Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: A+91nrUe+LgQKQd/aZwXQV7/GAnWoTIrjgDmtru4MUk=
Subject key identifier: 05:99:DD:E1:EE:4D:F3:D5:2A:41:0D:45:63:80:94:75:F3:C0:51:AF
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 01977AC25F8BE25CB47B58AB019C6F453AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0C66
Signing time: Mon 16 Jun 2025 22:00:48 +0000
Manifest this update: Mon 16 Jun 2025 22:00:48 +0000
Manifest next update: Tue 17 Jun 2025 22:00:48 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: 2cpU8Ne1p5++Ab5Dx3XktYdNwCDo0KCOoSpima1sz4s=)
2: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (hash: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=)
3: Xwst9NE_3divRmhP7hMoEPIJ7JI.roa (hash: mL30JNi0AE38khocNGadQDEvIJt5kPRBkClagiJzVtg=)
4: uhJiD75LxMes30E_4QTof6b_YKo.roa (hash: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:5f:8b:e2:5c:b4:7b:58:ab:01:9c:6f:45:3a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Jun 16 22:00:48 2025 GMT
Not After : Jun 17 22:00:48 2025 GMT
Subject: CN=0599dde1ee4df3d52a410d4563809475f3c051af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4a:e8:92:5b:e1:36:6d:d2:dc:78:47:ec:8b:
dd:0d:d0:84:1d:9e:6a:0f:95:08:64:6f:a4:7f:e2:
88:2c:c8:45:a3:bb:3a:80:f6:68:fe:1d:27:5c:45:
15:f6:2f:1c:32:d6:57:bf:b7:31:b0:6f:92:26:40:
f5:b7:a1:8e:7c:b1:46:53:11:d8:36:ac:63:8c:55:
75:1f:6b:a9:15:3c:ad:c3:e8:73:34:8f:15:cf:df:
af:9f:a1:d7:d5:40:80:46:79:99:d3:1b:30:51:e8:
bc:b9:7d:d2:70:76:30:c3:5a:d5:2e:cd:c6:4d:2d:
b5:cb:e7:27:76:51:4d:7c:28:b8:c1:65:90:df:34:
f5:7f:d1:96:e1:2e:46:76:82:e5:91:49:9e:29:5c:
c5:01:ba:cc:e5:df:0a:b0:ac:ce:37:32:d8:80:02:
c3:21:40:ba:d3:09:db:c3:ec:a8:90:66:39:1b:06:
4e:4b:7c:a3:65:f2:59:21:1d:d9:99:f2:28:19:fc:
52:fa:66:da:6f:d0:f2:42:ee:3b:b4:12:c4:77:c0:
40:9d:aa:0c:66:b9:f1:cf:3b:d9:0f:35:b9:ff:a0:
21:e1:2e:21:cd:3a:c7:50:62:1e:98:46:47:9f:76:
8d:d7:c6:6a:1d:dd:7e:29:6c:ba:fa:58:ab:8d:e2:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:99:DD:E1:EE:4D:F3:D5:2A:41:0D:45:63:80:94:75:F3:C0:51:AF
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:41:31:12:85:16:d7:85:a8:dc:e8:03:b1:5c:95:aa:6c:38:
e4:5e:df:b1:28:64:16:25:1e:28:81:09:3c:64:7f:db:67:cf:
aa:ef:b3:59:9e:5f:67:d2:c5:ef:8b:38:f0:b1:8c:00:47:99:
ff:46:d7:c4:1f:29:9c:c0:93:b2:18:d7:0a:d5:77:76:e4:1d:
db:7b:bc:bb:f7:25:31:4e:63:48:ce:90:58:9f:f5:e5:c9:fb:
b5:1c:95:7a:c5:5c:c5:ae:cc:c4:b9:9c:d4:3e:f6:a0:b4:79:
ad:c7:26:f0:1f:2b:4a:b3:5c:7d:39:64:56:f8:f3:52:71:6f:
95:ff:e0:9f:7a:c6:87:e7:c4:9e:af:bb:fe:67:31:50:1b:a4:
38:51:e4:1b:8b:27:53:54:e6:12:74:ef:ab:38:0d:c5:4a:b6:
47:a6:4b:36:51:f4:2c:90:a9:a4:f8:3f:84:f4:74:7a:36:f9:
f2:a6:a3:62:13:1d:00:6a:da:fc:cc:b1:eb:58:5f:71:05:f8:
2e:f7:c6:6d:73:ff:72:e6:38:8b:ef:aa:e9:8d:8c:c1:60:0d:
ad:d0:af:f4:07:ef:ec:9b:fa:7f:ae:6a:45:a8:58:63:a8:81:
ea:4b:53:b8:15:f3:a7:57:75:b8:59:47:78:99:f4:e6:92:11:
ec:f3:40:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:04:47 2025 by rpki-client