Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: Wl6SZSrGLSap70J5VoBew3PVWeQn3sl92llGyoI1ZD8=
Subject key identifier: 67:74:E6:1E:7E:40:65:DC:45:53:47:99:60:8E:B5:DD:F2:42:9A:C9
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 0199FEB4E348056BF0D1F0B86BB334540A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 153A
Signing time: Sun 19 Oct 2025 23:01:31 +0000
Manifest this update: Sun 19 Oct 2025 23:01:31 +0000
Manifest next update: Mon 20 Oct 2025 23:01:31 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: 8FnWVOVeo70bssfBWjz+Zpy2UT0k/sh/AQgXsLT+Ei4=)
2: qHrO8lQhK3GafyUc6jw1PxQPaXs.roa (hash: tPnDIOggIIc+29booONquHAPxQns3cD0Gn6JnfE+V54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:e3:48:05:6b:f0:d1:f0:b8:6b:b3:34:54:0a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Oct 19 23:01:31 2025 GMT
Not After : Oct 20 23:01:31 2025 GMT
Subject: CN=6774e61e7e4065dc45534799608eb5ddf2429ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:15:06:a3:a0:b0:67:ee:a7:f5:2d:bc:73:
6b:dc:dc:7f:67:0a:d6:b2:28:f6:ea:c6:29:93:ff:
a0:4a:6a:6c:9f:38:4f:d8:f0:f8:cd:4b:fb:fa:f3:
28:8e:be:8b:83:2a:84:7a:7e:8d:76:78:8b:60:ae:
97:bb:1c:c3:44:24:2d:72:2c:f9:a4:be:f1:65:cf:
72:c2:05:40:d5:e8:10:44:2d:ee:b9:02:72:12:66:
2b:1e:8a:db:98:37:2f:95:8e:92:8c:6a:3a:ad:1f:
e0:b7:06:7a:a6:4d:8b:21:62:b4:06:fd:1a:94:44:
ee:77:9e:3e:49:cb:b8:24:bb:88:80:f9:21:cf:22:
20:5c:6c:ec:c6:38:41:47:0c:c7:d4:a2:10:ee:5b:
9c:22:88:36:a4:d1:90:0c:b9:71:b0:49:4f:3a:3e:
f4:24:d8:28:c5:cf:c6:1b:0b:cb:47:18:fb:8d:cb:
63:2b:a9:ce:5d:c8:3f:43:f6:bc:ce:cb:c2:4b:9f:
e1:01:e0:b4:d3:fb:03:43:5d:1f:c4:3f:3a:6f:30:
e4:5a:fb:a5:4d:45:c3:0c:97:e7:c9:fc:85:a9:39:
60:a8:cd:88:42:d4:46:68:b4:b4:67:bd:86:12:61:
93:ed:70:c9:af:80:65:d1:ba:40:81:8d:84:af:e4:
72:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:74:E6:1E:7E:40:65:DC:45:53:47:99:60:8E:B5:DD:F2:42:9A:C9
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:54:81:c6:a3:6d:66:d2:36:a7:60:b2:93:8a:d0:ef:06:09:
03:7d:36:00:92:f0:bb:b8:60:bc:53:6f:5a:02:52:46:b2:b7:
20:59:d3:49:f6:06:63:5d:79:9d:56:32:5a:e8:7e:b4:e2:9c:
9e:d1:1d:df:c4:2a:af:ae:e8:3b:ae:e4:92:9f:4d:3d:92:d8:
9e:86:f9:9f:e8:b7:46:34:d0:dc:eb:01:8d:ce:3b:d6:8e:c5:
05:2e:93:50:cf:3f:b4:1f:ad:45:84:f1:d7:83:a2:ef:1f:39:
fd:c7:f8:76:b1:f9:a4:1c:2b:a8:8c:33:d4:82:38:7d:36:08:
03:71:0e:cb:82:d9:78:c9:d6:b8:5f:38:80:c6:7d:01:ff:cb:
15:f2:95:74:40:84:a8:16:15:44:02:ba:9c:b2:f9:f8:e0:cd:
37:be:cd:c9:4b:fa:51:19:ba:70:49:96:e6:16:b1:bf:76:a0:
11:d8:a9:70:5c:55:49:49:71:81:d3:8e:6a:52:f8:20:8d:24:
f6:66:c8:87:48:73:fc:77:e6:88:d1:84:08:90:a6:64:f4:bb:
8f:4e:05:f7:ce:7c:6f:15:66:93:d7:ce:fe:46:94:02:b5:61:
ad:b1:f7:db:80:4f:25:84:da:1c:d1:85:84:20:08:cc:d5:06:
57:19:bd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:17 2025 by rpki-client