Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: 5LUvPkZmA4FOf4+5tdTkBk0O/ptbCUswUSITPBXnsS8=
Subject key identifier: AA:E4:8A:94:EF:C6:45:64:EC:FE:28:26:7B:BA:65:98:74:2D:6A:A2
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 01962ABCF6C581D09243863296628D5B82FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0BB8
Signing time: Sat 12 Apr 2025 16:02:29 +0000
Manifest this update: Sat 12 Apr 2025 16:02:29 +0000
Manifest next update: Sun 13 Apr 2025 16:02:29 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: 9/hPrqtEPUq+fS7Q2+AHr2TjlHzf7waLGbi5UECHCwg=)
2: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (hash: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=)
3: Xwst9NE_3divRmhP7hMoEPIJ7JI.roa (hash: mL30JNi0AE38khocNGadQDEvIJt5kPRBkClagiJzVtg=)
4: uhJiD75LxMes30E_4QTof6b_YKo.roa (hash: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:f6:c5:81:d0:92:43:86:32:96:62:8d:5b:82:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Apr 12 16:02:29 2025 GMT
Not After : Apr 13 16:02:29 2025 GMT
Subject: CN=aae48a94efc64564ecfe28267bba6598742d6aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:ce:83:a4:a5:aa:62:91:33:d4:7e:8e:25:
4d:97:8f:7e:c9:b3:f0:b6:e4:9f:72:6a:fe:30:33:
3f:14:39:1a:9e:c1:a8:2e:d6:b9:80:b7:16:86:89:
d3:46:16:8c:ae:34:0b:b2:9c:dd:d5:5b:cd:28:b5:
1e:e2:02:ce:14:f4:60:e9:84:ec:71:76:c7:ee:f8:
e5:f7:28:db:89:e4:b6:65:cd:6a:ee:31:d0:3f:73:
97:5d:0b:6c:d8:1a:73:11:23:56:fb:27:25:0e:5e:
82:27:22:e4:44:de:16:64:38:3f:19:13:52:6c:9b:
a0:8b:ea:45:bf:c1:90:98:64:a1:52:4e:0e:1f:11:
6a:06:8e:3a:55:74:89:ed:84:0d:cb:83:bb:39:64:
e8:11:fd:11:47:c3:c9:43:69:4f:a3:4f:42:96:7c:
e3:40:65:9f:74:75:e7:9b:21:1a:64:ac:f0:73:ef:
bb:3a:09:38:ab:68:5b:17:51:a3:16:a1:6f:86:45:
ea:ff:65:a8:c9:e5:77:a4:5e:bf:4e:68:34:c7:23:
00:8e:3a:1f:92:e7:b3:6a:be:44:be:92:79:73:db:
f8:63:f4:50:6c:7c:26:ba:31:9d:60:5a:8e:3a:fa:
c3:01:73:f3:a7:ea:d5:6f:28:97:57:aa:29:fa:21:
2d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E4:8A:94:EF:C6:45:64:EC:FE:28:26:7B:BA:65:98:74:2D:6A:A2
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8a:99:91:1f:2a:04:bc:16:70:9b:29:ac:a7:9e:82:04:82:
37:74:a5:30:bc:f4:35:83:5f:24:85:f7:68:5c:cf:89:aa:5d:
99:a8:b0:05:b5:14:74:2c:81:94:dd:db:14:34:89:9a:f6:d9:
a0:a9:11:cd:8b:c1:5d:d4:be:fc:6e:3d:d4:38:b4:67:e0:a0:
e9:03:d5:02:6e:b4:9b:d2:f4:15:b5:16:76:4d:77:77:e9:7f:
2d:31:05:18:2f:0d:4a:bf:4a:55:1a:50:bf:3e:6e:41:ac:97:
e3:a1:e8:dc:aa:19:a7:2f:fa:82:ed:f7:0f:6e:20:c6:e4:76:
68:e0:d2:3c:63:e7:d7:06:20:33:31:7c:4f:51:2a:46:3d:57:
e6:7a:9d:98:9f:0f:b1:fa:76:57:94:a6:7c:f3:6f:bd:25:4c:
90:77:f2:04:ef:ac:82:9f:42:4c:5b:8f:20:40:d5:23:8d:13:
08:31:ac:59:6f:c0:a2:b9:1c:7a:73:8a:a3:58:b7:45:d5:47:
0b:25:db:b4:4b:24:58:b4:61:6a:56:42:37:ec:c6:1b:38:76:
7f:b0:e4:d4:03:8b:68:10:0e:3e:cb:79:c2:43:37:97:06:66:
90:d3:08:a1:08:bd:c7:8d:b3:c3:65:52:b4:57:4f:36:55:fd:
11:65:16:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:58:42 2025 by rpki-client