Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
File: r633xfgtvAsdujKChi1T7Ih9XGY.mft (raw, json)
Hash identifier: 7drFjuBjYfGIDTRE9XPn37sZRB52YiFtx7KNAfawQcc=
Subject key identifier: 3B:05:EC:C5:86:56:9C:53:F2:B8:2B:31:0D:EB:D9:00:9B:22:43:28
Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
Certificate issuer: /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Certificate serial: 019A71B81F66234C4C3D29ABE3E6FEB72311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: G_uyP800qF9xq38CufvzcASfUJk.roa (hash: wXXcLrJ9H/mm6fOwDIgDVncWMj2oRMLhDL41bJPAtPA=)
2: r633xfgtvAsdujKChi1T7Ih9XGY.crl (hash: E0eWeKwxGqqppiSWA5XEEGc76dECjLFpSSgT+L/2iBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1f:66:23:4c:4c:3d:29:ab:e3:e6:fe:b7:23:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=3b05ecc586569c53f2b82b310debd9009b224328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:2a:75:b5:5a:7d:e7:e2:9f:e3:44:25:2c:
71:84:14:36:57:55:52:45:5f:65:91:92:0f:f0:ce:
2b:b8:18:b9:17:8d:b9:7b:24:67:dd:7a:e3:02:5f:
5d:75:6c:e0:4b:17:cd:1e:9f:ba:2f:9f:e8:1f:1a:
7c:32:1a:a1:26:94:1c:fd:21:f9:99:0b:dc:e5:87:
f6:fe:5e:fb:1c:0d:00:30:bc:2a:ec:c0:cd:05:fc:
b3:6a:dd:97:b9:8d:85:2e:45:46:9e:13:e0:ca:c4:
b7:58:2d:45:50:72:c2:b7:36:f4:1b:66:8e:a5:b7:
e3:b3:13:1c:63:17:83:2d:fc:06:8f:8a:8b:27:8e:
e1:3c:bd:b1:d3:a4:16:86:0d:c4:25:f3:6c:b4:78:
2c:f0:5a:8b:d2:a3:bd:56:18:57:a5:79:43:b9:ec:
bf:0d:af:0c:e6:2f:cb:d4:b0:a9:b9:8f:12:aa:57:
a0:c7:58:89:02:db:f5:2b:2d:86:01:68:72:f0:ad:
d0:65:a2:05:5d:8c:73:a3:02:ff:94:14:8c:54:3c:
85:40:07:56:bc:c1:08:40:e4:49:44:3f:76:61:ad:
d8:e3:40:e6:3f:b7:eb:2d:9e:b7:e9:9b:e4:be:c1:
6b:fe:86:16:5d:44:26:ef:54:b7:2e:61:d4:9c:04:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:05:EC:C5:86:56:9C:53:F2:B8:2B:31:0D:EB:D9:00:9B:22:43:28
X509v3 Authority Key Identifier:
keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1f:7c:de:1d:fc:ec:af:af:0c:ac:1e:23:cc:3f:2d:b2:27:
b6:b6:86:d7:52:0e:04:de:ab:41:f4:41:94:11:e0:50:a2:86:
cb:19:e8:13:1a:96:c7:98:9f:20:3a:c5:74:83:6f:52:fa:0a:
7d:56:76:6b:79:b7:63:27:4a:bc:d8:91:3a:0f:e0:62:93:ad:
a8:95:54:12:b3:63:44:06:bc:30:20:82:43:d8:ad:7d:32:da:
82:30:d9:ec:b0:2b:70:03:30:fd:bf:40:ee:f2:ce:d8:e4:ca:
91:09:21:f8:8e:be:95:27:23:96:ac:08:f1:0b:4c:f9:cf:14:
02:63:1a:f5:5d:37:5d:b6:bc:08:f6:ce:9c:09:43:58:1b:a8:
1d:76:e4:af:2e:67:bf:d0:d7:d4:62:8a:2e:13:11:3e:57:f5:
d5:1d:cd:86:0d:cc:94:f4:f7:e7:26:09:44:1b:2a:ab:d6:fc:
6a:30:39:01:77:4c:b5:8e:be:3d:4c:aa:cf:ce:7c:7e:9f:55:
8e:45:f3:6f:83:1b:20:30:11:f8:db:0a:31:f0:0d:af:89:c7:
79:d1:c2:8d:01:cb:61:1f:65:d1:12:b3:c0:24:48:39:a2:88:
32:1a:b8:d5:af:31:03:f4:c9:1f:9f:07:f6:94:2d:d8:24:e9:
62:a3:c4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:42 2025 by rpki-client