Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: 4jyV7gpaWduC5jzLqkWGodPMeqJks3NWN+BdJtxytrQ=
Subject key identifier: 5D:F2:3A:67:C7:96:B7:B5:5C:60:46:D0:97:5C:BB:96:D1:FA:0A:F8
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 0198D474412BDC8B3C450645692151AEAD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 03AD
Signing time: Sat 23 Aug 2025 01:04:05 +0000
Manifest this update: Sat 23 Aug 2025 01:04:05 +0000
Manifest next update: Sun 24 Aug 2025 01:04:05 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: 0W1G9AIT6cE4LcnmymrwadZCRQQ8rQwAmRUB57s8qw4=)
2: S_7zCzKI7ogFykDCB9smaQVWqXk.roa (hash: mF9Q6AT4rOdp1L23mn4M/sQI8pPZFfLdxAWMPoSdESs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:41:2b:dc:8b:3c:45:06:45:69:21:51:ae:ad:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Aug 23 01:04:05 2025 GMT
Not After : Aug 24 01:04:05 2025 GMT
Subject: CN=5df23a67c796b7b55c6046d0975cbb96d1fa0af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:2e:1d:82:07:d8:ef:82:37:7d:6e:e8:b7:
bb:ae:54:8d:1b:f1:03:20:13:e9:4e:60:91:73:d3:
89:e8:52:6d:ad:6c:5e:93:16:a1:fa:cf:27:d5:a3:
f0:e0:ed:b9:19:33:c2:90:21:f5:75:d9:12:f6:46:
96:20:aa:c0:d5:b7:a4:d2:5d:d7:fe:1f:88:c6:c2:
9b:65:2f:fd:9b:04:29:fb:c7:48:b1:35:13:cb:65:
a3:c5:da:7d:a8:4f:56:e6:0b:6a:69:db:9c:a1:62:
06:6b:12:82:fa:87:08:d1:a4:40:0e:3f:47:00:05:
37:9b:79:ba:05:37:60:d3:9b:ea:02:0b:f8:cb:58:
45:aa:64:48:e9:a0:72:14:6c:83:7c:c0:fc:b5:20:
b6:6d:2f:9b:83:0b:1b:d7:ac:02:8b:2c:dc:f7:16:
0c:95:23:c4:ad:4c:8e:4d:ae:88:27:62:26:95:65:
3a:64:e9:32:52:8a:e2:82:84:2f:36:46:da:f6:f8:
9b:da:c4:d6:13:54:09:e8:46:a1:d3:fb:2b:e2:41:
73:56:aa:9c:c4:44:2f:60:9f:2b:3c:f3:22:87:ef:
5c:ce:5a:c4:bb:38:0d:f2:19:86:e1:f4:4a:ec:c5:
84:7b:0c:20:bc:9a:2c:13:c9:9d:c8:c9:03:38:f1:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F2:3A:67:C7:96:B7:B5:5C:60:46:D0:97:5C:BB:96:D1:FA:0A:F8
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:13:3f:9f:7d:71:d9:bf:91:f5:9a:4d:64:f8:34:fc:16:0d:
47:ce:5e:29:18:98:ce:cb:76:a2:e0:3e:90:89:cb:d8:ff:ff:
25:5a:ee:d3:70:51:70:85:35:9b:ae:71:39:e6:9a:96:68:7f:
d3:cd:01:70:2f:22:12:8b:7b:d2:17:33:45:43:f9:d7:e7:76:
5e:50:69:61:94:b3:2f:25:46:45:10:94:28:86:52:4c:1e:34:
52:bf:4b:c5:32:d5:ac:8e:d5:26:16:a4:63:5d:45:ee:d6:7d:
5e:77:b5:05:44:03:7f:0b:26:86:86:4f:d7:31:e5:6b:76:bc:
b8:0b:4d:42:7b:bb:37:4e:27:b2:19:95:f0:fb:54:88:fe:25:
eb:dd:0c:9d:a7:3c:a9:db:d7:1f:14:e2:7b:1c:80:9c:bd:c3:
c5:14:e5:03:06:8d:cd:0a:9d:6a:ad:5e:da:4a:a2:cc:cd:35:
47:1c:32:ec:59:b3:33:86:82:eb:77:ca:6e:4c:83:e0:e7:0c:
6c:28:f2:0b:f4:e4:ee:f7:83:5c:89:51:40:ad:40:78:52:79:
43:9e:91:80:8e:4f:45:92:32:b5:5b:9f:d3:69:0c:33:5b:7d:
6b:4b:a5:6a:61:68:8f:10:ad:db:a4:63:d1:6f:06:dc:7c:d6:
55:0e:98:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdEEr3Is8RQZFaSFRrq1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmN2RkMzI3NzljMWE5YjI5N2UyOGNiMDM1ZmQ2NzlhYmIx
OTE2ZDEwHhcNMjUwODIzMDEwNDA1WhcNMjUwODI0MDEwNDA1WjAzMTEwLwYDVQQD
Eyg1ZGYyM2E2N2M3OTZiN2I1NWM2MDQ2ZDA5NzVjYmI5NmQxZmEwYWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOwuHYIH2O+CN31u6Le7rlSNG/ED
IBPpTmCRc9OJ6FJtrWxekxah+s8n1aPw4O25GTPCkCH1ddkS9kaWIKrA1bek0l3X
/h+IxsKbZS/9mwQp+8dIsTUTy2Wjxdp9qE9W5gtqaducoWIGaxKC+ocI0aRADj9H
AAU3m3m6BTdg05vqAgv4y1hFqmRI6aByFGyDfMD8tSC2bS+bgwsb16wCiyzc9xYM
lSPErUyOTa6IJ2ImlWU6ZOkyUorigoQvNkba9vib2sTWE1QJ6Eah0/sr4kFzVqqc
xEQvYJ8rPPMih+9czlrEuzgN8hmG4fRK7MWEewwgvJosE8mdyMkDOPFyZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3yOmfHlre1XGBG0Jdcu5bR+gr4MB8GA1UdIwQY
MBaAFA990yd5wamyl+KMsDX9Z5q7GRbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUt
YWNmNjZmNzhiMmI3LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUtYWNmNjZmNzhiMmI3
LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBM/n31x
2b+R9ZpNZPg0/BYNR85eKRiYzst2ouA+kInL2P//JVru03BRcIU1m65xOeaalmh/
080BcC8iEot70hczRUP51+d2XlBpYZSzLyVGRRCUKIZSTB40Ur9LxTLVrI7VJhak
Y11F7tZ9Xne1BUQDfwsmhoZP1zHla3a8uAtNQnu7N04nshmV8PtUiP4l690Mnac8
qdvXHxTiexyAnL3DxRTlAwaNzQqdaq1e2kqizM01Rxwy7FmzM4aC63fKbkyD4OcM
bCjyC/Tk7veDXIlRQK1AeFJ5Q56RgI5PRZIytVuf02kMM1t9a0ulamFojxCt26Rj
0W8G3HzWVQ6YSQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:57 2025 by rpki-client