Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: 1nFZvDzJ8lIBorp/L3vCm984m223O70yLRqR6jPjID4=
Subject key identifier: E8:0F:B9:34:FD:FE:E1:B5:FF:85:EF:89:B4:A6:20:1B:B2:FF:E2:17
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 0197488C41E0373FEF47C993B89DE2A28C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0C4C
Signing time: Sat 07 Jun 2025 04:00:40 +0000
Manifest this update: Sat 07 Jun 2025 04:00:40 +0000
Manifest next update: Sun 08 Jun 2025 04:00:40 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: DIHWzaJ5X3o8FVEEesjWVXfvIRCfiKiW2SCT/W2JTmk=)
2: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (hash: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=)
3: Xwst9NE_3divRmhP7hMoEPIJ7JI.roa (hash: mL30JNi0AE38khocNGadQDEvIJt5kPRBkClagiJzVtg=)
4: uhJiD75LxMes30E_4QTof6b_YKo.roa (hash: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:41:e0:37:3f:ef:47:c9:93:b8:9d:e2:a2:8c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Jun 7 04:00:40 2025 GMT
Not After : Jun 8 04:00:40 2025 GMT
Subject: CN=e80fb934fdfee1b5ff85ef89b4a6201bb2ffe217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:92:78:c5:8e:4f:d7:86:ae:c3:2b:61:e4:
f9:cd:75:79:8a:90:f0:a0:04:6e:a9:4c:b1:76:85:
31:a7:e3:10:34:03:65:02:71:64:b2:5e:a9:f8:fb:
9d:30:1d:43:7e:11:d0:83:d5:db:07:b1:f3:11:c6:
bb:5c:c3:bb:15:a3:5d:b9:62:9b:16:4e:b9:c9:57:
3c:20:6a:25:15:b9:6c:ff:4e:ac:1e:cd:27:81:93:
2d:2c:50:d9:21:67:52:06:a3:c9:9c:ea:9a:7a:f2:
0e:a8:28:10:38:16:0f:1f:fc:02:3c:de:75:27:a5:
25:de:17:22:0e:65:69:99:60:0f:0f:15:f7:d3:5b:
83:da:54:03:c2:6c:e7:c5:f2:41:38:c1:a7:02:a1:
dc:c1:25:82:b5:d5:5d:51:b5:3b:c5:bf:c1:9f:3b:
a3:b6:fc:aa:22:53:c8:d4:d4:18:1c:b5:6b:d0:d6:
b5:35:65:a9:86:4a:bd:bc:5a:81:6c:4b:2d:6d:a5:
2c:87:35:1c:9d:24:31:b6:99:cf:5a:c9:b4:dd:44:
82:3f:5a:5b:d9:89:79:82:73:a7:a0:9f:f8:b9:f4:
83:56:69:07:91:c1:de:56:36:f3:6e:59:fc:3d:e1:
ac:14:66:fc:d9:c6:82:56:53:1b:b0:10:d8:e3:d3:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0F:B9:34:FD:FE:E1:B5:FF:85:EF:89:B4:A6:20:1B:B2:FF:E2:17
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c9:0a:30:13:de:ec:9d:fc:d1:0b:8e:08:1d:16:3d:ac:2d:
45:b2:6a:83:4e:6b:58:cd:a4:07:4f:7f:99:5b:c3:95:5c:da:
5c:28:9c:31:12:48:3d:29:5d:eb:f2:49:5c:53:91:b9:21:48:
06:fa:b5:a1:ee:53:8b:e5:03:83:5d:29:02:10:df:15:8b:e5:
77:32:f0:18:8f:88:73:a1:40:2a:78:d7:03:79:bb:fa:c4:8f:
e4:da:92:46:95:dc:33:52:b0:7f:d1:0a:c1:24:5b:02:d4:e9:
e7:ad:e2:c1:92:f0:c3:e6:02:39:07:83:3c:8e:6d:35:1b:7e:
60:6d:49:66:f9:10:b8:a6:c4:74:8c:11:08:82:00:04:b4:be:
73:69:b3:7f:c6:38:9c:f5:1b:16:3b:13:a7:8e:e1:6b:15:8c:
df:6a:c2:c0:0b:f8:2c:aa:02:eb:0d:48:cf:45:a5:56:7d:c8:
d6:01:01:5c:0d:b0:6a:ca:24:af:ec:82:c8:b8:1b:48:68:3a:
22:29:ed:ec:36:6b:08:e8:68:98:07:dc:6f:9a:fb:5f:c1:a3:
9f:91:92:1f:d8:c0:c2:f2:2b:c3:07:a0:0d:0c:84:3d:5d:2c:
a4:a8:a9:f9:6f:98:c2:9f:c4:43:e2:6c:20:d3:33:d2:7f:7e:
20:f7:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:12:07 2025 by rpki-client