Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
File: a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json)
Hash identifier: uQZ9Yi9SLUPrAe++hFubuNbJe6GDe13MnK9xyT01psE=
Subject key identifier: 71:4E:4D:33:72:D4:82:9D:EB:D0:89:E1:81:23:B4:AE:83:0E:71:82
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 01975046B5BBA6018781CB2D6F6F592972CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
Manifest number: 145C
Signing time: Sun 08 Jun 2025 16:01:40 +0000
Manifest this update: Sun 08 Jun 2025 16:01:40 +0000
Manifest next update: Mon 09 Jun 2025 16:01:40 +0000
Files and hashes: 1: 63o-_PEDVGcrdV7Bgi2toHySFlk.roa (hash: 0y8sb4KpuKm+TioBZ+61oUD6+dI0ZD86gR4wRX+mbCE=)
2: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: KDlOS8iT0/GyKx+K5mjvGxe/R8Ulg3roBSdNKDlrFV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:b5:bb:a6:01:87:81:cb:2d:6f:6f:59:29:72:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Jun 8 16:01:40 2025 GMT
Not After : Jun 9 16:01:40 2025 GMT
Subject: CN=714e4d3372d4829debd089e18123b4ae830e7182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:5c:9e:66:37:1c:dc:64:94:aa:7f:f3:36:
d6:6b:ab:1d:c9:31:69:52:49:c4:c9:73:1f:d5:ad:
25:69:ec:cf:72:84:29:c5:6e:da:2f:a0:92:b5:dc:
6b:4e:3a:71:45:b7:af:cf:7c:7e:51:f1:69:07:fd:
3b:3e:e4:e5:b5:9b:48:d4:ac:a1:29:5e:03:86:a8:
52:0e:f3:75:20:80:27:f0:c9:7a:ea:77:99:e4:e1:
7b:d7:d0:88:a2:ea:a4:9a:cd:68:bc:90:0f:48:ae:
c3:b8:1f:46:02:a9:a3:5e:64:b2:3a:24:b9:57:d6:
9e:1b:5b:1e:46:4f:18:59:2c:58:87:30:be:75:12:
0b:d2:2e:bb:7d:42:67:ec:99:8d:a7:64:15:82:59:
85:94:2b:f1:c3:c9:09:01:19:6e:2c:c2:1f:75:07:
42:45:46:ff:2d:f4:aa:03:e8:cc:21:53:aa:b0:eb:
46:f1:23:97:c4:d5:14:5c:2a:dd:b6:59:37:19:9e:
fc:43:29:ff:26:11:96:a3:ab:6d:71:71:69:2a:94:
07:aa:f8:8b:96:bf:c3:50:24:86:a9:2b:4b:87:0a:
c2:fb:04:d4:f1:9a:7c:27:18:2f:33:63:33:8e:86:
28:80:f4:09:82:6d:c1:5c:90:d0:05:7b:c5:46:81:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4E:4D:33:72:D4:82:9D:EB:D0:89:E1:81:23:B4:AE:83:0E:71:82
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dc:79:2c:56:f6:54:f3:cb:31:f3:24:f4:c7:3c:b4:a9:49:
3c:e2:93:8b:d4:1e:9f:55:6b:f2:c4:3e:8b:1d:b5:87:f2:67:
2a:81:af:44:a7:e5:5d:ee:44:0c:b1:94:4a:90:19:a0:3e:8d:
4f:54:d8:74:b1:79:d6:a2:65:2e:d8:f3:a0:a6:ff:a0:98:68:
9e:f8:48:04:2c:5d:b9:d8:ca:8a:3d:c7:a7:21:9f:de:bf:a6:
fb:ff:3e:cb:24:85:5e:e5:ea:77:f1:38:a2:7e:47:29:09:b3:
84:f5:99:7d:1e:d2:6a:8a:be:ec:79:62:10:1b:a1:b3:d8:21:
17:bf:50:38:51:70:16:c6:e0:c0:0b:ff:1d:1d:f2:d5:70:ce:
c6:07:cd:99:24:51:08:f7:f4:cd:80:62:53:04:69:34:27:fa:
2a:c4:ba:98:f8:13:02:99:7d:dc:04:7d:63:ee:b9:50:8f:72:
d8:58:35:86:02:d2:26:c2:9c:48:09:fe:cb:a0:47:ab:f9:d0:
37:4c:d3:8b:7b:2e:f9:e3:d1:b3:8b:0e:08:3d:a4:ef:03:db:
1a:76:2e:93:a8:fc:ef:d8:ed:52:3a:f6:15:65:13:c1:1d:1f:
c1:4c:d4:69:ff:de:9f:8f:2c:7c:2f:9e:98:1b:57:b0:42:03:
b2:04:ec:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:09:01 2025 by rpki-client