Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: Id1puopnC+TB0N4cvWNKYiil8Cx4+6R1Gu6ZWpekFXk=
Subject key identifier: 73:B4:24:92:B5:77:2E:FD:A0:E6:1E:2B:1F:FB:1A:24:4F:D6:A5:7C
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 019A7293F5B57A01FE2749630062BBFB1FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 1576
Signing time: Tue 11 Nov 2025 11:01:30 +0000
Manifest this update: Tue 11 Nov 2025 11:01:30 +0000
Manifest next update: Wed 12 Nov 2025 11:01:30 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: QmQFu4C3xe9V3CT0CA7JdxTLnGKWvZmKMHKrUaK63uk=)
2: qHrO8lQhK3GafyUc6jw1PxQPaXs.roa (hash: tPnDIOggIIc+29booONquHAPxQns3cD0Gn6JnfE+V54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f5:b5:7a:01:fe:27:49:63:00:62:bb:fb:1f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Nov 11 11:01:30 2025 GMT
Not After : Nov 12 11:01:30 2025 GMT
Subject: CN=73b42492b5772efda0e61e2b1ffb1a244fd6a57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:cd:14:2e:b5:e7:4b:6e:83:bc:93:86:9e:
ac:5b:6b:fe:28:e2:b4:3c:a6:4f:64:74:76:df:10:
76:8c:fe:18:05:72:74:2b:03:d5:ae:dc:65:f9:4f:
57:76:f3:3b:88:4c:27:07:77:83:2c:39:df:25:3b:
7a:77:16:63:ba:bf:b2:e2:5d:d2:c0:3c:6c:bd:b1:
df:0d:4e:1f:69:2d:40:81:af:5b:2e:09:ce:f4:1e:
07:ac:1d:b1:be:e6:78:dd:92:7e:e5:87:25:f8:55:
f7:e9:2a:0c:ac:67:cc:56:be:b3:97:ae:65:ca:83:
fb:21:cd:a9:82:bd:c5:b4:42:78:75:b0:83:25:ff:
42:8d:dd:be:0f:80:dd:1f:45:70:55:c9:b2:82:95:
0e:49:1d:72:b2:a1:dc:b1:f3:91:e7:48:e7:0c:a8:
bc:c0:6d:de:e3:66:a3:9b:5f:05:cd:aa:8e:47:eb:
75:75:7c:f8:03:90:06:56:5a:bd:3d:1e:58:62:73:
56:58:97:3b:c4:c0:78:dd:53:10:cc:47:c8:44:4e:
91:a6:2c:60:02:a8:09:5b:59:81:47:5f:50:26:15:
3c:e8:2a:88:65:77:57:3e:cb:d0:2d:db:c4:f5:37:
05:67:89:d8:ae:08:db:9f:15:67:3f:27:02:45:b2:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B4:24:92:B5:77:2E:FD:A0:E6:1E:2B:1F:FB:1A:24:4F:D6:A5:7C
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c6:75:b4:2f:f4:f4:1d:c9:9a:27:75:91:10:2b:42:a5:8c:
44:b4:84:cd:ba:4c:40:48:97:d1:e2:22:76:d7:95:e8:99:d8:
f0:98:e7:e2:9c:f9:47:c7:fd:dc:7e:71:f1:d2:43:86:be:41:
2c:8a:64:8e:9c:7b:c9:c8:b5:00:c7:fc:0f:b0:cd:6e:20:41:
df:53:28:34:82:f1:95:de:90:77:36:b1:4d:96:dd:3d:18:24:
11:0a:1d:b7:2c:40:63:54:34:ac:f5:38:bb:7c:c6:e9:d8:e3:
86:49:ea:e7:ec:80:fb:bd:29:c1:e1:46:48:57:9b:05:a3:38:
5a:93:fb:77:82:16:27:2c:47:c1:31:49:75:12:41:de:b3:18:
da:bb:e6:b3:c1:dd:a4:35:e8:0b:fd:81:3d:bc:9d:5e:d9:33:
32:b8:d7:fb:22:5d:ea:63:0a:a6:c1:eb:3c:37:5f:a3:69:d1:
c8:62:9b:e8:d1:d3:d6:b9:5e:de:69:e0:41:3d:c6:92:e6:17:
93:17:6d:94:4e:98:5b:c4:70:bf:82:81:32:81:32:03:43:fa:
cd:cd:da:d3:0b:eb:27:94:49:b0:a3:1f:9c:13:18:2a:66:0c:
5c:31:09:f5:a7:54:af:04:f9:ae:23:74:b3:e3:7d:4b:05:bc:
5e:44:94:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:10 2025 by rpki-client