Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: mBaIVhxCVoQ5Effcm7P4rGDpbyjHgy4Gwt1GajgMUKY=
Subject key identifier: 27:E7:A5:FF:12:00:19:A3:E8:97:B1:3B:05:C7:72:B4:2D:3B:09:DF
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 01984A40FFACAA40061401E1379B87C2AD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 1458
Signing time: Sun 27 Jul 2025 05:00:30 +0000
Manifest this update: Sun 27 Jul 2025 05:00:30 +0000
Manifest next update: Mon 28 Jul 2025 05:00:30 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: LrhnWr9p0kuPn5NvrDSTyuEWy4Kq0lWq0uGg0QspqV8=)
2: qHrO8lQhK3GafyUc6jw1PxQPaXs.roa (hash: tPnDIOggIIc+29booONquHAPxQns3cD0Gn6JnfE+V54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:ff:ac:aa:40:06:14:01:e1:37:9b:87:c2:ad:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Jul 27 05:00:30 2025 GMT
Not After : Jul 28 05:00:30 2025 GMT
Subject: CN=27e7a5ff120019a3e897b13b05c772b42d3b09df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:83:b3:f1:93:b3:20:21:7d:06:86:31:0f:
5a:8c:0f:f0:bd:29:bc:be:a9:3a:60:a6:20:1b:43:
3c:44:66:4b:f3:b8:77:79:1a:3a:c2:c4:db:3a:f4:
ee:1c:45:78:cf:44:7d:2e:07:47:fe:3d:ca:f8:62:
a5:fd:a1:e2:6b:57:bc:02:5a:55:57:fe:d0:a3:43:
70:e9:59:71:1e:a7:a3:0f:e9:4d:13:86:7e:2e:32:
c6:fb:ac:6f:9a:41:53:39:0b:65:81:f1:87:d8:b5:
f2:d9:c0:f9:75:79:2e:ab:cf:19:69:a0:e4:c5:74:
b7:b2:a8:5c:c1:4c:82:1c:fa:fe:d4:71:98:6c:71:
2e:e5:35:b5:a5:83:24:55:bb:9c:a5:36:17:84:72:
43:34:5c:82:b8:9e:59:4e:ac:46:df:e1:5f:f8:c1:
23:57:d8:61:cd:34:ad:9f:c7:3f:8e:65:0d:f7:99:
79:b9:16:5f:7a:0a:11:91:b5:c3:b1:0b:f1:d6:a5:
d9:41:b7:45:b8:af:62:f0:da:b5:ee:b2:91:06:5e:
0e:6d:9a:9c:12:15:9c:8e:17:77:2f:fa:4c:2c:08:
a4:86:11:64:7f:61:04:7b:13:72:3e:21:79:b8:c1:
a5:03:d2:30:e2:7c:4b:f5:d5:82:8e:21:13:e0:f4:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E7:A5:FF:12:00:19:A3:E8:97:B1:3B:05:C7:72:B4:2D:3B:09:DF
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f5:a5:fc:76:b0:1d:26:b8:14:cb:b3:59:13:cf:7c:61:2d:
d4:5f:38:3b:25:1f:52:5e:61:75:00:5f:66:80:89:1d:7b:b2:
25:b4:80:6c:cb:f7:4e:33:ab:7f:40:29:5e:63:22:71:70:4d:
7b:d3:12:42:47:26:2a:da:05:97:64:d3:07:d2:98:14:d4:95:
7e:32:34:29:b6:27:bf:15:44:25:bc:be:40:c2:63:07:ca:a6:
46:95:96:7d:da:c0:c8:08:9d:10:2b:7f:54:4a:73:11:02:93:
ea:88:61:cd:b1:a5:a7:a0:a4:59:27:af:41:6a:a3:5d:e2:f8:
8d:dc:24:6c:97:b2:82:d8:5b:12:3c:09:c1:34:a9:88:d6:84:
15:db:3f:95:61:c3:c6:16:fd:1b:42:1b:c5:bf:fb:b0:1b:80:
1e:f0:91:e6:95:dc:ab:70:17:8d:37:1d:73:6c:be:9f:5e:b7:
37:48:10:8f:19:15:13:1f:b9:37:29:a9:78:24:8c:cd:e9:09:
e3:cd:fe:66:df:51:01:ae:c4:6c:91:cc:ad:cc:8f:84:10:6a:
6f:25:c8:1a:ad:77:0a:39:54:d6:8c:2f:7e:9a:19:a4:ec:65:
fe:18:12:bf:9b:9b:ab:4c:ce:59:f2:3b:93:1d:c8:81:de:6f:
12:d7:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:50 2025 by rpki-client