Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: op8LRGAMGLKwmzhI0fICRD8yGL9vSgyb9V4BlOAJtz8=
Subject key identifier: EF:55:21:2B:9A:D6:EB:C9:7D:59:72:5F:46:0B:35:12:7D:78:19:D8
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 0197B77C0381B7557DCEC682C19B9BD9D896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 140C
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: TzJyqxyZhmippqG/aqBaZ+kXQTP9F+EVU/r2Xtj9r8k=)
2: qHrO8lQhK3GafyUc6jw1PxQPaXs.roa (hash: tPnDIOggIIc+29booONquHAPxQns3cD0Gn6JnfE+V54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:03:81:b7:55:7d:ce:c6:82:c1:9b:9b:d9:d8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=ef55212b9ad6ebc97d59725f460b35127d7819d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:fd:e7:29:a6:eb:29:5f:05:4a:fe:ff:80:
68:78:e1:b4:47:cb:d0:55:6b:4a:e0:47:40:7c:0b:
49:e2:68:51:9e:b8:85:1d:03:eb:a4:04:a8:54:f2:
19:66:90:60:b5:5c:89:59:e3:7c:7b:f1:51:b3:d9:
07:03:88:40:e5:36:2a:36:7d:90:31:7e:91:93:a3:
26:8c:9b:f3:42:20:c7:14:d5:db:19:29:7a:f7:d2:
4a:0a:61:42:68:75:e8:a0:06:2d:6e:6a:9f:46:6f:
b3:2b:cc:ce:c5:7c:5f:e1:6b:3c:91:f7:05:02:86:
df:10:1a:a2:8b:67:69:ca:d3:44:00:8a:82:13:6b:
e7:71:a6:5f:20:15:3c:94:87:6d:c1:3d:0f:3b:ca:
8f:be:19:04:90:7a:74:ba:92:f5:a5:43:77:e3:9b:
0d:ce:47:54:b9:df:e7:6d:8d:ac:c2:1f:1e:d8:05:
21:5d:08:0d:0d:2e:27:b6:e5:a2:0c:2f:60:7a:50:
d4:61:94:8d:50:76:5e:45:10:cb:c7:f9:fe:17:c6:
57:9d:0e:a8:f0:d2:a2:7e:04:36:a4:a4:4d:36:7e:
1e:96:86:5b:22:5c:9d:ac:32:a1:ea:8f:ff:25:69:
63:8b:54:4c:8f:f6:4b:ed:8e:11:47:66:47:f6:aa:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:55:21:2B:9A:D6:EB:C9:7D:59:72:5F:46:0B:35:12:7D:78:19:D8
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:65:45:43:ea:53:58:47:b7:b6:99:25:7a:c6:d7:9e:64:92:
a3:6e:27:2f:1e:ae:4e:d5:62:f8:d4:56:94:5c:19:d4:d2:5a:
5d:d4:d6:61:73:16:9c:ff:4f:34:f5:74:d4:90:72:56:9c:11:
6a:4d:b3:1d:84:c7:8a:90:55:03:73:b9:e1:75:e7:9f:6a:0b:
7b:29:e4:97:fb:5c:f4:75:9b:c0:67:c2:94:d9:8a:c8:08:d0:
bb:a8:da:c7:58:e6:d9:aa:d9:2d:99:a0:41:4e:28:87:61:04:
c0:ef:70:86:9e:14:64:b0:12:bf:dc:5a:f7:fa:ce:41:d9:e5:
25:3f:54:43:f7:11:38:3f:16:e9:ef:ab:bd:21:64:bb:a4:7e:
36:2c:7a:41:55:0b:47:90:d5:16:70:62:30:db:52:a6:78:3f:
4c:55:7d:ff:7c:25:ca:c8:ff:c3:bb:e6:e0:1f:5a:da:74:6d:
45:6e:0a:13:4d:a3:1b:87:62:45:3d:13:64:2b:08:b0:ca:7c:
29:4e:27:c1:20:75:ca:ab:ae:68:90:f0:1f:75:7d:7d:55:19:
d0:99:98:91:d6:bb:a0:e0:2d:6a:48:a1:c0:01:73:3f:bb:9d:
99:4c:34:48:f8:23:a5:cb:e3:13:a5:d3:5e:f8:83:df:11:ee:
c0:e9:bb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:09:38 2025 by rpki-client