Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
File: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft (raw, json)
Hash identifier: zF3PA7Lc7xLCt03UVhHDc9R4IpswaOoshZC1uVbGRow=
Subject key identifier: 44:A4:E7:6F:D0:BB:1B:D8:F7:BE:D6:0E:29:E7:2B:28:EC:A6:F4:8E
Authority key identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
Certificate issuer: /CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Certificate serial: 0198537B137831000E07C38CA277B5A0A3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 00:00:31 +0000
Manifest this update: Tue 29 Jul 2025 00:00:31 +0000
Manifest next update: Wed 30 Jul 2025 00:00:31 +0000
Files and hashes: 1: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl (hash: UL+Dq3gWsuFRbl/glX9MRxAVaM/N4eXb80GkzwsnvjM=)
2: 1-O3-eEOj4WNMKkx6AjJ5BztCQfA.roa (hash: 3XCfpEftkyfw/udAWZHLu6olWarQDCfoueNYZe4wmqM=)
3: g9Xis0X9LNCOyDX1kA4xgId4bUU.roa (hash: eAC0STaybazrwMkwNWuW4cD5J/cTK9sETsg7k83JaD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:13:78:31:00:0e:07:c3:8c:a2:77:b5:a0:a3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Validity
Not Before: Jul 29 00:00:31 2025 GMT
Not After : Jul 30 00:00:31 2025 GMT
Subject: CN=44a4e76fd0bb1bd8f7bed60e29e72b28eca6f48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:a9:8e:4b:b5:ab:71:1f:cb:d1:25:5f:c3:
3f:e1:21:11:ca:b7:10:4a:3a:19:17:7f:2a:60:ab:
40:f2:2f:6a:4d:22:5c:83:f0:84:1f:90:3e:9c:9f:
c4:af:04:5a:6d:85:d3:7f:61:bb:48:ea:98:21:60:
5a:14:c4:27:24:c4:39:5f:e4:36:ae:f4:dd:4b:1b:
7c:b4:d1:6f:30:a3:01:e0:c9:65:4a:c2:85:11:2d:
af:89:58:58:ba:fc:56:a3:b4:73:af:15:b1:9b:b6:
d7:6a:8a:d4:47:ca:dd:fc:29:a7:0c:ba:ff:1e:a9:
b3:70:0c:43:75:eb:6f:a8:60:3b:38:cb:ed:65:8a:
16:20:02:8b:1d:23:aa:80:53:17:71:1b:fd:7b:79:
ab:44:c1:fb:3e:dc:d2:ae:59:e7:bd:a4:13:56:e2:
7b:fa:df:4e:86:84:e8:fc:16:ea:b1:b2:36:11:97:
e8:b9:b8:0a:c7:4c:9c:a9:d7:b6:95:76:1f:36:51:
fb:38:85:00:5e:29:b0:fe:44:ab:b9:2e:1e:d6:82:
9f:d9:d6:19:08:07:3c:3a:8a:9d:21:05:4f:c7:e9:
cc:c6:20:e1:c9:af:45:71:9d:68:5a:d6:ab:59:e1:
de:83:6e:e4:e5:69:32:6b:3a:2b:5d:ae:7a:68:05:
c9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A4:E7:6F:D0:BB:1B:D8:F7:BE:D6:0E:29:E7:2B:28:EC:A6:F4:8E
X509v3 Authority Key Identifier:
keyid:FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0b:92:83:db:71:87:99:52:67:f4:9f:ca:d9:64:82:0c:de:
f7:0d:1b:ec:dd:4b:c0:8c:07:08:5c:d9:2f:64:72:0e:60:1b:
ab:99:d5:ad:55:a5:45:23:4b:2a:ab:78:d1:6c:52:a2:40:c0:
5b:0d:7c:8f:fc:dc:00:d2:ad:f3:8b:68:e0:22:07:40:49:87:
7a:9b:55:a0:4c:27:ea:3f:ad:82:e8:a8:48:97:e4:66:2d:d2:
22:32:f0:ce:3e:09:6b:64:ed:18:ac:7b:12:5b:b3:f3:df:87:
1a:bc:f3:cf:c1:31:18:29:30:a1:10:a7:50:87:c3:26:7a:af:
98:61:85:68:01:5f:b6:ae:12:d7:81:f2:86:05:2c:ba:53:1c:
bc:57:dc:e5:9c:61:8c:18:35:41:3b:7a:4c:f6:cb:84:c6:62:
e8:4e:ad:27:2c:d8:ab:93:02:ab:df:18:e3:85:2f:2c:ae:cb:
84:52:d7:42:45:23:70:66:b3:a0:ad:c9:09:76:75:46:7f:2a:
57:72:e5:e1:eb:c0:65:16:69:69:a8:b8:30:72:5d:ad:c0:cf:
a9:63:24:35:3a:09:5a:c9:3f:04:3f:7d:44:f9:31:a3:14:b2:
bd:69:fb:c9:6c:f5:50:30:19:6d:36:cc:f3:ab:23:98:51:fe:
d5:3e:0a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:45:08 2025 by rpki-client