Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
File: a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json)
Hash identifier: i/Mv/K5dZO3uFtNK61flKxNM2Gl9q7yaYbPMD2gy2Pg=
Subject key identifier: F5:59:97:D2:34:2F:BB:D4:DE:3E:E3:1B:E8:D5:88:90:CD:80:F8:EA
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 019A1CBF392B36DD2B5D0DD337D5B981A6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
Manifest number: 15CF
Signing time: Sat 25 Oct 2025 19:01:25 +0000
Manifest this update: Sat 25 Oct 2025 19:01:25 +0000
Manifest next update: Sun 26 Oct 2025 19:01:25 +0000
Files and hashes: 1: 63o-_PEDVGcrdV7Bgi2toHySFlk.roa (hash: 0y8sb4KpuKm+TioBZ+61oUD6+dI0ZD86gR4wRX+mbCE=)
2: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: +bHHXYo0fy8BmjQApLy0IN1imDeD61AjVtOCPw5OuLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:39:2b:36:dd:2b:5d:0d:d3:37:d5:b9:81:a6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Oct 25 19:01:25 2025 GMT
Not After : Oct 26 19:01:25 2025 GMT
Subject: CN=f55997d2342fbbd4de3ee31be8d58890cd80f8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:96:fe:af:7b:1f:2f:19:38:c3:56:62:db:
a3:4d:a4:d2:7f:d4:6b:5d:20:63:e2:f4:00:c9:f9:
09:b3:28:52:0d:0b:bf:08:aa:fc:bb:c5:09:c3:37:
2a:5e:0a:06:17:2e:c3:cb:9b:98:02:40:ce:ed:8f:
d6:22:98:87:db:3a:48:79:a4:57:88:a8:0a:b3:04:
ae:30:ca:13:65:22:5f:84:ce:9f:63:e9:15:c0:e4:
0d:2f:a4:b1:e2:86:db:9c:6d:ca:91:10:6c:df:7a:
f5:09:9c:b1:fe:fd:09:96:45:6a:b5:b6:f1:a8:f8:
30:fe:c6:a3:32:57:bd:1a:40:0b:8a:bb:43:32:42:
ee:be:7f:2d:9c:8f:d6:92:3d:cb:8f:83:9b:3b:d2:
bb:57:b4:c3:c6:6f:ed:d6:68:4d:da:c2:df:f1:8a:
47:ad:75:a7:41:6c:0f:0e:d5:ec:07:21:43:a4:63:
a5:ec:50:b6:df:11:f5:59:78:26:96:04:41:f2:2e:
9e:89:04:35:72:b2:dd:c3:43:cb:23:4f:16:77:e1:
fd:ff:aa:db:f8:53:aa:54:e9:b9:5b:84:dc:07:8d:
a9:4b:0a:18:42:b9:bc:2d:0a:3f:2a:e1:3f:84:c7:
63:93:27:ae:10:65:af:35:9c:ef:99:be:ac:92:84:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:59:97:D2:34:2F:BB:D4:DE:3E:E3:1B:E8:D5:88:90:CD:80:F8:EA
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d3:7d:d1:d5:e0:c4:c0:b6:4f:7c:42:4e:58:e6:b9:5c:d2:
33:35:60:2e:68:80:ad:da:13:ae:f4:d0:7f:b6:3c:de:c9:71:
27:2a:43:3d:53:57:8e:da:40:d2:89:06:3b:8e:fc:a8:ad:a3:
a0:c7:4d:fe:ef:14:0f:45:fd:a7:ad:8b:e9:f8:d5:78:16:52:
2c:13:6c:0f:e8:1e:79:6f:9a:b9:68:7d:e9:3b:6e:66:4a:0f:
2d:fa:c5:ac:07:ee:07:5a:59:3f:b9:ca:fe:c8:e6:58:29:d6:
36:4d:f2:36:a0:8b:0f:5a:88:80:d0:a5:08:7b:46:82:2a:20:
b5:a4:45:4b:a7:db:9e:a6:f9:ca:6a:1f:3a:e7:1b:ad:ef:0d:
ed:58:7f:b3:41:65:c5:e1:92:9c:5c:ef:dd:52:b7:86:e0:48:
d8:31:46:df:9c:01:ee:37:4c:58:55:e2:5b:c2:67:a2:0c:b7:
f0:07:c3:2d:3e:ef:9f:6c:b5:04:71:c1:2e:78:4a:dd:cc:5e:
f2:86:40:ba:9e:6c:17:fe:ab:82:44:e5:20:20:f8:b0:d4:cb:
ea:f2:12:ac:b9:6a:67:d2:fa:9a:bc:8f:07:44:95:66:08:c9:
3e:c5:f0:ea:70:9c:cc:ff:6c:4e:61:6e:33:af:6a:c6:be:62:
a3:ef:56:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:50:16 2025 by rpki-client