Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: loKKUTfZv9Rj6Ypb8nZvdEGMFKsBPz8KTg5aquKsg8Q=
Subject key identifier: EB:DF:6F:05:DC:1F:CF:12:2A:FD:89:7B:D3:49:DE:A5:8C:6F:C5:71
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 0197B6A1978BE270B9579C8D46BB41E1C2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0C85
Signing time: Sat 28 Jun 2025 13:02:12 +0000
Manifest this update: Sat 28 Jun 2025 13:02:12 +0000
Manifest next update: Sun 29 Jun 2025 13:02:12 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: F9V5CTUKdJ5jbX6PldFfoUnpw8TsVDOGBqAjHS07hOE=)
2: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (hash: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=)
3: Xwst9NE_3divRmhP7hMoEPIJ7JI.roa (hash: mL30JNi0AE38khocNGadQDEvIJt5kPRBkClagiJzVtg=)
4: uhJiD75LxMes30E_4QTof6b_YKo.roa (hash: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:97:8b:e2:70:b9:57:9c:8d:46:bb:41:e1:c2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Jun 28 13:02:12 2025 GMT
Not After : Jun 29 13:02:12 2025 GMT
Subject: CN=ebdf6f05dc1fcf122afd897bd349dea58c6fc571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:a2:7c:49:36:d6:16:4d:57:76:3f:7a:bf:
0a:05:97:d4:75:54:9e:00:65:fc:d0:d4:51:fd:1e:
04:39:63:1f:c9:3d:cf:a2:9e:ed:d6:03:85:0f:90:
92:29:be:25:c6:c7:83:3b:84:0b:d0:03:28:87:22:
11:d0:da:e2:75:97:2f:24:06:4f:34:e5:f0:e4:82:
eb:4f:75:99:4c:7a:b1:88:b5:71:ae:b5:4f:ec:94:
67:0e:06:c2:fc:cb:7f:54:20:b6:36:72:40:cf:33:
88:7e:1e:81:ef:16:0e:d2:89:97:72:b0:48:b5:d2:
c7:d7:2a:51:52:a2:b3:ef:27:e0:d6:0e:c4:cd:7b:
8e:83:44:52:6a:7a:78:f9:87:e8:4d:74:73:cd:54:
53:1e:d5:90:b2:ac:76:df:1c:fa:ee:aa:07:ee:89:
f9:aa:47:c1:0e:a3:21:67:35:db:7f:45:b3:86:34:
f3:7b:18:09:bd:78:0f:23:c7:f7:36:87:b8:2b:f1:
be:51:0e:fc:88:39:51:e5:9b:b7:35:e5:e6:5c:d4:
1e:ac:62:e7:4d:1b:81:97:f7:87:10:a9:95:02:bf:
66:14:fb:53:6b:35:25:bb:06:c8:87:d3:21:b2:4b:
e2:0e:d6:e0:fe:1c:6c:94:57:35:20:31:af:ce:e9:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DF:6F:05:DC:1F:CF:12:2A:FD:89:7B:D3:49:DE:A5:8C:6F:C5:71
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:70:03:40:75:78:32:ff:16:ed:ea:43:d7:c6:ab:7f:b0:fa:
0b:7c:c2:8d:34:0a:fa:1e:4b:0e:a2:bf:38:53:56:07:0c:49:
27:28:6f:c3:e1:76:6e:48:3a:6b:8d:25:2e:0f:a3:dc:30:6e:
bd:ea:c6:8a:c3:16:0a:26:f1:c7:2f:bf:9f:25:49:f6:7e:22:
90:f6:d5:3d:1f:b6:0c:cb:d9:0b:ff:14:4f:cf:91:25:ab:98:
84:dc:dc:e5:51:35:af:15:b4:9c:9e:5f:1e:31:6a:21:f2:f2:
2c:8f:33:51:d6:13:67:11:f7:36:d2:02:70:7f:e7:c4:a8:17:
7d:9f:5b:77:18:c2:01:25:f1:74:c3:17:39:92:b1:83:fe:1a:
a9:51:66:90:6e:86:81:47:5e:76:8b:f6:fd:d9:2c:5b:f6:98:
8b:2d:07:6f:9b:33:55:55:9c:59:c0:20:0e:15:0b:15:b4:a2:
c8:8e:02:97:3c:a0:31:4a:05:2b:60:21:e3:5c:84:2c:59:eb:
d5:37:b5:72:0b:48:9a:0e:b2:41:5c:7d:8b:74:d2:86:fc:fd:
0f:02:9c:b6:31:0b:98:8f:70:32:fd:2b:ff:34:d1:83:24:e0:
fa:6c:80:79:c3:b6:89:d5:b4:55:8d:83:1b:ae:2a:d0:60:3a:
0b:d9:9c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:16 2025 by rpki-client