Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
File: a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json)
Hash identifier: cLGqjZKHfhCjgvKHQwftzamhCdqqdjMbN0jat37fyVI=
Subject key identifier: 1C:3A:C1:8B:1A:16:3F:04:6A:32:56:ED:0D:6E:59:41:19:3E:8B:B6
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 0198D8512F7917634ADB7DDCB5645A9503FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
Manifest number: 1527
Signing time: Sat 23 Aug 2025 19:04:15 +0000
Manifest this update: Sat 23 Aug 2025 19:04:15 +0000
Manifest next update: Sun 24 Aug 2025 19:04:15 +0000
Files and hashes: 1: 63o-_PEDVGcrdV7Bgi2toHySFlk.roa (hash: 0y8sb4KpuKm+TioBZ+61oUD6+dI0ZD86gR4wRX+mbCE=)
2: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: zyiO9lBjnZ73xObksFo3TfWPCSGDKogtlQuTKbKWkYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:2f:79:17:63:4a:db:7d:dc:b5:64:5a:95:03:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Aug 23 19:04:15 2025 GMT
Not After : Aug 24 19:04:15 2025 GMT
Subject: CN=1c3ac18b1a163f046a3256ed0d6e5941193e8bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:d5:5e:f6:14:d1:55:f6:a5:33:b3:d7:c4:
66:48:2d:d0:57:a3:e9:18:c9:2f:f1:4c:7c:77:1e:
5e:60:00:22:3e:08:d4:d9:0a:1f:f7:5b:f5:68:b3:
3a:e0:42:3a:9a:3f:ff:0f:71:35:83:eb:dc:28:9b:
c0:fb:af:c2:cc:d4:22:bc:1b:a7:b3:a6:43:95:f4:
60:52:07:fb:72:e2:13:d7:41:15:e0:0a:41:5e:a0:
88:f5:5f:88:ef:b2:f9:83:e4:3d:c6:99:28:08:02:
8e:aa:b6:44:35:ee:ac:81:73:44:56:64:6f:69:60:
af:ba:f2:d2:be:07:5d:ed:5c:27:89:a2:ad:b0:d9:
de:92:e7:23:5f:1b:c8:74:8b:be:cb:89:90:e3:93:
1d:64:ca:60:6f:f9:8d:cd:6d:40:6a:26:4c:e2:16:
3c:32:74:b1:c7:03:a7:dc:1c:af:61:1d:a7:0c:40:
d8:bb:3f:f1:cb:e2:b6:64:2a:7c:c5:8c:19:bf:b8:
02:b6:d3:f9:32:72:ac:48:66:2c:b7:42:46:16:1d:
0f:80:cd:26:9d:1f:56:72:7e:63:56:ab:68:37:93:
f2:72:9e:80:07:27:40:fc:55:82:1b:85:12:45:a1:
3c:c8:b9:11:7a:97:a0:2f:c0:ee:4a:20:21:ed:fa:
19:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3A:C1:8B:1A:16:3F:04:6A:32:56:ED:0D:6E:59:41:19:3E:8B:B6
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:02:7f:c7:0a:c9:eb:b0:aa:e2:e2:21:35:73:85:fa:5b:25:
f8:1e:bc:43:c8:44:f8:cd:3a:50:15:2a:99:ef:78:6c:bd:05:
01:8a:e0:61:d8:cf:b9:61:9f:17:f9:50:1a:a8:1d:89:10:44:
88:7b:4b:dc:5d:c1:2c:61:ef:ec:79:d6:dc:49:47:eb:ce:b3:
e2:86:c3:4c:46:80:16:7e:cb:53:14:6d:d8:e1:54:94:0b:4f:
37:98:f5:24:51:c4:8a:19:38:0e:90:19:56:e8:2e:98:0a:25:
43:39:ec:77:c0:cf:af:c5:cd:e3:f2:27:0b:9d:17:70:de:ad:
9b:37:67:a2:40:b0:6e:d5:19:3f:5a:c2:63:14:93:4d:80:c1:
dc:1b:fe:f9:13:50:3f:05:21:89:ea:4c:ed:0b:d5:ab:07:7a:
df:1d:4d:25:d9:a9:d5:56:d2:f5:69:81:42:58:ad:84:e9:57:
7b:5e:d3:65:86:6b:d2:65:7f:42:ee:3b:e4:36:a3:a8:5a:78:
b0:0a:c4:30:5f:91:17:d6:01:1d:6a:ab:31:9c:ab:02:77:a9:
34:67:3d:47:d0:b1:2a:45:8e:d5:56:28:ad:9d:12:23:d4:55:
a8:a5:86:cb:ee:7c:bc:3d:e6:87:57:fe:34:49:3c:4e:09:b5:
64:b2:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:29:40 2025 by rpki-client