Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: 0ro8f5XfNYFk3SuSHmyuADHuqx6DZQXMF0oRM+QR1+k=
Subject key identifier: C7:67:EB:61:DE:BD:87:C1:95:07:F6:BE:AF:F8:95:5E:7A:CF:8F:BD
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 0198D54EA8575FDC0B2727B1ECAA65FB69F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 14A0
Signing time: Sat 23 Aug 2025 05:02:38 +0000
Manifest this update: Sat 23 Aug 2025 05:02:38 +0000
Manifest next update: Sun 24 Aug 2025 05:02:38 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: sTddpK+lyJGWUiQFiQBChp9RDly7tz8DjyE7m6orD/Q=)
2: qHrO8lQhK3GafyUc6jw1PxQPaXs.roa (hash: tPnDIOggIIc+29booONquHAPxQns3cD0Gn6JnfE+V54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a8:57:5f:dc:0b:27:27:b1:ec:aa:65:fb:69:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Aug 23 05:02:38 2025 GMT
Not After : Aug 24 05:02:38 2025 GMT
Subject: CN=c767eb61debd87c19507f6beaff8955e7acf8fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9c:17:64:c1:eb:e4:b4:c1:2c:41:86:ce:b3:
d4:61:15:95:27:c7:14:49:bf:60:55:f0:7d:01:f3:
a0:f9:c0:ac:15:64:25:9f:75:92:a1:59:28:81:ee:
b8:4f:63:ea:ad:f4:68:8d:98:31:32:be:ea:34:e3:
74:d5:83:5c:1c:94:ca:ab:4c:96:cd:62:95:ec:ff:
dd:1b:a8:69:5a:8e:db:53:65:92:03:f8:4d:0c:59:
56:0f:db:c6:b3:ac:35:cf:4c:43:f0:8d:94:06:49:
19:33:42:68:63:66:8b:3c:bf:81:22:40:d2:41:14:
b0:34:d9:54:4b:df:a5:6b:64:d5:25:d3:31:1e:49:
e6:49:3f:dc:53:60:79:a8:0e:b3:2e:e0:f6:15:18:
9a:fb:52:0c:63:68:bb:52:7a:dc:1c:3e:8e:e2:ea:
48:44:dc:a2:24:d0:35:6d:01:01:25:34:05:c3:de:
72:59:33:e3:68:56:3f:45:07:4a:c1:6b:f6:5a:26:
ec:08:2d:ca:5b:33:9b:3d:13:76:99:3c:f2:6e:44:
d1:5c:c8:c7:d3:c2:13:ff:47:b3:10:51:bc:19:76:
d2:39:2c:56:54:5e:1f:56:66:e7:5a:89:66:13:6a:
7e:d7:b2:0e:f4:9b:fc:20:62:00:9e:32:92:37:64:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:67:EB:61:DE:BD:87:C1:95:07:F6:BE:AF:F8:95:5E:7A:CF:8F:BD
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:02:73:15:f9:41:e9:0d:f9:3e:e9:96:75:1e:b3:47:d4:7a:
19:7d:92:30:ec:2f:87:12:1f:78:0a:75:36:36:e3:86:7b:36:
c3:37:fc:fc:20:30:ab:b1:4c:fa:75:0b:88:dc:f4:b2:e7:9e:
63:ee:4d:7e:f5:c9:43:c6:33:2f:70:35:ea:49:c4:27:5b:39:
aa:2a:78:8b:e9:b7:fc:3e:7f:4c:57:a6:fc:46:2e:2d:6c:61:
60:f0:ef:d1:b6:2a:c1:85:37:c8:ec:e3:b7:ef:05:87:e1:cd:
b5:0e:d6:5c:87:32:f6:ef:07:0a:b4:0a:68:c1:13:93:0d:bd:
24:cf:89:70:e9:e1:9a:37:e8:72:65:04:aa:51:7f:a2:b1:bf:
83:e0:4b:35:c9:ea:f7:2e:42:22:25:d8:ab:1a:97:09:76:96:
e7:79:1b:03:9c:65:01:4a:05:73:e8:b0:8a:07:65:44:c1:b0:
f3:0d:21:34:2a:6c:75:1d:ee:4e:5d:7c:03:67:c9:07:d2:ad:
56:23:14:c9:c9:b5:a9:ca:ab:df:46:9b:8f:84:b6:93:c6:d0:
92:b7:5d:c6:58:d8:5f:33:9d:e1:2f:ed:b9:c2:6e:42:a7:38:
f7:33:8e:56:83:a8:0c:81:a3:e1:ed:76:bf:80:f8:31:fa:6b:
95:1e:fd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:47 2025 by rpki-client