Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
File: a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json)
Hash identifier: LdFq9/rn4ooLRcxKCdaqCzSglP2ZqpbUMZcfVj/17VE=
Subject key identifier: 0C:FA:06:50:F0:52:A7:CC:A2:A7:4E:38:67:85:71:BB:33:3E:6B:AD
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 0196583879F4F8273BA703D01E322348088E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
Manifest number: 13D9
Signing time: Mon 21 Apr 2025 12:00:18 +0000
Manifest this update: Mon 21 Apr 2025 12:00:18 +0000
Manifest next update: Tue 22 Apr 2025 12:00:18 +0000
Files and hashes: 1: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: ERC1GDtOl5kAdND2G6iPrR9+sTHskO+1PWh54Ck3Y5M=)
2: zXCsm9SAAByjdh9cxrFixEv4QxU.roa (hash: LUvS7mAwFZ6C/F9nm3WkyPABrI+5LNzyM7MV+k5m7w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:79:f4:f8:27:3b:a7:03:d0:1e:32:23:48:08:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Apr 21 12:00:18 2025 GMT
Not After : Apr 22 12:00:18 2025 GMT
Subject: CN=0cfa0650f052a7cca2a74e38678571bb333e6bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5f:8c:fe:51:1d:29:12:e3:9d:ec:0a:be:df:
64:8c:cf:97:b7:98:77:c6:21:b5:29:d2:14:88:b8:
5c:46:20:cd:0a:f6:77:e6:6a:46:74:80:90:22:37:
fa:b7:bd:3e:99:b1:de:09:8a:28:5c:62:bc:14:75:
30:fd:41:c3:0b:10:79:5d:95:b3:ff:ff:75:ef:35:
92:c9:34:d2:98:7a:d8:c4:e2:7f:82:56:b3:25:1f:
da:e1:9c:33:c6:58:a8:2f:4c:2e:4b:e5:ed:91:7e:
4a:26:ef:39:cd:73:2f:fd:47:04:0b:e6:65:00:6b:
80:10:48:30:8c:a6:ff:f6:8e:f1:b9:44:93:b8:64:
22:d7:a9:69:62:72:99:aa:26:e7:30:24:b2:65:0c:
d6:28:df:23:60:e6:31:c2:c0:90:2e:4e:11:46:7d:
a1:0e:38:20:2e:de:95:9b:d6:64:25:f7:16:ff:7e:
68:7d:5b:5b:88:38:a2:1f:cb:58:b3:70:cf:04:ea:
62:fa:9f:f2:b2:48:88:2e:5d:35:06:d9:4e:89:80:
8f:bc:6a:6a:84:4b:db:c2:4a:0b:cd:a3:84:28:da:
29:46:78:aa:35:c9:0e:eb:7d:54:37:41:9c:21:ab:
23:f8:e2:8b:19:b1:d6:a7:16:1b:c2:cf:96:82:f5:
e7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FA:06:50:F0:52:A7:CC:A2:A7:4E:38:67:85:71:BB:33:3E:6B:AD
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0e:07:5f:6d:a9:49:eb:c9:dc:b7:ae:77:1d:dd:85:87:55:
d2:87:ec:e6:1b:1e:a6:3f:55:b9:fe:70:17:45:0b:5a:bc:2d:
1f:b3:8e:bf:52:0b:72:a6:06:2b:7a:b5:f0:5c:ff:41:23:2b:
da:87:44:5b:8f:c5:5d:9c:54:65:b6:07:a6:45:d1:a7:7a:e7:
e2:7c:37:b2:85:03:19:b9:ae:d1:63:8e:b3:a5:40:f0:2c:58:
6f:3b:71:5c:67:93:00:c4:b0:8a:3a:b7:9b:67:e6:15:6e:e8:
ed:ef:8a:86:4f:89:ed:e1:ff:19:d3:6e:73:8e:7b:b9:71:36:
11:10:ba:64:fc:f2:4d:56:4c:ef:ad:30:6a:d5:f4:18:f9:36:
4b:39:24:00:3b:de:77:2e:e8:f4:7b:16:3b:08:c2:74:45:f1:
92:80:63:f5:6b:49:93:8e:c0:cc:a4:99:b6:bf:f3:64:fb:cb:
5d:3b:9e:a4:17:ae:58:00:0e:d2:02:69:5a:24:04:ab:13:7b:
31:18:2e:2f:f3:3c:05:58:98:e2:d4:13:16:cf:67:e9:c4:3c:
9b:96:fb:8d:95:5a:34:0f:93:6d:c0:ff:ce:0b:37:ff:c8:a5:
c2:8a:c3:e8:aa:3f:4c:60:b1:5e:1d:6b:92:73:e8:be:71:fa:
13:69:78:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:42 2025 by rpki-client