Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: 8HNXEtFE1fq9w9M+PB/rfpt5qxNphM/13pPVdyZhnlc=
Subject key identifier: 94:32:08:B2:64:8E:5F:6F:FB:38:65:64:67:68:B1:B9:9D:C3:7C:57
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 01992330FC6E90681AF21F3217307465B739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 03D7
Signing time: Sun 07 Sep 2025 08:00:36 +0000
Manifest this update: Sun 07 Sep 2025 08:00:36 +0000
Manifest next update: Mon 08 Sep 2025 08:00:36 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: m/h6IRTfA/P8slqo0q7fNLXG89b5JWqWVQx2awnNzT0=)
2: mKygmLEaAcG12iJKla4NTxN16_k.roa (hash: irq+IO7nYrHgz8agqZ9EA1eioq3hHNo5B7OdnvrxylQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:fc:6e:90:68:1a:f2:1f:32:17:30:74:65:b7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Sep 7 08:00:36 2025 GMT
Not After : Sep 8 08:00:36 2025 GMT
Subject: CN=943208b2648e5f6ffb3865646768b1b99dc37c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:7e:5a:85:48:25:04:74:6b:5f:a5:96:b7:
71:3e:b8:c8:0d:b2:61:9c:d9:7e:bf:2d:35:d1:8a:
5a:c4:1c:b3:a0:63:1b:39:31:88:cb:e9:fb:3d:e7:
cb:54:45:df:20:8c:79:21:f2:ef:46:f0:38:1f:7d:
4f:f4:26:f1:09:f1:17:37:db:cb:3f:67:01:d9:be:
5c:e1:28:0c:93:f8:07:31:16:36:c6:6c:4d:c7:da:
48:37:38:8c:10:b2:a8:22:c1:3a:49:25:d9:c9:b7:
4b:bd:80:4c:6e:ea:ec:e2:10:9f:2a:60:04:d9:c9:
07:66:f9:66:13:99:d4:b9:35:da:73:d3:fd:80:9c:
c2:77:f8:99:71:a2:a5:79:b5:78:73:62:93:ba:24:
f8:10:bd:e7:b1:93:f6:92:42:94:99:80:25:2f:ed:
15:35:63:a9:7e:5c:54:c6:af:a1:ff:43:2a:d8:d5:
28:1c:38:0f:a1:b5:1d:8d:79:d6:e8:c7:41:18:94:
31:b8:85:26:d0:16:d8:f5:f6:f1:0d:c6:47:54:10:
d5:6d:97:2b:1c:ec:b7:f5:27:fa:83:24:0f:ce:95:
89:8d:4f:fe:28:d2:a1:dd:05:ab:d5:fb:f8:2a:f6:
e4:3e:2a:6d:d6:a1:31:fc:54:e8:1b:9e:ed:89:4c:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:32:08:B2:64:8E:5F:6F:FB:38:65:64:67:68:B1:B9:9D:C3:7C:57
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6e:4c:b4:a3:5e:45:4e:e9:b9:2d:02:6c:51:95:32:67:8b:
09:8c:04:c7:eb:af:ac:5f:f2:a9:ed:ef:2d:0c:e1:05:7c:c8:
66:51:a7:32:b1:10:f3:5d:ec:09:53:f4:93:58:eb:2e:fa:96:
be:d8:5c:85:0d:5a:16:db:76:33:92:fc:d0:3e:2d:d3:a3:ca:
3a:e9:0b:3f:1b:7a:0e:4d:77:39:c4:53:2c:1d:d9:c3:45:12:
fa:d8:a0:ff:b7:a1:8d:ad:01:20:fb:17:e8:65:fb:24:34:1f:
75:55:8c:aa:e4:c4:73:c3:e1:48:ea:93:d9:27:23:be:21:7d:
83:96:cd:22:9a:e4:2c:81:68:23:78:1d:ac:74:eb:d3:b4:08:
a7:29:0e:b1:64:45:1c:dd:1c:96:f8:7b:ef:90:2a:06:8d:d4:
a0:ee:c7:24:d3:1c:2d:c3:f0:25:15:df:81:29:94:14:50:c7:
9b:85:d0:fc:08:00:d4:5c:a3:95:84:d9:a4:3c:d5:ce:15:82:
cb:a6:cf:16:e8:7e:29:24:6b:e3:8e:73:4d:6d:9a:4c:5c:de:
ec:6b:85:55:6f:c7:17:83:20:8d:56:f6:05:d2:23:85:e9:79:
83:35:e0:a3:92:d8:80:34:eb:b9:c3:0e:b5:47:82:25:ec:6d:
7d:7f:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:01 2025 by rpki-client