Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
File: a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json)
Hash identifier: UHi7dLkwbtNEIYEYT1Y6VAEZWRpsp0hk47u9Q+bVtME=
Subject key identifier: 41:DF:A2:CE:7A:08:B6:5C:FD:E9:94:77:4B:85:F7:A5:40:1E:6F:9C
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 01984B553B1BAA3D12C136AE51771963B4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
Manifest number: 14DE
Signing time: Sun 27 Jul 2025 10:02:13 +0000
Manifest this update: Sun 27 Jul 2025 10:02:13 +0000
Manifest next update: Mon 28 Jul 2025 10:02:13 +0000
Files and hashes: 1: 63o-_PEDVGcrdV7Bgi2toHySFlk.roa (hash: 0y8sb4KpuKm+TioBZ+61oUD6+dI0ZD86gR4wRX+mbCE=)
2: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: rncheC0kPhUzJJNq50Ijgn0d2jovRFX+An07MCH94R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:3b:1b:aa:3d:12:c1:36:ae:51:77:19:63:b4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Jul 27 10:02:13 2025 GMT
Not After : Jul 28 10:02:13 2025 GMT
Subject: CN=41dfa2ce7a08b65cfde994774b85f7a5401e6f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:c4:84:8d:f1:18:5a:83:72:25:c9:3a:85:
2b:e5:ae:ed:00:4f:69:54:21:b3:c2:aa:0c:d8:10:
45:9e:09:d3:ff:14:2f:88:ba:70:91:d5:20:72:f0:
f1:21:82:3e:6e:c0:74:14:23:04:fb:4d:9b:e6:fd:
8c:fe:f3:4d:87:dd:e9:e4:36:b6:ed:c7:cf:4b:87:
e9:7e:0e:2c:91:ef:70:60:59:94:6e:f3:0a:80:3a:
ca:91:07:ae:d7:10:57:68:31:49:4c:ec:39:50:a4:
74:4b:ba:7d:e7:8f:c8:1d:af:16:f1:98:d8:33:46:
ef:dd:16:81:d6:ac:81:29:40:97:e5:3b:4a:9a:4c:
52:15:7d:18:65:d5:d5:ee:a2:24:f3:6f:a7:24:51:
31:47:1a:c3:d2:0a:69:92:fa:64:64:94:21:96:01:
16:c3:19:98:97:92:47:fb:29:ad:84:72:89:8d:3b:
47:b7:e4:f9:e8:e9:8c:1d:72:9e:e3:a9:df:41:e6:
a8:7c:06:72:0e:dc:ac:8d:80:3a:65:e5:b9:31:70:
b3:c2:4b:ac:72:32:15:4c:d9:82:30:ad:49:72:eb:
08:a9:c8:28:f2:c5:a5:7b:59:38:0a:5d:b8:d0:ce:
f5:c6:c5:62:2b:ef:21:0a:01:7b:b5:ed:b1:59:a3:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DF:A2:CE:7A:08:B6:5C:FD:E9:94:77:4B:85:F7:A5:40:1E:6F:9C
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:10:65:c5:d9:a3:51:7d:22:9b:dc:59:b7:60:82:48:de:50:
23:8a:06:03:fc:6e:51:6f:39:ad:e9:d6:d2:f6:43:68:fd:0c:
63:63:52:f9:95:36:ae:a4:2d:43:ef:e5:6a:c4:2f:2b:4d:ec:
28:ad:bd:30:b2:aa:12:af:ca:f8:58:6f:9f:61:d1:c2:6b:ce:
a4:ff:21:51:f2:83:c2:c4:fa:c1:1b:15:94:47:5a:aa:8f:44:
ef:97:19:b7:54:45:4e:09:b7:ff:97:52:e6:0e:c3:d9:3b:3e:
30:e5:b2:ed:62:76:fd:e1:48:72:40:a7:87:a9:e6:60:e9:fa:
a1:11:de:9a:a7:d1:3e:a0:9d:b9:b9:15:81:8c:57:dc:20:58:
0f:53:89:3e:31:60:e6:e8:3d:a7:ef:c7:49:8e:80:0d:00:06:
97:0f:de:8f:5b:f9:8d:96:f5:ab:f4:2e:8a:27:be:ed:d7:c2:
78:b1:f9:a0:e9:f1:29:9b:3f:20:3d:45:e6:f3:33:b4:0d:51:
48:31:da:2c:b7:55:23:5d:79:1b:29:59:f4:ae:4b:e7:65:79:
6d:ea:51:9e:f3:a5:fd:3d:de:b7:df:f9:9f:87:3a:97:7e:c3:
44:b3:50:f5:43:1c:06:31:10:9e:53:d3:7a:ba:10:0a:8d:36:
21:cc:0f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:49:52 2025 by rpki-client