Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: Htfplunbmeq7RPSBH2BPB3xbaCBAFO/Cp7qpVOjzi3s=
Subject key identifier: 1A:67:EA:05:DA:D4:A0:EB:87:C5:08:E2:A2:A5:7C:E9:01:23:7F:CF
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 0196C9174A95614D45E55BE0F84D1504AF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0C0A
Signing time: Tue 13 May 2025 10:01:08 +0000
Manifest this update: Tue 13 May 2025 10:01:08 +0000
Manifest next update: Wed 14 May 2025 10:01:08 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: qZpM92eMGtJgeKsagQoVhuhbUTdzz37aeCTAYvhHWto=)
2: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (hash: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=)
3: Xwst9NE_3divRmhP7hMoEPIJ7JI.roa (hash: mL30JNi0AE38khocNGadQDEvIJt5kPRBkClagiJzVtg=)
4: uhJiD75LxMes30E_4QTof6b_YKo.roa (hash: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:4a:95:61:4d:45:e5:5b:e0:f8:4d:15:04:af:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: May 13 10:01:08 2025 GMT
Not After : May 14 10:01:08 2025 GMT
Subject: CN=1a67ea05dad4a0eb87c508e2a2a57ce901237fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:3e:e4:56:f0:0d:6d:54:dc:a9:e7:4e:29:
24:af:29:8f:16:8b:f1:42:58:e4:ab:c5:66:15:b0:
29:85:0b:aa:81:1e:16:37:b1:5a:4d:1f:b5:cb:09:
e8:f0:61:ff:ca:08:eb:6a:76:04:ca:af:53:4f:63:
05:b0:ca:68:e2:ae:6b:41:df:82:18:26:40:f1:b2:
46:2e:53:96:bf:0b:04:87:7e:f8:c7:46:88:19:0d:
98:18:bb:4b:12:30:24:3d:cf:ca:33:5e:d8:c6:0f:
9b:76:b7:71:54:95:56:a0:ba:31:73:7b:b4:5f:04:
64:9c:1b:54:57:2b:4d:ad:88:82:17:87:ec:d7:05:
a4:ce:05:18:69:d2:47:1c:69:27:90:24:90:2d:a6:
f0:5e:50:9b:19:cf:c8:2a:33:91:bc:c4:29:9f:e1:
4a:06:36:84:89:69:7f:fa:5d:9f:52:17:ed:30:90:
93:aa:3e:e7:85:d6:f6:41:24:3e:7a:be:3f:63:80:
c0:dd:1d:a5:12:5b:69:66:75:2b:c2:ee:d2:87:c8:
5d:7c:30:43:8c:aa:07:6b:43:96:86:f2:4a:96:03:
54:0a:c8:1c:60:a5:e5:8f:c8:d5:e3:3c:44:c1:33:
b4:76:8f:1c:31:a8:17:dd:95:07:55:c7:d6:7f:02:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:67:EA:05:DA:D4:A0:EB:87:C5:08:E2:A2:A5:7C:E9:01:23:7F:CF
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8c:04:db:6c:3c:c3:c1:bd:29:8a:25:43:b4:e9:7f:1e:11:
19:5c:84:7d:0a:73:69:c1:88:b6:87:7d:83:c5:2b:c8:0a:83:
45:6c:79:f9:b8:82:05:23:82:70:8f:c7:63:e4:20:1d:48:a7:
cc:cc:91:a0:26:c3:15:d8:ef:2a:ca:97:b9:69:8b:51:7d:ce:
01:22:07:d3:dd:5e:01:24:e2:ad:8c:b6:d3:74:c6:30:86:b7:
47:72:ea:d6:92:6c:4c:78:a8:53:32:22:ee:15:b1:26:5e:93:
9f:d9:eb:fa:cf:cf:55:82:e6:11:f4:3a:ec:df:b7:8d:38:1d:
20:52:d3:0b:3d:44:60:61:02:af:22:35:9b:76:a9:37:45:7e:
53:52:68:de:5e:29:15:3a:cd:4e:59:41:ad:5e:81:d1:2a:64:
dd:92:cb:71:b2:42:d8:84:cd:a9:3b:b8:72:a7:56:27:51:19:
88:e1:68:f7:f0:0a:d9:08:cc:ab:39:ff:83:51:4e:5b:d3:76:
e6:d6:9c:e8:22:d7:cc:15:f0:91:4c:56:87:f6:16:95:34:d0:
56:fe:68:b1:ff:98:a8:9d:ef:c6:0c:ba:2e:5d:71:16:92:32:
f5:3d:4c:45:13:c2:0c:19:4b:98:f0:d5:83:67:9e:cb:7f:34:
cf:ee:76:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJF0qVYU1F5Vvg+E0VBK9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNzk4NTgxZTczNzA0ZWUzOGM5YmUxNWU3MjM3MGYxNzZj
NjAzMTEwHhcNMjUwNTEzMTAwMTA4WhcNMjUwNTE0MTAwMTA4WjAzMTEwLwYDVQQD
EygxYTY3ZWEwNWRhZDRhMGViODdjNTA4ZTJhMmE1N2NlOTAxMjM3ZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OU+5FbwDW1U3KnnTikkrymPFovx
Qljkq8VmFbAphQuqgR4WN7FaTR+1ywno8GH/ygjranYEyq9TT2MFsMpo4q5rQd+C
GCZA8bJGLlOWvwsEh374x0aIGQ2YGLtLEjAkPc/KM17Yxg+bdrdxVJVWoLoxc3u0
XwRknBtUVytNrYiCF4fs1wWkzgUYadJHHGknkCSQLabwXlCbGc/IKjORvMQpn+FK
BjaEiWl/+l2fUhftMJCTqj7nhdb2QSQ+er4/Y4DA3R2lEltpZnUrwu7Sh8hdfDBD
jKoHa0OWhvJKlgNUCsgcYKXlj8jV4zxEwTO0do8cMagX3ZUHVcfWfwJGCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpn6gXa1KDrh8UI4qKlfOkBI3/PMB8GA1UdIwQY
MBaAFN95hYHnNwTuOMm+FecjcPF2xgMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMt
YzRhNTJkY2VlMjNkLzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMtYzRhNTJkY2VlMjNk
LzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4wE22w8
w8G9KYolQ7Tpfx4RGVyEfQpzacGItod9g8UryAqDRWx5+biCBSOCcI/HY+QgHUin
zMyRoCbDFdjvKsqXuWmLUX3OASIH091eASTirYy203TGMIa3R3Lq1pJsTHioUzIi
7hWxJl6Tn9nr+s/PVYLmEfQ67N+3jTgdIFLTCz1EYGECryI1m3apN0V+U1Jo3l4p
FTrNTllBrV6B0Spk3ZLLcbJC2ITNqTu4cqdWJ1EZiOFo9/AK2QjMqzn/g1FOW9N2
5tac6CLXzBXwkUxWh/YWlTTQVv5osf+YqJ3vxgy6Ll1xFpIy9T1MRRPCDBlLmPDV
g2eey380z+52Ug==
-----END CERTIFICATE-----
Generated at Tue May 13 20:39:31 2025 by rpki-client