Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
File: Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft (raw, json)
Hash identifier: PGgbFu8UkQXN1heFYkwqHdL47Ojcc2YB73YnsecDmS8=
Subject key identifier: 31:EF:F7:C9:ED:36:C2:BC:F6:C0:94:33:03:52:2F:DA:0D:04:3B:6C
Authority key identifier: 45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5
Certificate issuer: /CN=45bbb0c37704bfd558849c6549af9734e7d14be5
Certificate serial: 019A71B92935EA3A99E9390B1EA1683AAC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
Manifest number: 0653
Signing time: Tue 11 Nov 2025 07:02:31 +0000
Manifest this update: Tue 11 Nov 2025 07:02:31 +0000
Manifest next update: Wed 12 Nov 2025 07:02:31 +0000
Files and hashes: 1: HrWHZLwLz9SHQNWDWAqLUzhWNgM.roa (hash: +TAR64SkVojwAPPcj29LtZXZh5haH9rqB2EiQmQF6cY=)
2: Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl (hash: re7eWnu7vI75of18jedsD9M12WtPcEYaQBLObe0YIZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:29:35:ea:3a:99:e9:39:0b:1e:a1:68:3a:ac:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbb0c37704bfd558849c6549af9734e7d14be5
Validity
Not Before: Nov 11 07:02:31 2025 GMT
Not After : Nov 12 07:02:31 2025 GMT
Subject: CN=31eff7c9ed36c2bcf6c0943303522fda0d043b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:87:21:24:57:82:80:33:31:5c:aa:0d:9d:
8d:f3:79:6d:62:3c:ec:a7:c5:bc:d8:14:6a:2f:eb:
f6:f7:5f:3a:79:4b:c9:01:b8:af:f7:64:2c:4d:d0:
84:93:7c:32:3c:ac:e9:85:53:ef:a9:66:70:8b:57:
01:24:ff:5c:98:38:93:64:5d:6c:e0:d7:09:9d:59:
f3:dc:d2:a4:33:bc:84:ad:2e:33:c8:e5:e6:a3:5e:
68:86:80:4e:03:d5:7b:af:ad:f8:ee:3d:32:8e:69:
aa:73:7a:b3:98:f6:70:1c:64:e3:c2:3e:cd:ad:c8:
3a:59:fa:8d:ab:06:e1:75:36:55:60:8e:68:6b:5f:
5b:51:61:aa:fb:d7:f1:09:2a:49:48:32:25:c7:fe:
b1:73:8d:69:de:24:36:d3:47:7c:fb:ba:1b:0a:4e:
d4:9a:1c:2f:3c:82:e9:0a:71:29:75:30:5e:e0:19:
ba:06:7c:21:65:67:8f:75:11:21:56:84:9f:6d:f4:
0c:b5:2f:fc:65:7c:bb:2e:9f:b7:ce:c1:cf:a5:2b:
ff:b6:b8:a9:1a:71:53:48:4f:25:59:07:7e:45:b0:
37:5b:9a:88:ae:51:84:06:80:c4:60:64:73:76:4d:
ac:52:f5:a8:df:8b:e6:6d:0b:82:37:e5:d5:42:ec:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EF:F7:C9:ED:36:C2:BC:F6:C0:94:33:03:52:2F:DA:0D:04:3B:6C
X509v3 Authority Key Identifier:
keyid:45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:13:42:61:ef:24:9c:b5:6c:d4:55:bf:fd:10:ca:6e:ca:e4:
47:69:a5:c0:dd:a4:a7:39:01:d4:51:8a:e1:07:5e:3c:25:98:
61:fb:bc:55:e2:ae:48:1b:ea:7a:26:34:81:4a:be:ba:06:fa:
fc:ef:2c:1e:f7:62:15:be:e8:32:25:0f:62:b0:3d:70:fa:bc:
11:23:f7:83:84:8c:d5:e9:52:25:c2:db:a2:09:1c:f6:29:6c:
76:f6:07:6b:da:b2:cf:9b:3f:d9:ab:34:6b:0d:09:b9:86:7c:
4d:3e:b9:cc:a6:8a:d3:a1:12:8a:36:93:bb:da:2b:54:ea:e5:
7a:33:e8:97:a9:b8:20:41:ce:26:51:a9:c7:95:ed:41:0c:1f:
c2:82:ab:89:e6:d7:fc:bb:62:90:9f:d3:f3:0d:4a:44:1b:b3:
74:58:7d:56:c7:16:43:2b:f9:a6:5f:9e:13:a4:d5:62:4d:0b:
e8:71:42:84:2a:fd:92:73:5a:1c:e9:cc:19:55:c7:e9:51:22:
f9:91:19:47:da:99:9d:e5:92:45:e3:16:21:fa:cc:13:50:6b:
0f:c6:d9:87:a8:0b:d8:9f:9c:f4:16:32:bb:85:06:75:8c:86:
7e:55:46:e9:f6:44:17:15:48:94:9e:45:ba:7b:fd:dc:90:ef:
5e:ed:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:34 2025 by rpki-client