Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: tAD9GBkFAu/4t5loRRko8Pwn6DkrBVAdXpskH4FfweY=
Subject key identifier: D1:2C:A6:E4:B8:29:F2:9C:56:EF:3C:82:37:22:F2:86:89:E4:60:E0
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 0196760C30B340DDBC97EAEC99A419E982D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0BDF
Signing time: Sun 27 Apr 2025 07:00:32 +0000
Manifest this update: Sun 27 Apr 2025 07:00:32 +0000
Manifest next update: Mon 28 Apr 2025 07:00:32 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: 9QYj14BHpwHT8oPobCfAPypnwnOMfX0wmW5VB7bMLXE=)
2: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (hash: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=)
3: Xwst9NE_3divRmhP7hMoEPIJ7JI.roa (hash: mL30JNi0AE38khocNGadQDEvIJt5kPRBkClagiJzVtg=)
4: uhJiD75LxMes30E_4QTof6b_YKo.roa (hash: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:30:b3:40:dd:bc:97:ea:ec:99:a4:19:e9:82:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Apr 27 07:00:32 2025 GMT
Not After : Apr 28 07:00:32 2025 GMT
Subject: CN=d12ca6e4b829f29c56ef3c823722f28689e460e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d7:7a:e1:da:cb:b3:bd:77:25:10:b8:9c:b2:
90:02:60:a7:9d:2f:b5:ec:d5:7c:cb:fa:ff:77:67:
3b:82:08:62:27:d9:b6:11:d8:be:05:6e:8c:fe:83:
54:82:c9:2f:9f:b3:60:fc:47:b6:1e:4b:8a:32:99:
69:55:1e:2d:cc:9c:b5:0c:e3:a6:aa:f2:97:72:ec:
e7:f6:10:c4:17:44:a2:66:94:8e:85:7d:c0:6c:a2:
ab:ed:7a:72:4f:0d:c9:d2:4f:4b:65:9c:c6:12:66:
fb:01:c5:d3:c1:e8:a3:8d:3c:7a:02:81:3e:38:9a:
b6:e3:23:a4:91:e8:5c:fa:7d:57:6b:df:57:64:69:
73:46:27:aa:41:89:16:8b:54:3f:39:e0:cd:3c:a9:
8b:7c:8a:80:6f:f8:55:e6:f7:29:36:ad:a9:b8:02:
e0:6a:1a:91:95:3f:fc:1e:2d:92:19:d0:55:bc:cb:
fe:4a:01:b1:63:f5:f4:de:ea:b0:39:61:32:7f:70:
98:5d:e3:3f:ea:f8:b8:a6:16:4b:20:00:59:3d:ea:
f6:74:be:2b:3b:6a:99:2b:02:1b:8d:68:e1:ce:ec:
7c:b6:31:6a:2d:94:fa:fc:b1:5d:e1:8f:b1:a2:d4:
cf:b9:a7:75:13:59:c9:5f:73:36:bd:96:8c:6f:d6:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2C:A6:E4:B8:29:F2:9C:56:EF:3C:82:37:22:F2:86:89:E4:60:E0
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fe:27:dc:39:9a:af:62:56:ee:17:45:bc:66:69:87:11:e6:
ba:3b:70:d3:72:5f:46:6a:9e:3c:39:78:99:89:97:ec:b1:ba:
5c:a7:7b:74:a4:a8:84:db:db:fd:a4:67:cf:8a:8a:a3:f0:9f:
b0:e4:56:de:5a:5f:bd:80:30:43:6c:55:1a:38:67:ee:94:37:
0f:bb:62:5b:52:ed:46:5e:fb:fa:f3:01:7a:88:fc:5d:24:aa:
88:a8:82:d5:a7:c9:77:81:71:ba:e5:e5:c2:d4:33:dc:fe:d3:
b2:e3:cd:8e:86:46:85:79:c9:da:e4:b1:99:e4:fe:1d:93:81:
04:d7:7f:0a:8d:0c:a2:4e:1d:ec:69:8c:57:09:67:c0:3b:46:
89:f1:56:e8:4a:c8:6d:d8:eb:f0:bb:db:a3:27:4b:bd:80:bf:
29:64:c8:86:1f:72:fa:0f:8e:37:31:03:49:c6:ca:34:a3:a4:
1d:a6:2f:d4:60:ae:a5:23:6e:2a:26:7e:62:15:9b:27:bc:31:
5d:fe:e7:58:0f:fd:2f:44:fc:bf:48:8b:81:56:6e:f6:d3:80:
0e:51:1b:13:ea:f8:b5:75:c0:a5:84:df:8c:db:8e:a0:eb:69:
95:44:8f:64:46:42:c3:9a:e9:fb:a9:e3:4e:35:a5:45:f9:30:
1e:af:04:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:33:16 2025 by rpki-client