Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: XR/UoOZr/cd9jCmiMFIdPPw4rZGR3QdP8HKgduk5HQg=
Subject key identifier: 97:6C:80:15:8B:23:4F:C9:9C:04:99:38:76:7E:8C:8C:EF:28:1C:07
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 0198D4745A3760E0229BEA8C6762D9D95730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0D19
Signing time: Sat 23 Aug 2025 01:04:11 +0000
Manifest this update: Sat 23 Aug 2025 01:04:11 +0000
Manifest next update: Sun 24 Aug 2025 01:04:11 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: 9ttN7qEQkRJlRFw5hRwlvzUBYyBd/j6Y3osoWgnMsGE=)
2: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (hash: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=)
3: Xwst9NE_3divRmhP7hMoEPIJ7JI.roa (hash: mL30JNi0AE38khocNGadQDEvIJt5kPRBkClagiJzVtg=)
4: uhJiD75LxMes30E_4QTof6b_YKo.roa (hash: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:5a:37:60:e0:22:9b:ea:8c:67:62:d9:d9:57:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Aug 23 01:04:11 2025 GMT
Not After : Aug 24 01:04:11 2025 GMT
Subject: CN=976c80158b234fc99c049938767e8c8cef281c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:c6:67:43:43:53:3f:5e:2b:66:fa:31:36:
da:89:e7:34:9b:ad:7c:eb:10:cd:03:2f:2a:31:49:
f2:32:fd:fd:2f:71:4c:54:6a:83:26:7c:07:df:cd:
7e:43:a8:8d:1e:e8:ef:31:1e:1d:c2:50:c5:cb:67:
db:50:db:f1:72:3d:e5:0e:ee:03:99:c5:5c:3f:1f:
a2:12:31:fc:60:b8:fa:b5:12:2f:a9:51:0e:3b:2c:
d3:b6:b0:34:7f:a6:ab:40:f9:9d:71:a1:b3:e5:f3:
1f:63:85:b9:70:0c:49:ac:74:09:08:73:5d:e9:74:
77:f0:db:2c:f9:a1:8f:90:f4:46:ed:9e:01:76:2c:
cd:36:66:58:bb:07:10:e2:37:a5:3a:60:d1:c1:e1:
ea:05:89:52:b8:4a:d7:ca:b0:81:70:ce:bf:32:cf:
66:ea:33:9f:2e:03:c3:c5:26:c5:dd:e0:0b:e2:cd:
f1:65:82:2c:7b:e4:6a:0e:78:a7:97:cc:06:48:cb:
34:fc:b5:48:d1:ef:3e:31:b8:d5:e1:e6:e1:7c:80:
8e:96:f9:22:27:a7:c5:b6:c2:35:84:7b:e3:07:ff:
38:1a:1a:ce:48:b3:45:3a:8c:bc:3d:36:5c:15:93:
61:24:4c:05:5d:ea:cc:4c:67:d8:a5:c2:7c:66:e5:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6C:80:15:8B:23:4F:C9:9C:04:99:38:76:7E:8C:8C:EF:28:1C:07
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ae:98:ef:69:33:0c:a1:f3:90:b2:eb:53:ad:73:eb:2c:8f:
9a:c4:21:dc:a7:53:15:b9:dd:f2:9b:66:e7:0e:79:12:9f:eb:
5f:2c:93:18:55:68:67:21:b6:9f:e8:e0:8a:63:b3:5a:5b:de:
31:8f:7a:25:5e:e4:a3:df:5b:34:01:64:98:3b:c0:64:8e:49:
26:65:92:ce:dc:30:73:21:40:a1:21:50:29:c3:57:c6:c8:ca:
b1:5a:26:21:79:46:66:44:dd:a6:01:c2:f5:f4:5e:e3:14:df:
12:10:2b:c0:37:09:f9:d5:26:c8:e7:4d:27:94:fe:10:8d:dd:
66:16:b9:94:ce:5a:4b:be:7b:d0:2d:bf:fe:76:89:bf:98:f9:
50:3a:68:69:47:7e:1c:cc:a2:ae:d3:86:d2:e8:03:fa:83:f6:
39:fa:76:68:38:e5:23:26:73:cb:3a:d5:2a:b5:ac:e7:c7:84:
5a:0b:33:b7:b6:b0:e0:ec:22:80:81:29:42:f8:1a:fa:9f:4c:
6d:ed:b9:1f:9a:23:22:81:66:1d:6d:2e:68:f3:f0:8f:6d:ec:
08:49:ad:86:31:95:10:8b:d4:0b:70:ac:fb:a5:f9:c8:0a:d6:
1a:ec:5c:c5:7e:5d:bc:12:d8:0d:5d:cc:f1:01:e1:51:9b:6a:
37:8a:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:28 2025 by rpki-client