Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
File: 333WWWZzfOj2XkDvL-oc_6-xYrA.mft (raw, json)
Hash identifier: zXKrPxXjOBqEsCbscnFYnesipo5qCjnUD7LBD8bHgXM=
Subject key identifier: D4:A9:DF:6B:2A:BA:4A:84:A5:6E:79:E3:A8:DE:6A:05:34:BB:08:1F
Authority key identifier: DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
Certificate issuer: /CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Certificate serial: 019A7112F42863D3A8E3E196B7AC5F6151CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:00:58 +0000
Manifest this update: Tue 11 Nov 2025 04:00:58 +0000
Manifest next update: Wed 12 Nov 2025 04:00:58 +0000
Files and hashes: 1: 333WWWZzfOj2XkDvL-oc_6-xYrA.crl (hash: 97owJjwwuSwJTSFoNaB3SKXHnI1VDB7dj7FrZwJwhE0=)
2: fFh6lhPeTU_ktyWJvgqVmWtOF3Q.roa (hash: AgVStdTBtz10UhWi+prRN62uYxyB6wfSYy9B3b+hAYM=)
3: jXyVzXU7-Oio9ulAptfw8swowyU.roa (hash: AvjnXmv2cjY8yuFcSYqvGQ/yeH6E1h4Re+Q85B75QSE=)
4: y0ys8oH_BAjKhZB73VQ8OdRVKQQ.roa (hash: EX1QPljWIilhaU7+2aQcyOJZqBoQmUdpiFzyhGZQrYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f4:28:63:d3:a8:e3:e1:96:b7:ac:5f:61:51:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Validity
Not Before: Nov 11 04:00:58 2025 GMT
Not After : Nov 12 04:00:58 2025 GMT
Subject: CN=d4a9df6b2aba4a84a56e79e3a8de6a0534bb081f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:e7:77:aa:c9:3e:98:48:3e:62:e7:9e:d3:
a3:cf:4e:7d:70:1b:32:4f:d6:a2:e8:9b:e4:b0:c3:
18:f9:92:02:ba:20:d6:32:11:18:0c:8e:fc:86:88:
d6:3f:98:d7:81:dd:e6:0a:10:66:34:c9:9b:c7:72:
ca:f1:b5:18:18:54:cf:0b:02:7c:b7:3b:8a:3a:73:
a4:3f:e1:8a:a8:6b:48:b7:7b:ac:a4:5a:76:e3:47:
52:e8:f6:d1:69:11:e2:59:40:21:92:99:b6:12:65:
b6:88:1b:3d:5f:cc:14:e5:ae:99:5d:04:4c:46:88:
23:5c:1d:1c:13:c7:2c:2e:ba:a7:cf:cc:92:3c:73:
1d:b2:21:16:13:4b:47:ed:61:56:46:0a:06:6f:74:
9b:f9:7c:eb:41:df:23:16:97:64:2c:a6:61:c7:56:
56:57:d4:da:c9:a1:17:51:b0:df:a8:07:dc:d9:37:
2f:bf:28:72:f7:70:60:79:99:30:d9:d6:94:80:e1:
91:f7:d0:d4:5e:aa:1e:0f:11:e9:09:a7:35:76:86:
0a:5a:7d:34:f6:70:0f:8f:ad:9c:aa:1d:20:42:72:
fc:9a:3e:b9:70:11:29:b8:a1:5e:bc:1f:f2:3e:74:
93:46:1f:57:a2:bb:69:07:04:38:6a:30:ae:5a:7d:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A9:DF:6B:2A:BA:4A:84:A5:6E:79:E3:A8:DE:6A:05:34:BB:08:1F
X509v3 Authority Key Identifier:
keyid:DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:58:7e:6d:cc:87:b3:b8:a5:b8:eb:0f:53:c2:49:50:a6:8c:
f0:2b:26:16:c0:8e:96:95:d5:3b:34:50:98:8b:bd:9e:0c:82:
91:5c:3c:05:ab:fc:e1:5c:4f:42:2a:f1:78:99:4b:d1:66:08:
66:35:1c:c3:5c:a4:16:f7:30:8e:97:cf:79:86:7d:13:ab:d9:
ae:e9:28:83:44:b7:7f:8a:88:08:ed:11:f2:95:47:fc:c1:32:
9f:6e:cd:18:c9:c2:1a:d2:7a:68:e4:1f:ef:4f:be:bf:76:c0:
89:9b:dd:05:7e:1c:a7:8b:cd:cf:af:f3:27:1d:c3:3a:74:14:
3f:75:12:97:ad:90:0b:0f:0b:77:3b:22:60:58:cd:14:36:d2:
b3:04:b1:48:64:e0:ab:cb:22:62:3d:7e:42:db:20:b9:77:e6:
13:fe:42:71:db:f5:b0:88:93:5c:24:7c:00:ee:ec:96:8b:45:
38:32:4c:eb:9c:31:db:e2:d2:ef:31:3e:e5:bf:86:de:d6:1f:
2b:33:0d:d0:10:75:36:ee:1c:c0:d7:e1:18:f1:b6:07:8c:79:
85:41:7e:99:b5:ee:1c:dc:27:3b:6d:68:e5:26:15:82:20:6d:
cf:6a:eb:a0:4b:2c:ad:56:bb:98:61:2b:51:9c:7c:81:86:0f:
2f:79:34:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:59 2025 by rpki-client