:d9:2a:
25:89:f8:54:72:51:73:c9:46:1d:3b:92:b3:60:a7:
51:08:80:d3:bb:91:0c:8b:d5:c1:d9:fe:97:29:ef:
b2:1f:6e:d0:65:de:5f:ad:d6:a7:c4:c0:83:4b:c9:
af:9b:7d:64:9c:50:f5:88:25:1c:7d:2b:b0:82:29:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F2:6D:18:48:FC:7B:03:96:DC:8E:CB:2C:60:7F:ED:50:BA:C7:A3
X509v3 Authority Key Identifier:
keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8d:5f:83:cb:9c:b8:89:94:bb:0f:3b:86:8b:51:79:41:7c:
93:ef:8b:4b:7a:e2:1d:fc:be:d0:96:5e:95:78:33:94:3c:09:
7d:80:5a:c5:6c:fb:8d:05:4f:23:1d:7a:a3:c8:a4:98:fb:2e:
c5:21:f6:e0:46:14:a6:24:9d:31:39:5d:9c:aa:b6:6d:72:1d:
06:93:a0:fa:8a:14:18:e6:ad:9a:cd:6e:db:18:79:b9:25:ce:
a4:08:35:17:04:f7:c4:e7:66:00:5a:32:78:6b:f4:46:60:b3:
0f:68:5e:e2:30:d6:b7:15:c6:87:56:87:5f:2c:64:73:90:07:
15:ac:8c:67:22:27:a6:da:4b:66:85:c3:52:24:d5:11:22:e8:
27:18:a1:b3:2e:a6:e6:9d:44:33:66:b2:a3:54:4c:e7:ef:58:
c5:cf:6f:65:ad:ea:d5:09:d3:85:dc:bc:d5:a7:9e:58:99:90:
dd:b0:4e:5e:4d:b6:d6:a4:61:e9:42:e6:89:1c:e0:6f:54:f3:
89:c9:09:15:19:86:9e:43:48:91:96:39:6a:cb:00:f6:ba:7f:
be:7e:b9:92:6f:d6:a3:e3:86:0f:61:7b:96:e0:99:01:af:ff:
7a:29:bb:59:2a:b5:86:c2:20:ad:0e:0c:2f:fe:c7:b4:1e:f2:
87:ab:42:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:56 2025 by rpki-client