Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
File: a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json)
Hash identifier: O5WIDUuh4I6Q54HSrEOfOj2LFbsECEWMpMNHe/mDlNs=
Subject key identifier: 22:0A:4A:DC:F9:84:B9:B2:95:F5:EE:EF:4B:DA:0E:16:D1:00:3D:E6
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 01967D8EFBBC21CF90EFA0430A1C0D6F28C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
Manifest number: 13EE
Signing time: Mon 28 Apr 2025 18:00:44 +0000
Manifest this update: Mon 28 Apr 2025 18:00:44 +0000
Manifest next update: Tue 29 Apr 2025 18:00:44 +0000
Files and hashes: 1: 8mAlHe2FGnjgTwZXLbd1VbzducA.roa (hash: xfkeplqiL9J7I3nJX5h7L4Din6AgPcOKqd05WlD4vO8=)
2: LF0HqjD8QG_rr9Ma9eAFU6Ls0kQ.roa (hash: 6Hxp7TshD2rQT2Fn6q3OAmebDAEAbUCbTEfYyGL6eQA=)
3: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: NxoJddiOPosf9yfrh1AChEz/Hr4Hxvam9ZjFJuzN3H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:fb:bc:21:cf:90:ef:a0:43:0a:1c:0d:6f:28:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Apr 28 18:00:44 2025 GMT
Not After : Apr 29 18:00:44 2025 GMT
Subject: CN=220a4adcf984b9b295f5eeef4bda0e16d1003de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:07:0c:42:ba:1e:76:4e:d5:05:14:84:6a:
3d:36:62:04:a3:b8:d8:1e:c1:9b:81:5b:8e:e0:8c:
70:23:d4:36:4e:bb:2c:1f:04:f8:91:2d:ae:10:e9:
a9:5c:5d:d4:20:1e:6a:4b:6e:84:99:fe:f2:c5:0b:
98:93:76:54:15:99:b9:4b:7a:ef:a8:1f:b9:c3:6b:
88:9e:69:f3:40:d4:04:d5:8a:99:07:b5:10:77:4f:
75:9b:7c:af:5b:8c:eb:64:d3:79:f3:ee:a9:47:62:
05:62:1c:68:91:d6:4a:40:2e:68:44:2b:e7:a5:85:
c9:8b:d7:8f:0c:33:19:51:bb:12:20:ab:03:5f:e1:
c9:4f:c6:7a:6c:bb:a0:9d:b0:58:ee:4c:e6:69:1e:
7d:a2:53:d3:bd:d1:3e:5a:6a:d2:b2:03:86:16:92:
4d:2e:22:22:eb:01:5a:e2:cc:4a:ff:dd:32:31:52:
b4:d7:0b:c5:71:ff:40:b7:5c:23:26:19:02:f7:b6:
0f:b9:cd:7b:7a:eb:ff:d9:e1:e3:81:f8:1a:8c:46:
c2:98:8b:88:10:20:83:68:cd:6f:60:91:d1:4a:17:
86:92:68:b8:4e:ae:15:6d:7e:14:fe:8e:8f:d9:02:
f0:a3:dc:e3:93:fd:e0:c6:8b:de:08:c1:6d:77:26:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0A:4A:DC:F9:84:B9:B2:95:F5:EE:EF:4B:DA:0E:16:D1:00:3D:E6
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:58:84:e2:82:5d:3f:78:2d:a3:6c:e4:e8:a2:29:70:86:3a:
e9:23:5b:f9:aa:ed:50:36:f8:83:4a:63:07:0c:08:67:70:4d:
48:f3:1f:a9:b3:2a:c3:a5:b5:6d:35:5f:d0:8b:9c:38:f9:7f:
a8:51:1d:bb:6b:27:05:74:47:5e:79:25:8c:94:a0:44:c9:75:
df:00:f8:f2:ee:e9:aa:1a:07:22:61:53:1d:fc:3a:c5:86:e7:
99:ec:6b:45:c0:82:81:0e:fe:60:01:91:66:ab:49:d2:11:11:
6d:44:a3:84:66:f4:65:7b:d3:f7:e7:80:41:17:19:ea:a8:45:
68:d4:c3:ba:67:13:22:8d:6e:77:78:7f:86:79:ac:db:a3:05:
9e:c4:51:f9:c3:0a:27:94:8a:12:e5:b9:f7:bf:66:a7:13:e8:
06:42:a3:b8:1f:01:1c:9b:4d:18:5f:d1:30:0c:b8:d2:3c:04:
b1:7b:4a:5c:dd:c7:2b:60:3d:fe:58:41:aa:e3:63:09:f5:1a:
02:36:17:c3:0b:76:81:3d:5b:0a:5d:83:32:81:74:ef:3b:f6:
1f:56:ee:38:53:1c:93:97:b8:a4:8f:0c:3f:e2:71:d8:72:a7:
a3:02:9b:63:5b:09:7d:62:a4:55:52:d1:38:54:2c:17:2d:9c:
5c:52:d7:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9jvu8Ic+Q76BDChwNbyjEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2RmZTRiNjhiMjA4OTVlZGVkZjNhMDAzMjMyYTk3OWUx
N2MzOGMwHhcNMjUwNDI4MTgwMDQ0WhcNMjUwNDI5MTgwMDQ0WjAzMTEwLwYDVQQD
EygyMjBhNGFkY2Y5ODRiOWIyOTVmNWVlZWY0YmRhMGUxNmQxMDAzZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1YHDEK6HnZO1QUUhGo9NmIEo7jY
HsGbgVuO4IxwI9Q2TrssHwT4kS2uEOmpXF3UIB5qS26Emf7yxQuYk3ZUFZm5S3rv
qB+5w2uInmnzQNQE1YqZB7UQd091m3yvW4zrZNN58+6pR2IFYhxokdZKQC5oRCvn
pYXJi9ePDDMZUbsSIKsDX+HJT8Z6bLugnbBY7kzmaR59olPTvdE+WmrSsgOGFpJN
LiIi6wFa4sxK/90yMVK01wvFcf9At1wjJhkC97YPuc17euv/2eHjgfgajEbCmIuI
ECCDaM1vYJHRSheGkmi4Tq4VbX4U/o6P2QLwo9zjk/3gxoveCMFtdyYdswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIKStz5hLmylfXu70vaDhbRAD3mMB8GA1UdIwQY
MBaAFGt9/ktosgiV7e3zoAMjKpeeF8OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAt
OWM3NmQxMGVjNTMyLzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAtOWM3NmQxMGVjNTMy
LzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1iE4oJd
P3gto2zk6KIpcIY66SNb+artUDb4g0pjBwwIZ3BNSPMfqbMqw6W1bTVf0IucOPl/
qFEdu2snBXRHXnkljJSgRMl13wD48u7pqhoHImFTHfw6xYbnmexrRcCCgQ7+YAGR
ZqtJ0hERbUSjhGb0ZXvT9+eAQRcZ6qhFaNTDumcTIo1ud3h/hnms26MFnsRR+cMK
J5SKEuW5979mpxPoBkKjuB8BHJtNGF/RMAy40jwEsXtKXN3HK2A9/lhBquNjCfUa
AjYXwwt2gT1bCl2DMoF07zv2H1buOFMck5e4pI8MP+Jx2HKnowKbY1sJfWKkVVLR
OFQsFy2cXFLX5w==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:02:36 2025 by rpki-client