Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
File: a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json)
Hash identifier: LHnY6y+D+zPHDUCyUKZXxqK+c3G1w2KgyejT3JVZwVE=
Subject key identifier: 6E:1D:71:06:03:08:FB:1A:0D:11:70:F9:E6:7B:6C:34:A1:C7:D7:55
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 0199FBEB1B635B95B872DBB4AEFD73CDB81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
Manifest number: 15BE
Signing time: Sun 19 Oct 2025 10:01:53 +0000
Manifest this update: Sun 19 Oct 2025 10:01:53 +0000
Manifest next update: Mon 20 Oct 2025 10:01:53 +0000
Files and hashes: 1: 63o-_PEDVGcrdV7Bgi2toHySFlk.roa (hash: 0y8sb4KpuKm+TioBZ+61oUD6+dI0ZD86gR4wRX+mbCE=)
2: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: r5w3ZflRiXKUSQ8ZB10POteyjDDdhgHSetgzQO75JVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1b:63:5b:95:b8:72:db:b4:ae:fd:73:cd:b8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Oct 19 10:01:53 2025 GMT
Not After : Oct 20 10:01:53 2025 GMT
Subject: CN=6e1d71060308fb1a0d1170f9e67b6c34a1c7d755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:55:81:12:18:8f:d6:e5:72:a0:c7:19:38:
e0:14:71:46:e5:8f:9b:ae:f5:9a:26:05:e3:e5:a4:
14:80:ec:9e:e3:1f:76:85:39:48:7a:41:23:19:98:
dd:49:ad:ec:f7:df:8b:cf:ab:e3:ff:02:0f:1e:b9:
66:7b:7e:47:7b:d6:16:6d:3d:d5:6b:5b:31:d2:81:
e8:05:2c:1e:2f:30:83:21:86:11:18:d2:85:50:ef:
1d:c2:2b:7e:72:87:89:bb:87:2c:b9:24:22:c7:50:
a4:a2:da:df:d8:4d:55:d0:52:cd:f8:97:12:87:0b:
cd:0c:fc:aa:83:a7:16:0f:33:2d:00:7f:06:a8:4b:
0d:bd:b3:3f:19:75:39:d6:4e:da:64:2c:3b:49:01:
6b:65:5f:4a:3b:e1:45:5d:7e:8a:27:23:a9:63:66:
91:0b:d0:7c:61:d4:6a:72:0b:97:45:58:3f:d6:de:
e7:dc:a1:a1:ae:0c:39:40:63:d0:c2:84:79:13:36:
6b:69:25:44:78:1e:a3:72:d7:61:4c:1b:1a:df:a7:
30:21:e5:bf:f4:d3:35:a9:16:e9:5b:59:26:30:b7:
d0:a9:f6:0f:83:ca:06:a3:58:ad:ab:49:ec:c6:9e:
75:c8:11:91:e3:1a:23:11:4b:bb:43:7c:c0:30:02:
05:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1D:71:06:03:08:FB:1A:0D:11:70:F9:E6:7B:6C:34:A1:C7:D7:55
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:71:19:5d:f3:df:09:cc:74:44:ff:9a:96:30:9e:43:69:7e:
6a:da:b1:c8:63:78:a4:9f:58:9c:61:4d:e0:31:a4:38:30:8e:
3c:30:51:42:12:fc:ef:b8:86:b0:eb:88:2a:29:25:5c:a7:5c:
91:90:c0:d8:e8:4b:a5:3c:44:c8:5d:43:c2:2c:a5:01:e4:f8:
bd:43:62:4e:f6:30:8d:2b:f5:56:6b:a2:01:f2:c3:61:d3:5a:
fa:18:da:fe:b2:6d:e4:42:1b:66:96:72:e3:2d:bc:ab:da:89:
d1:fc:02:0c:a2:7c:c0:1b:80:bf:74:ba:6a:c1:a3:f1:1a:73:
a1:8d:b6:80:d4:ba:c2:f1:55:5f:55:03:25:6f:e4:32:0f:4a:
de:4b:d4:45:1b:7b:14:01:ef:ae:71:64:f3:e4:25:43:b8:9f:
1d:72:d2:cd:ef:32:c8:0a:82:6f:3b:45:05:d5:ce:02:79:94:
93:1b:ca:1e:b7:94:31:f9:d3:05:05:9e:48:f6:17:f7:b3:5b:
f1:19:7e:51:9a:80:b6:7e:9c:59:4a:8f:a6:eb:45:fc:1a:25:
57:e8:f4:7d:d9:4a:ed:4a:55:bc:65:1b:da:76:0b:77:14:56:
9a:12:ae:8f:3c:51:bc:e0:5d:ce:dc:d8:7f:e5:c7:f9:93:89:
02:8e:4e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:14 2025 by rpki-client