Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: sMLhZyTZfmJ0OaDUAwKANSWzyvzJDNmkFWqBO/eIcOI=
Subject key identifier: EC:61:2D:46:44:46:43:16:62:18:43:A5:AC:1A:49:B1:60:B1:DD:ED
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 019A1496BAEE3320FC50DF6B4B40CC6D8BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 0454
Signing time: Fri 24 Oct 2025 05:00:13 +0000
Manifest this update: Fri 24 Oct 2025 05:00:13 +0000
Manifest next update: Sat 25 Oct 2025 05:00:13 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: eZbf+Fkp60c94azRA9yai2Xkw3pJ9adNw3nt/yTL2/M=)
2: mKygmLEaAcG12iJKla4NTxN16_k.roa (hash: irq+IO7nYrHgz8agqZ9EA1eioq3hHNo5B7OdnvrxylQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:96:ba:ee:33:20:fc:50:df:6b:4b:40:cc:6d:8b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Oct 24 05:00:13 2025 GMT
Not After : Oct 25 05:00:13 2025 GMT
Subject: CN=ec612d4644464316621843a5ac1a49b160b1dded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:87:3a:7c:c0:67:fc:f5:84:ae:72:2d:c9:
10:d0:28:f4:ed:12:fd:63:f0:b7:e1:85:0d:1c:43:
49:a9:73:26:71:25:9a:a1:26:73:5e:57:3e:95:fa:
c0:57:88:ef:9a:a1:2d:c6:21:bc:c9:ce:48:84:67:
f3:9c:73:a4:db:fa:2c:12:3b:d3:45:5a:cf:a4:2d:
91:ec:18:82:8f:66:9c:c3:29:82:6b:5f:35:37:b9:
b0:cb:34:bd:2a:95:d6:45:a7:e5:ea:e1:fc:34:25:
05:e5:78:dc:f8:ab:fd:5b:f1:77:95:ff:4e:3b:ae:
de:c0:fb:db:d5:93:48:42:a3:61:23:a6:d3:d4:cc:
50:62:8c:2e:fc:2b:b9:96:bd:3a:5d:c8:e5:aa:0e:
c9:08:6f:f9:0b:09:09:46:a6:8a:9d:ef:5b:2a:e8:
e9:24:08:ff:cd:f5:75:54:a3:a3:22:19:42:4d:01:
de:98:22:d9:11:b7:77:57:86:92:b7:9f:8e:8c:83:
35:72:b6:4d:db:27:83:d1:b0:6b:0a:42:71:9e:8d:
1a:2e:d3:33:a6:68:e8:fd:a3:c5:bd:30:53:54:fb:
dd:46:0a:71:83:3f:03:48:ef:1e:d6:d1:c1:de:94:
84:75:62:6a:cc:ff:b1:ff:ae:13:8f:8c:a3:71:10:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:61:2D:46:44:46:43:16:62:18:43:A5:AC:1A:49:B1:60:B1:DD:ED
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:44:7b:23:21:da:c2:ea:78:68:82:a5:80:ba:d1:a7:08:2d:
0d:f8:ee:2d:38:73:2b:92:82:ab:6f:95:fa:ab:b8:62:68:44:
36:ae:67:76:f4:00:54:77:9c:15:bc:bf:b9:0a:9b:04:06:58:
a2:6b:84:36:65:f9:bd:55:2a:58:97:46:46:d5:b8:12:bb:5f:
e6:f0:69:df:af:33:5b:78:d9:55:64:ec:c9:8d:d4:dc:02:d9:
9e:47:78:3b:f7:00:d9:e5:31:0b:5b:af:e0:09:f2:c3:55:1e:
1c:21:29:00:cc:6f:a6:60:ab:6b:24:22:54:38:37:a3:7a:7b:
73:5b:0c:da:11:bc:a2:f8:59:e2:90:3e:e6:bd:e0:f6:c5:68:
cb:1d:cb:5e:50:09:30:74:58:0e:93:23:87:f0:ef:d9:0a:b2:
21:a8:d1:a9:ee:15:95:a2:2d:5d:1c:cc:d6:f8:8c:4a:e8:18:
a9:e0:96:f1:c2:54:e5:f5:24:7d:a6:ed:1c:ca:77:76:ea:95:
df:fd:c0:dc:e1:17:63:22:af:22:20:1b:c9:d2:40:7a:94:d8:
75:4f:82:15:57:0d:e2:15:29:22:ad:4d:58:f6:2e:52:9d:f5:
a1:75:b5:0d:5d:8a:2b:0b:3e:2d:73:cc:c2:11:c4:9c:60:bd:
13:65:81:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoUlrruMyD8UN9rS0DMbYvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmN2RkMzI3NzljMWE5YjI5N2UyOGNiMDM1ZmQ2NzlhYmIx
OTE2ZDEwHhcNMjUxMDI0MDUwMDEzWhcNMjUxMDI1MDUwMDEzWjAzMTEwLwYDVQQD
EyhlYzYxMmQ0NjQ0NDY0MzE2NjIxODQzYTVhYzFhNDliMTYwYjFkZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocuHOnzAZ/z1hK5yLckQ0Cj07RL9
Y/C34YUNHENJqXMmcSWaoSZzXlc+lfrAV4jvmqEtxiG8yc5IhGfznHOk2/osEjvT
RVrPpC2R7BiCj2acwymCa181N7mwyzS9KpXWRafl6uH8NCUF5Xjc+Kv9W/F3lf9O
O67ewPvb1ZNIQqNhI6bT1MxQYowu/Cu5lr06Xcjlqg7JCG/5CwkJRqaKne9bKujp
JAj/zfV1VKOjIhlCTQHemCLZEbd3V4aSt5+OjIM1crZN2yeD0bBrCkJxno0aLtMz
pmjo/aPFvTBTVPvdRgpxgz8DSO8e1tHB3pSEdWJqzP+x/64Tj4yjcRAATwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxhLUZERkMWYhhDpawaSbFgsd3tMB8GA1UdIwQY
MBaAFA990yd5wamyl+KMsDX9Z5q7GRbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUt
YWNmNjZmNzhiMmI3LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUtYWNmNjZmNzhiMmI3
LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkR7IyHa
wup4aIKlgLrRpwgtDfjuLThzK5KCq2+V+qu4YmhENq5ndvQAVHecFby/uQqbBAZY
omuENmX5vVUqWJdGRtW4Ertf5vBp368zW3jZVWTsyY3U3ALZnkd4O/cA2eUxC1uv
4Anyw1UeHCEpAMxvpmCrayQiVDg3o3p7c1sM2hG8ovhZ4pA+5r3g9sVoyx3LXlAJ
MHRYDpMjh/Dv2QqyIajRqe4VlaItXRzM1viMSugYqeCW8cJU5fUkfabtHMp3duqV
3/3A3OEXYyKvIiAbydJAepTYdU+CFVcN4hUpIq1NWPYuUp31oXW1DV2KKws+LXPM
whHEnGC9E2WBgA==
-----END CERTIFICATE-----
Generated at Fri Oct 24 09:29:39 2025 by rpki-client