Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File: RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier: JhGYJlg18KmAA/FJHdQ9DZ1gcqpuarugXMMixtP8jko=
Subject key identifier: 22:85:B7:A2:D0:FE:6E:92:28:1F:71:99:6E:B2:69:21:26:B6:91:0E
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial: 0199FEB4971948BC0D847891BEF6E231A3B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 23:01:11 +0000
Manifest this update: Sun 19 Oct 2025 23:01:11 +0000
Manifest next update: Mon 20 Oct 2025 23:01:11 +0000
Files and hashes: 1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: Nneigtm/llbAjaYi7d6HYOAc0/Uz6p6+CnC83FTyPH0=)
2: ktIncahrfLa4AKcR1V4yol-a_BI.roa (hash: Mx4NBM7kiKGaNo0WSweTZJBXr6mw6+aPoRI2jYSEHVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:97:19:48:bc:0d:84:78:91:be:f6:e2:31:a3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Validity
Not Before: Oct 19 23:01:11 2025 GMT
Not After : Oct 20 23:01:11 2025 GMT
Subject: CN=2285b7a2d0fe6e92281f71996eb2692126b6910e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:af:87:9e:bb:65:1e:a0:82:13:26:5f:3f:
5f:0d:df:c9:aa:82:d4:b1:3d:8d:0a:ad:27:78:8c:
1e:cf:94:d4:26:d6:90:e8:15:5a:0c:a2:c0:ca:32:
e7:f3:3e:8f:b6:3a:3d:07:10:12:c3:aa:d2:1b:f1:
6d:89:30:39:f0:f5:a2:a0:a7:ee:9c:2d:03:d4:b5:
bc:e3:46:33:ec:8d:de:b9:0d:5b:5f:4c:89:72:16:
36:b9:2d:5f:75:1b:c2:b7:84:9e:c4:c9:79:63:e8:
55:8a:6f:e3:77:b2:e2:10:54:e0:e3:c2:66:34:ec:
4d:75:12:a8:89:3d:bb:18:c1:2f:e3:70:7b:c2:80:
f1:58:c2:78:50:e8:32:1f:56:e8:11:f1:f2:3c:3f:
1d:62:51:ad:de:25:21:bf:60:af:71:79:bb:f0:21:
ba:b3:36:c7:77:c5:e2:96:65:fc:9f:0f:9f:0c:13:
53:3d:b7:85:eb:d0:c6:1f:c1:7e:45:6a:c7:70:be:
60:cb:98:ad:01:2b:23:0b:1f:62:c4:b6:7b:2a:21:
12:c1:1e:31:48:fd:c8:fe:dd:55:3c:c4:51:d6:94:
a9:07:b4:45:16:97:fc:9a:7d:d0:a6:0e:0a:37:73:
75:32:a1:9e:b5:ea:17:08:fd:81:1f:94:bd:35:5f:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:85:B7:A2:D0:FE:6E:92:28:1F:71:99:6E:B2:69:21:26:B6:91:0E
X509v3 Authority Key Identifier:
keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f9:12:11:db:75:74:32:3f:69:ac:11:7f:df:30:4f:cb:df:
30:b5:5e:58:2d:0d:60:91:65:bc:3f:3a:f1:7c:bb:35:39:4c:
f3:68:a8:55:1d:ec:a8:56:97:0d:35:0f:9a:9f:55:a8:84:91:
7c:a6:c3:a0:2f:6b:79:dd:c4:6d:88:21:82:c2:81:9a:ff:66:
c9:ff:45:32:bd:a2:08:6d:59:d7:87:68:38:1d:a8:83:ee:31:
f1:fa:8d:9c:b4:87:d2:63:ff:32:be:c5:12:de:2d:cd:e7:e3:
52:58:56:9c:08:d3:c5:32:3b:8d:b5:84:de:5c:98:ea:d8:ce:
78:6b:db:b4:a8:cb:82:11:46:4e:e8:8f:11:3e:c8:3a:8f:78:
e9:ca:54:a4:18:11:6a:5b:5d:6a:ca:a4:a6:6c:93:f0:2b:d7:
66:56:23:71:fb:98:1f:9a:ad:c0:ed:bb:53:3c:2a:c9:15:74:
a4:0a:38:39:05:d5:d4:9c:9f:f5:ed:73:0b:cd:e9:15:07:15:
be:64:51:72:81:31:b2:36:4e:8a:ec:df:e2:69:75:8b:6f:37:
22:11:ed:4a:97:be:2d:4c:4e:f3:7b:06:ac:19:ea:f7:02:fc:
2b:1d:1e:c4:3c:b0:01:ce:19:f2:f9:b2:3f:6a:83:ac:7c:c3:
9e:25:2b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:48 2025 by rpki-client