Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
File: debiEsY3QbhblXx8l_fFj1teEzU.mft (raw, json)
Hash identifier: daNMQBYg+tIsDV6z5jZw7NCnz8MpidRBBormKXYG5n4=
Subject key identifier: 30:2D:56:24:B7:B6:0F:4D:15:B9:00:28:77:57:35:56:26:83:2B:AE
Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
Certificate issuer: /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Certificate serial: 019A72264DD61600DDF6A69A67A9420905A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa (hash: TT4ui96hPVB8JuhJPLD2IoWX5TtqeZQlOzkrZUeBR/0=)
2: debiEsY3QbhblXx8l_fFj1teEzU.crl (hash: cLT+wR8CmNQC4W/DiBpfuMIsFcG7Sm9dBo03pBYD2YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4d:d6:16:00:dd:f6:a6:9a:67:a9:42:09:05:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=302d5624b7b60f4d15b900287757355626832bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:ea:1f:f0:8f:63:29:c2:a5:c1:75:79:f6:
15:d1:4a:0d:75:52:34:7a:7b:70:a2:05:14:a1:c9:
30:6d:8c:39:66:40:57:69:af:89:39:88:e1:19:2e:
6c:da:e4:b8:e5:70:45:9d:cc:a0:34:e1:a6:2c:85:
d2:16:a3:95:6c:34:5d:7f:f2:15:f1:d9:38:4f:4c:
8f:f6:2d:01:88:d8:97:e1:b9:59:e2:f2:4f:df:b1:
9f:1f:49:41:4f:41:41:0b:96:b3:60:e9:fa:1e:3c:
96:9a:8f:d9:b0:52:48:c1:a4:de:38:86:a2:50:d2:
48:3e:b2:45:92:f7:b7:a1:15:72:31:42:80:26:6b:
c6:9c:94:fc:1f:b0:9f:f5:8d:71:c5:de:e9:e9:0b:
09:d8:92:11:d8:9c:be:66:6e:1d:05:36:87:33:0b:
f6:87:9e:68:8e:01:1c:52:08:ff:c1:c0:30:82:4a:
93:07:ff:f8:51:27:aa:6e:0a:59:d9:0f:d7:fa:3f:
31:e4:f3:6f:f6:dc:49:60:c3:80:c4:04:bb:07:0e:
00:05:25:dd:cc:35:08:19:5f:2c:f4:a7:aa:98:57:
5d:95:fd:fc:8d:33:b0:f1:b9:8a:37:fd:0f:83:55:
b1:49:20:bd:c0:a4:0e:9c:fc:db:d7:46:d2:c2:9d:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2D:56:24:B7:B6:0F:4D:15:B9:00:28:77:57:35:56:26:83:2B:AE
X509v3 Authority Key Identifier:
keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:91:c1:b2:e7:07:3f:18:10:25:88:61:20:c4:a3:ab:1e:47:
37:6d:b6:52:d3:10:89:de:e5:90:ad:43:d6:52:93:ed:a2:b3:
31:4b:f0:d5:60:97:45:c3:c3:67:17:18:7d:3e:d6:62:bf:36:
42:2e:02:88:54:49:6b:19:0e:1d:6c:60:70:4b:c0:8e:b1:eb:
c3:f5:ef:72:9a:9b:9e:b4:9b:7e:97:73:7c:ad:83:a7:1d:c9:
90:62:06:6e:86:30:9c:83:f8:50:8f:85:a7:0a:8c:be:dc:e4:
db:8a:aa:2e:09:d2:64:fb:1b:23:c3:eb:33:40:df:c8:b9:d7:
0d:30:62:fc:3d:4d:f7:4d:8a:93:32:65:5d:31:88:86:9a:f9:
47:10:d5:e2:c1:3c:96:a7:ee:c7:b7:3b:7b:90:f0:fd:7b:a4:
b9:dd:00:cb:56:59:fe:7f:41:16:7c:72:15:df:f8:bc:bb:28:
95:cf:ad:8d:ed:c5:0b:af:71:76:40:bf:c8:63:c9:13:b3:8b:
9c:72:bb:c2:48:fe:d9:8a:89:60:be:9c:c2:8a:6c:5f:af:8f:
07:23:6e:40:d5:16:22:0d:40:07:09:5b:fb:ee:b0:78:f7:20:
db:ba:30:11:41:d9:16:eb:0c:fe:1c:e3:b9:a7:5f:7d:d6:ae:
28:94:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:38 2025 by rpki-client