Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: q4xHpxoaZq9HAU8IoDOqrthmigEUz6jBe08z3j5M7Hk=
Subject key identifier: CF:A5:CB:FB:13:49:FF:86:3D:C2:FE:FF:D1:6A:D5:1E:5F:5E:06:00
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 019854FD2BABA76411F3A9585E20E402475D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0CD7
Signing time: Tue 29 Jul 2025 07:02:14 +0000
Manifest this update: Tue 29 Jul 2025 07:02:14 +0000
Manifest next update: Wed 30 Jul 2025 07:02:14 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: gM+IgksFqwQoEGBgFDlWzGXjZVgA//simzim3kvWi6I=)
2: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (hash: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=)
3: Xwst9NE_3divRmhP7hMoEPIJ7JI.roa (hash: mL30JNi0AE38khocNGadQDEvIJt5kPRBkClagiJzVtg=)
4: uhJiD75LxMes30E_4QTof6b_YKo.roa (hash: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fd:2b:ab:a7:64:11:f3:a9:58:5e:20:e4:02:47:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Jul 29 07:02:14 2025 GMT
Not After : Jul 30 07:02:14 2025 GMT
Subject: CN=cfa5cbfb1349ff863dc2feffd16ad51e5f5e0600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:fd:88:13:de:07:ff:88:6b:fd:bd:e9:1b:
94:41:d3:58:a1:83:63:07:39:c8:f8:51:17:8a:6f:
3c:0c:e1:ae:50:a4:1a:7a:68:c2:e4:4e:43:0b:21:
c4:f3:35:93:48:73:c0:c7:eb:73:cb:af:42:94:f1:
45:e8:3e:58:ef:9f:e2:c6:ed:ae:c4:ed:59:17:b4:
07:89:31:11:98:4a:48:e1:0f:a9:b9:67:e3:f9:41:
c4:36:c7:ce:8c:b2:3d:a9:2b:e3:27:a9:af:e7:9d:
5d:37:df:e1:98:66:ca:f8:b9:e5:39:b7:cb:ca:e6:
9a:5c:c4:27:51:9a:0f:e0:9b:8c:53:d5:a2:98:67:
6e:98:a8:54:8f:bf:0c:05:bc:d8:97:6d:f8:53:ee:
0f:74:a1:fc:c6:41:da:a6:99:c9:95:da:3e:5e:92:
96:1e:8f:01:cd:3d:48:d0:11:a4:55:fa:17:bf:86:
00:61:9f:f4:7f:34:89:1f:67:5e:a8:ed:bc:59:a1:
75:11:cc:ba:49:a6:64:86:dd:f5:f1:b3:77:d9:f2:
b6:fa:ef:55:b9:b7:40:40:03:bf:9b:69:df:59:73:
58:3b:74:ce:e7:21:90:7d:c2:f7:45:c0:7e:4b:d9:
16:42:fd:7a:d0:12:88:0f:fe:fa:cd:16:89:28:40:
72:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A5:CB:FB:13:49:FF:86:3D:C2:FE:FF:D1:6A:D5:1E:5F:5E:06:00
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:36:9d:f9:bc:14:d0:7e:83:93:35:d4:f4:e7:74:e9:c9:e1:
96:b8:ea:1f:4e:1b:7c:a6:a7:52:23:ae:62:5c:2b:72:dc:c8:
0e:c6:ab:bc:03:28:b6:67:5d:9e:b9:c1:bd:56:9f:70:67:b6:
bb:55:80:a4:37:e2:ed:66:7e:30:0b:24:4b:2d:8b:ea:41:90:
da:d1:b2:5b:1f:cb:15:d5:0c:25:0f:d7:db:d5:c2:7a:32:5f:
95:a7:c9:01:4f:b5:50:90:08:af:3b:cd:67:5c:ef:09:1f:d3:
fd:c2:00:7e:77:ea:d9:74:25:98:67:99:4a:6b:67:88:3c:9e:
3b:b9:ef:68:e8:14:93:d3:1c:07:85:e9:d7:39:f2:3e:27:31:
b3:d4:d5:66:dc:54:c2:bd:66:f0:46:61:b4:b9:21:53:54:b3:
06:51:30:a0:ab:b6:08:b1:9c:72:d0:3f:2a:bf:9a:b3:48:15:
23:e7:09:13:3c:20:ae:69:7b:6d:c5:b0:4c:89:34:1c:15:a3:
34:4f:d8:ca:dc:e6:14:d3:b5:aa:4f:eb:14:e7:e7:34:c9:75:
df:25:15:d1:61:c2:42:b9:e6:5f:7a:c2:ad:33:9f:91:4e:a4:
ea:69:65:7b:7c:92:25:11:90:11:ff:09:0d:4d:41:cd:b7:c5:
05:eb:57:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:06:02 2025 by rpki-client