Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: To/Hvp8o0HQxkYP/anpTgBfwNAwx9cMJ7mfG3O2lLaE=
Subject key identifier: C1:AF:B0:B1:C8:55:E2:DC:DD:D0:9A:B7:08:91:31:7A:E4:5A:28:91
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 0199FB7D02ECA1A371C71472777A0EFFF786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 0447
Signing time: Sun 19 Oct 2025 08:01:37 +0000
Manifest this update: Sun 19 Oct 2025 08:01:37 +0000
Manifest next update: Mon 20 Oct 2025 08:01:37 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: tq//ukGz1pyirgdXfiX9/xfBpHMPA/7k1F6iKHrWpEA=)
2: mKygmLEaAcG12iJKla4NTxN16_k.roa (hash: irq+IO7nYrHgz8agqZ9EA1eioq3hHNo5B7OdnvrxylQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:02:ec:a1:a3:71:c7:14:72:77:7a:0e:ff:f7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Oct 19 08:01:37 2025 GMT
Not After : Oct 20 08:01:37 2025 GMT
Subject: CN=c1afb0b1c855e2dcddd09ab70891317ae45a2891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:4e:fc:26:35:34:c1:4b:2e:31:4d:3d:48:
19:56:af:81:d3:33:38:ca:03:e0:64:e9:c7:10:30:
2c:f1:97:7f:7f:32:4d:12:97:1b:bc:80:52:74:d1:
13:41:ce:a3:ed:32:85:95:0d:30:2e:f2:68:9c:0d:
91:ff:e9:b9:15:e7:af:c2:70:28:e8:c9:a2:bd:02:
a8:08:b4:ee:79:b6:c4:55:ce:01:d3:fb:de:e0:7d:
66:a8:1a:5c:e4:eb:ff:14:8b:b0:4c:e6:f1:e7:1f:
07:00:80:f2:65:0e:74:b3:57:aa:e1:47:26:85:fc:
a6:3b:53:60:1a:a7:77:9b:9b:e1:77:21:37:cd:26:
de:bf:ff:c6:cf:16:d3:55:35:b3:1a:da:27:05:c9:
ee:e0:31:f3:18:cc:78:05:73:0e:02:28:92:b7:22:
08:0b:f2:70:f4:54:47:b8:d2:e7:cd:06:e6:8f:1e:
3f:90:59:fe:cf:c7:06:bf:3c:24:6b:df:d6:fa:d2:
c7:0b:eb:42:94:f2:9a:71:7b:e8:b4:80:d1:b3:57:
c3:ec:be:a8:4f:03:9b:c4:52:4e:e4:fc:3c:3e:bf:
1a:f0:d8:ea:96:a4:21:21:c8:e8:d5:27:c1:e5:92:
b4:a4:8a:98:df:a2:65:07:68:ce:7c:35:1a:2a:d2:
a9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:B0:B1:C8:55:E2:DC:DD:D0:9A:B7:08:91:31:7A:E4:5A:28:91
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:15:60:1d:03:b3:ec:99:f7:a5:d1:21:9a:96:20:ea:2c:73:
91:13:d1:ef:28:71:82:cc:c2:96:d6:28:56:b7:93:7f:9b:2f:
c1:c0:53:4c:4d:2f:34:47:8f:12:c9:69:a7:c1:72:bf:33:42:
41:7b:a1:ab:24:1c:cd:1d:ee:fb:15:f5:04:44:1a:50:70:f9:
57:79:c9:f0:ca:b5:8c:93:aa:8a:22:87:cd:a9:fe:f8:3f:5e:
2f:4b:6e:bd:94:0f:ea:be:b3:dc:27:3b:27:db:b8:ec:32:a2:
61:16:5b:89:9d:ed:4b:2b:7c:e7:87:5c:55:1a:3f:a4:5b:91:
88:29:87:f3:29:81:27:35:b6:ee:56:a6:75:7d:63:0b:bb:36:
36:06:ea:da:c7:87:a1:9c:f8:dd:1d:4d:cf:df:78:b0:93:82:
bf:b8:63:db:ff:f0:12:10:90:c7:27:4d:6e:3e:d2:f3:43:a6:
5f:54:03:3f:de:98:f5:7d:30:da:54:a8:1a:6f:dd:20:22:42:
b6:a2:18:9b:f3:0e:b2:a2:54:11:13:3f:b2:bf:5a:1c:b5:c7:
5e:d2:ee:52:4f:35:19:a8:e3:6e:e3:85:54:71:96:87:63:d1:
7f:c2:72:d6:8c:85:aa:f7:b6:21:91:02:fa:5b:cc:40:81:f7:
8c:fa:22:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fQLsoaNxxxRyd3oO//eGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmN2RkMzI3NzljMWE5YjI5N2UyOGNiMDM1ZmQ2NzlhYmIx
OTE2ZDEwHhcNMjUxMDE5MDgwMTM3WhcNMjUxMDIwMDgwMTM3WjAzMTEwLwYDVQQD
EyhjMWFmYjBiMWM4NTVlMmRjZGRkMDlhYjcwODkxMzE3YWU0NWEyODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qpO/CY1NMFLLjFNPUgZVq+B0zM4
ygPgZOnHEDAs8Zd/fzJNEpcbvIBSdNETQc6j7TKFlQ0wLvJonA2R/+m5FeevwnAo
6MmivQKoCLTuebbEVc4B0/ve4H1mqBpc5Ov/FIuwTObx5x8HAIDyZQ50s1eq4Ucm
hfymO1NgGqd3m5vhdyE3zSbev//GzxbTVTWzGtonBcnu4DHzGMx4BXMOAiiStyII
C/Jw9FRHuNLnzQbmjx4/kFn+z8cGvzwka9/W+tLHC+tClPKacXvotIDRs1fD7L6o
TwObxFJO5Pw8Pr8a8NjqlqQhIcjo1SfB5ZK0pIqY36JlB2jOfDUaKtKpXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGvsLHIVeLc3dCatwiRMXrkWiiRMB8GA1UdIwQY
MBaAFA990yd5wamyl+KMsDX9Z5q7GRbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUt
YWNmNjZmNzhiMmI3LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUtYWNmNjZmNzhiMmI3
LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBVgHQOz
7Jn3pdEhmpYg6ixzkRPR7yhxgszCltYoVreTf5svwcBTTE0vNEePEslpp8FyvzNC
QXuhqyQczR3u+xX1BEQaUHD5V3nJ8Mq1jJOqiiKHzan++D9eL0tuvZQP6r6z3Cc7
J9u47DKiYRZbiZ3tSyt854dcVRo/pFuRiCmH8ymBJzW27lamdX1jC7s2Ngbq2seH
oZz43R1Nz994sJOCv7hj2//wEhCQxydNbj7S80OmX1QDP96Y9X0w2lSoGm/dICJC
tqIYm/MOsqJUERM/sr9aHLXHXtLuUk81GajjbuOFVHGWh2PRf8Jy1oyFqve2IZEC
+lvMQIH3jPoiQQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:10 2025 by rpki-client