Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier: U90tvYMJnYQ9pu8i4/JWs2Qc+is/OiQk6NPwZgYSxuw=
Subject key identifier: 33:B0:9D:0B:11:CE:76:32:83:E8:C2:FA:19:9A:00:BE:F8:EB:5A:3F
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 0198D4DFDE6F43999C1BD343F301CACFD5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number: 0B51
Signing time: Sat 23 Aug 2025 03:01:37 +0000
Manifest this update: Sat 23 Aug 2025 03:01:37 +0000
Manifest next update: Sun 24 Aug 2025 03:01:37 +0000
Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: dsc6lhU/X28g0UVTd5rQ1wXsoc62XL7NL3BVmb1JhaI=)
2: it5TB1fVnn8wAT1GhxrXXPpJQhE.roa (hash: uFvB0yeXGCmgY/JUbCJTKqf/gHh6c2TkYoHqFThttag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:de:6f:43:99:9c:1b:d3:43:f3:01:ca:cf:d5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Aug 23 03:01:37 2025 GMT
Not After : Aug 24 03:01:37 2025 GMT
Subject: CN=33b09d0b11ce763283e8c2fa199a00bef8eb5a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b2:b8:54:f2:e0:58:d0:34:3b:2f:c4:ec:d6:
2d:3c:ef:68:9b:06:09:98:59:18:f9:77:ed:73:f8:
81:63:46:6d:50:f8:6d:f7:79:0d:c4:d8:51:c2:59:
ff:fe:8e:f9:1e:8d:0d:7d:35:da:8e:43:a4:99:62:
c5:c4:39:f8:fc:41:b0:f3:27:28:6c:df:e3:3b:f2:
9d:52:c3:f6:44:35:c7:78:41:e7:d8:3b:56:67:60:
81:2e:e7:68:74:ce:be:d7:f5:bb:97:7c:d6:54:94:
14:b5:c7:0f:29:a0:1d:37:9c:43:71:9c:bd:f1:37:
42:d7:c0:17:6b:29:a2:82:f8:01:df:40:7d:3d:ae:
75:f1:b5:46:c0:f4:fd:2d:98:20:5d:22:c0:3f:f8:
cd:93:26:7a:98:ed:f9:3f:fd:b3:16:4f:b3:49:0b:
b7:14:c1:59:33:98:d9:bd:c8:43:12:22:b8:68:03:
82:82:98:ab:47:15:5b:3e:4d:d3:66:61:47:3e:de:
71:5f:04:b7:e5:ca:7c:37:22:17:03:75:70:32:93:
37:33:33:44:3a:5a:e4:7c:e2:85:c3:25:8e:96:01:
96:da:b1:69:4c:c2:7a:06:0e:e9:29:38:b7:e9:ef:
62:67:e4:79:20:e9:e9:84:e6:96:4d:86:c9:69:3e:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B0:9D:0B:11:CE:76:32:83:E8:C2:FA:19:9A:00:BE:F8:EB:5A:3F
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4e:3a:2a:e8:e9:21:2c:3b:58:ea:ac:7b:d9:cf:33:db:6d:
58:cb:33:95:53:ee:2e:2e:f2:d5:62:18:e7:0b:45:10:ad:f6:
63:d3:15:17:f9:f2:d5:9a:f1:3a:9d:81:2f:0d:3c:23:f2:6b:
99:0f:48:f9:6c:65:a6:6d:02:27:a8:c6:ea:15:44:8c:f1:02:
80:9a:e7:3d:38:ad:00:47:a6:e0:96:92:a5:04:88:af:9a:d5:
39:18:55:c5:34:c4:f8:c4:ee:a6:60:7d:ab:4c:e9:8c:c5:ba:
53:2b:c7:0f:52:78:83:c1:6e:4b:c3:4f:db:ab:c0:db:26:1d:
71:21:e8:2d:1d:45:d5:f0:e1:40:05:36:b6:8a:45:c9:0a:6c:
78:7c:ca:e6:e7:4f:65:18:8a:8f:47:b4:95:6d:06:10:de:7b:
c2:55:48:06:16:63:21:e2:c8:90:44:16:c3:35:5c:49:49:31:
88:5e:51:88:b7:50:1c:e9:41:31:72:bc:be:45:71:81:78:8e:
d0:9a:fa:2e:8f:6d:5a:cb:6f:a9:93:c2:dc:a1:69:c8:a9:7f:
85:42:f2:10:2b:59:61:ef:0d:e8:10:1f:4a:43:d5:7d:09:6f:
06:6c:2d:7a:8a:8b:5f:a6:f1:41:5c:b2:92:1b:f1:6a:a8:cc:
8b:d7:d4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:16 2025 by rpki-client