Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File: 33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier: eLFGUvxBNakWGh1iLxRz1II09/5jM6A5m4foyGSUQ6I=
Subject key identifier: 7C:9C:96:5F:10:19:33:C1:08:35:FF:89:1B:51:3E:6E:C2:7E:65:97
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial: 01984776EE7CB1C8288B71E68AD4BDE67A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 16:00:32 +0000
Manifest this update: Sat 26 Jul 2025 16:00:32 +0000
Manifest next update: Sun 27 Jul 2025 16:00:32 +0000
Files and hashes: 1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: NHXII+POXe1MRHtDes6KDEfqiBP6ybtLeehSQzLUtes=)
2: 3fEpeO8KRpblUKytupeE9QmRO10.roa (hash: J/sgD9Gkv93PRSGDC5y1FBEaffbfuEvNlwwRc1f17bc=)
3: IaFtNttSKZaCyjtsIDwe2puFZb8.roa (hash: 1NfM53YlIhgQ+Nv6uT/TNmq/fXmn5FfwUXrSWjD1Rm8=)
4: ynxlTzW2Z7OOg39MYnktecMbQ34.roa (hash: /1enFWpBnhSEiy75MLooqHcnc9RoQMKxSSL0rlifuAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:ee:7c:b1:c8:28:8b:71:e6:8a:d4:bd:e6:7a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Validity
Not Before: Jul 26 16:00:32 2025 GMT
Not After : Jul 27 16:00:32 2025 GMT
Subject: CN=7c9c965f101933c10835ff891b513e6ec27e6597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:60:80:5e:f9:a9:0f:f5:d5:23:93:96:6a:
9e:89:61:26:cd:03:04:38:dc:79:97:3e:ca:b8:6c:
b9:42:4a:a6:f7:a3:7e:4d:82:57:6e:aa:de:6f:d4:
0c:7a:dd:c4:c4:ea:65:74:21:0a:b9:19:43:b7:47:
b0:e4:dc:9e:86:b5:3b:35:66:46:1e:fc:55:db:50:
82:fb:26:72:80:0c:3c:b9:d6:06:57:81:9b:b7:21:
8e:57:7d:dc:e8:3f:2c:39:ca:38:ff:64:bd:9a:87:
c6:6a:0e:7c:d3:d5:9e:de:30:49:14:a0:4c:99:33:
69:e1:e9:d3:b7:b5:53:d8:74:c8:c6:22:c0:87:01:
9b:a0:f5:af:21:c9:a8:a9:ed:42:8a:99:ee:26:9f:
e7:37:df:ec:ad:72:07:a1:f4:10:b9:9c:c0:3c:34:
f1:ea:fc:ea:47:44:04:4e:b3:fe:68:1b:5b:26:24:
71:4e:c4:d2:04:31:49:24:ed:4f:10:c2:fa:86:d8:
e3:2e:4a:8b:d2:79:d7:0b:db:2b:db:65:b6:7a:8c:
6f:4a:c7:73:e7:10:ee:b1:cd:bf:a9:0b:d8:de:fe:
43:cf:50:50:9a:13:89:8b:37:62:25:08:fc:b3:ba:
50:c8:81:c0:68:a6:fa:f4:55:29:cd:38:46:2b:96:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9C:96:5F:10:19:33:C1:08:35:FF:89:1B:51:3E:6E:C2:7E:65:97
X509v3 Authority Key Identifier:
keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1b:0e:f7:bf:9a:f7:c8:e6:ad:1f:af:64:f4:d7:62:8e:f3:
18:f5:cd:75:fa:25:19:06:31:ca:1e:9a:ed:ae:bc:19:99:0a:
b0:eb:c0:46:60:c3:d5:3b:9a:39:04:fc:3a:a9:65:6c:11:ec:
17:8e:3a:95:6c:73:c0:e1:95:d5:27:3d:d3:7d:10:84:6c:28:
5f:80:02:6d:45:8f:e1:c4:6e:1a:c6:2e:f5:bf:e3:df:47:3d:
56:87:f2:2a:37:37:e1:74:be:4f:f8:6a:a8:1a:c8:93:a1:53:
cc:46:d3:ae:de:96:d1:30:bd:d9:52:eb:67:b8:32:ba:47:cd:
3e:aa:51:e8:6a:f4:1d:2b:0b:0d:05:26:b7:01:6b:74:20:fe:
ca:7f:b4:65:99:95:2c:98:e7:54:08:fa:9e:5a:d5:51:84:3a:
34:cf:82:1d:79:06:db:6c:84:4e:4f:cd:a7:80:ac:e6:4c:52:
52:ea:27:f7:ad:15:8b:70:33:24:8d:71:c5:e8:65:f5:da:37:
aa:3b:01:eb:5d:56:2c:30:7c:b4:db:08:e9:63:4c:e9:f4:0a:
3f:65:e4:d3:65:c9:e6:95:45:b6:a7:b2:4e:f9:6b:9e:8f:bf:
05:f5:9f:aa:8f:e1:84:2c:8c:a1:65:44:fd:ae:9b:b2:aa:f3:
25:f0:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:05:59 2025 by rpki-client