Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: 5+55F0GzZRk1+pRZTgFxjnPNCtDXyYB3jYKPvFOMkZs=
Subject key identifier: 8F:C5:BF:6A:83:40:30:1D:12:AE:74:75:39:27:46:44:CC:74:72:92
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 019A72934A09E4EE139EA4BF8B84341A1619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 13E1
Signing time: Tue 11 Nov 2025 11:00:46 +0000
Manifest this update: Tue 11 Nov 2025 11:00:46 +0000
Manifest next update: Wed 12 Nov 2025 11:00:46 +0000
Files and hashes: 1: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: CqeVp7CDStOw0hv3/VNJbE91PDm9UjmiVI/8ESpxEOM=)
2: Xi7lkR0c05Etap_dSBWpiwrEM4M.roa (hash: AVQnmWgZkK9yLrT3rnvMnMOzEJkOrW4pUBp2ldNlySk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4a:09:e4:ee:13:9e:a4:bf:8b:84:34:1a:16:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Nov 11 11:00:46 2025 GMT
Not After : Nov 12 11:00:46 2025 GMT
Subject: CN=8fc5bf6a8340301d12ae747539274644cc747292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:3b:79:24:1c:09:12:43:cc:5a:b0:11:22:
e3:a7:56:86:78:cd:65:6e:2e:a3:48:cd:4b:dd:a3:
2c:4f:0a:8c:92:37:53:50:36:70:40:c8:81:16:ec:
ac:6d:53:b6:f0:c7:18:68:57:32:4b:bc:d6:e9:b9:
21:91:f7:23:9e:90:8a:5f:39:d2:2f:ff:4c:d2:52:
62:6e:53:f7:3e:a1:86:c7:bb:0c:21:ea:b8:ff:e4:
f1:2e:07:f0:3c:24:7e:09:b9:39:23:5d:b6:97:86:
6d:d6:3d:38:a2:1e:0a:52:6c:c3:1d:f1:30:da:01:
2e:af:32:10:58:05:0e:38:88:b7:d7:59:09:4a:c4:
04:6a:99:9a:37:76:9a:ed:62:72:6d:61:5e:32:75:
ff:d6:34:04:f3:a1:e3:78:21:1a:75:48:4c:27:d4:
04:f5:84:6b:6b:da:5d:61:c5:9a:25:8f:15:50:18:
bf:0c:81:14:f1:cc:77:e3:39:f6:ba:4e:11:25:67:
27:ff:f2:26:08:ae:2f:4b:ea:00:2d:70:f4:84:c5:
f0:54:f0:b7:b3:40:05:fd:20:9c:dc:79:ad:45:24:
53:9e:a5:81:8d:40:d6:89:d6:bd:9d:ca:07:12:ea:
ca:18:74:65:06:c3:63:79:36:49:59:bb:55:72:98:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C5:BF:6A:83:40:30:1D:12:AE:74:75:39:27:46:44:CC:74:72:92
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d7:fa:3a:90:8c:4a:69:43:8e:69:94:ee:68:85:34:fa:f1:
95:cf:69:28:87:8b:0e:fa:f4:ae:2b:4e:42:49:59:e3:5f:50:
10:85:16:9c:e1:df:a8:74:42:79:62:3b:df:93:1c:7f:b7:0a:
1e:06:b4:8b:b5:63:e2:6a:26:dd:89:69:05:70:86:a5:1c:24:
c7:85:99:6a:85:ee:f9:9d:e3:4b:52:46:af:0e:06:81:6b:70:
14:46:ea:c0:8f:c7:77:c5:9b:d8:a3:58:51:92:ee:de:77:72:
58:11:91:ec:27:4d:ca:7a:52:a8:88:bd:bd:22:31:c2:0c:1b:
1c:18:71:64:63:bc:42:f7:f4:f5:83:65:32:f9:5b:55:69:37:
ca:7f:98:d7:82:f1:46:1a:24:98:5c:02:7d:60:85:9c:b5:28:
26:c0:6f:e3:40:fa:0b:91:53:bf:6f:93:93:84:f4:21:bd:f7:
bc:50:96:35:71:09:f6:3e:b9:66:07:35:98:d6:9d:03:80:5a:
54:f3:51:52:5f:df:63:78:23:aa:13:d4:c0:80:a8:6d:f2:79:
a9:53:e7:4a:f1:ee:89:58:74:67:ad:c4:ad:15:df:94:aa:13:
d1:76:1c:15:53:cd:9a:b4:1f:62:8d:bf:da:f4:b4:9e:9c:59:
0e:b4:e4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:17 2025 by rpki-client