Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: 0A8TLpTRApriFut97J1oCFKXAjF6hwX7avAaozHfblM=
Subject key identifier: F4:CE:8A:2E:5D:7A:00:F4:11:6E:BB:0B:DE:8E:D3:C5:F9:6A:8D:A6
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 0199FDD9B31FB7F2CC0188D66203AAFE3053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0DB3
Signing time: Sun 19 Oct 2025 19:02:06 +0000
Manifest this update: Sun 19 Oct 2025 19:02:06 +0000
Manifest next update: Mon 20 Oct 2025 19:02:06 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: 90FWcyvrwMmIAv5gZgEF7lnCxhseA6b/w3+KG3JJPhU=)
2: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (hash: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=)
3: Xwst9NE_3divRmhP7hMoEPIJ7JI.roa (hash: mL30JNi0AE38khocNGadQDEvIJt5kPRBkClagiJzVtg=)
4: uhJiD75LxMes30E_4QTof6b_YKo.roa (hash: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b3:1f:b7:f2:cc:01:88:d6:62:03:aa:fe:30:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Oct 19 19:02:06 2025 GMT
Not After : Oct 20 19:02:06 2025 GMT
Subject: CN=f4ce8a2e5d7a00f4116ebb0bde8ed3c5f96a8da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5c:e6:ba:7a:cb:56:53:30:25:d5:74:85:a0:
b4:ab:e2:f1:69:ae:fd:84:dd:4c:10:7f:7b:0b:58:
4f:17:81:8b:11:d6:ac:5e:8e:1b:4a:ec:ab:29:c1:
28:f7:25:36:d8:50:34:79:7a:40:5b:e8:ff:74:4e:
c4:c3:38:ce:d5:7f:a9:05:59:8a:5b:b0:bd:5e:98:
30:4e:55:1c:93:c8:1a:9e:22:a1:58:3e:3a:13:b9:
96:1b:31:a9:d1:ca:2c:93:87:f2:06:89:36:71:61:
3f:46:7d:28:39:56:ab:1a:d5:7b:14:95:68:45:ed:
fc:ab:43:90:ad:e0:29:f4:5c:8f:a4:56:ab:1c:e0:
b9:bf:b9:b7:fb:8e:b6:f4:6b:ce:94:a0:17:d5:64:
f3:d5:ec:ea:3c:51:0a:04:b9:de:b3:76:35:c5:c4:
27:9d:4f:96:bd:8a:bf:2b:2e:de:f6:3a:de:41:56:
11:32:65:77:1c:f0:0f:00:4b:e5:dc:11:06:d7:63:
4a:e1:0e:e0:b7:3f:ac:14:58:d6:bc:3f:94:98:75:
c0:d2:57:84:39:21:a7:ca:25:35:db:3e:50:a4:a0:
a7:f6:0f:46:58:56:6b:50:82:9a:4b:41:14:3e:4a:
ef:48:6a:2a:c9:e9:dd:5a:86:f3:be:7f:42:42:bd:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CE:8A:2E:5D:7A:00:F4:11:6E:BB:0B:DE:8E:D3:C5:F9:6A:8D:A6
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3f:5a:64:98:9a:0b:4d:94:dc:c7:60:dd:77:e1:3f:3f:58:
fd:3c:28:18:db:e5:b0:72:eb:c9:ed:f0:4a:c7:b2:3c:1a:bb:
06:3a:76:45:f1:c2:b5:0f:5b:0a:e2:9a:5a:62:18:e7:87:b2:
01:de:1a:9a:95:c3:61:0d:80:c7:41:89:3c:76:00:d7:f2:ac:
a5:47:70:52:56:fd:ee:e9:f9:d2:04:78:6a:64:d5:c7:e8:98:
da:4a:14:40:42:53:16:a6:00:27:69:b4:a7:aa:6d:e9:c6:74:
d6:a6:3f:b1:4f:88:c4:66:30:00:25:15:cc:84:38:0b:70:7f:
c0:50:35:44:2e:b7:b8:a2:bf:75:11:eb:68:c6:f9:91:6e:22:
f0:c6:20:d8:58:b7:95:d3:17:cb:64:8d:5e:b2:ea:00:2d:62:
f8:d3:16:76:b3:0f:ef:53:c6:8f:db:2b:e3:ee:92:ba:5c:71:
cf:25:f4:0c:0d:eb:f1:30:68:24:b5:5b:e5:80:be:60:87:e9:
54:7c:3a:be:41:ff:f0:cf:ae:5c:dc:b0:0a:40:da:24:72:5d:
82:07:eb:3c:5a:23:b6:2f:24:26:74:11:f0:4b:f8:15:43:ff:
e7:cc:27:bf:d1:ae:09:4b:b8:84:9b:ed:af:c4:a0:b0:22:8e:
25:76:e5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:55 2025 by rpki-client