Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File: 33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier: EBPjgZAYc5L//xwW4RYq+JbGSmvrwRBKwPmfckT4hsg=
Subject key identifier: CE:D4:A3:33:6A:E2:DA:60:F9:6C:63:05:2C:5E:23:15:49:E7:42:48
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial: 019742C14C7C1D9272110091875F0FE03332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 01:00:53 +0000
Manifest this update: Fri 06 Jun 2025 01:00:53 +0000
Manifest next update: Sat 07 Jun 2025 01:00:53 +0000
Files and hashes: 1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: HQ4TG/wBy/ydSf9OsIco6AXU1I6eMz8PGJJT87Wo9wM=)
2: 3fEpeO8KRpblUKytupeE9QmRO10.roa (hash: J/sgD9Gkv93PRSGDC5y1FBEaffbfuEvNlwwRc1f17bc=)
3: IaFtNttSKZaCyjtsIDwe2puFZb8.roa (hash: 1NfM53YlIhgQ+Nv6uT/TNmq/fXmn5FfwUXrSWjD1Rm8=)
4: ynxlTzW2Z7OOg39MYnktecMbQ34.roa (hash: /1enFWpBnhSEiy75MLooqHcnc9RoQMKxSSL0rlifuAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:c1:4c:7c:1d:92:72:11:00:91:87:5f:0f:e0:33:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Validity
Not Before: Jun 6 01:00:53 2025 GMT
Not After : Jun 7 01:00:53 2025 GMT
Subject: CN=ced4a3336ae2da60f96c63052c5e231549e74248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4c:8b:39:91:b4:52:74:c9:b9:0b:6f:18:33:
f3:6c:8c:ae:92:4d:32:ca:20:87:fd:06:c9:3d:9f:
ce:5c:e1:59:7d:33:0a:df:92:18:33:84:ec:3c:20:
70:cf:41:9c:cb:70:ca:2b:a4:2b:cf:f6:7f:7b:a7:
d9:99:75:6a:a4:38:a3:38:1a:4b:3a:05:03:12:3f:
fc:0d:25:b0:36:51:02:2d:f5:e7:43:a1:5f:34:ce:
f6:50:7c:d3:9a:0e:03:0f:bb:b5:1a:5b:b1:76:49:
92:51:b8:72:1a:80:10:98:0d:60:5a:99:a1:42:c8:
33:7e:8b:4b:94:3c:59:e4:0c:5f:da:0e:a4:42:30:
12:e3:f5:c4:94:a9:88:0a:de:59:32:f8:9d:06:fd:
85:c4:d2:37:17:0b:d7:59:82:ad:bf:06:a0:96:69:
65:b6:23:ed:5a:00:70:9a:ba:03:f1:3d:a5:73:7d:
0f:e1:f0:e1:d4:6d:1c:97:44:44:f7:03:fd:ce:a3:
e6:0e:7c:ce:f4:32:12:6b:c8:f8:22:f4:33:61:aa:
62:c5:3c:18:6d:7b:d8:6d:e4:a1:ff:06:76:58:43:
b3:f1:a2:c8:2c:97:4d:90:b1:d6:41:96:c4:fd:d5:
15:80:b8:0a:a5:d6:0e:49:35:00:18:ce:62:15:cf:
7e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D4:A3:33:6A:E2:DA:60:F9:6C:63:05:2C:5E:23:15:49:E7:42:48
X509v3 Authority Key Identifier:
keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1b:f1:a7:c2:37:ac:c9:d8:f6:52:4d:ce:d3:d4:c4:78:c6:
1c:2a:65:18:81:22:be:1c:e7:45:f6:a3:9b:e6:7f:5b:d4:84:
4f:e1:e5:a1:1b:b6:56:97:a2:ed:1f:76:c5:0a:f7:b3:b4:45:
c9:98:cd:e8:41:2d:d5:ef:84:68:82:79:e3:48:d0:28:8b:d2:
3c:f2:cb:60:26:ed:78:f3:3f:1f:8f:15:23:e8:1c:34:16:be:
de:98:e8:34:73:1c:6e:b7:d7:84:3e:da:1a:2e:a7:2d:ec:e3:
cd:4c:86:9e:b9:65:72:a9:ec:a4:ea:e2:9e:b7:46:cb:a1:1d:
22:d9:da:51:9d:97:a1:26:06:d8:c1:d5:16:f4:17:5f:b3:9e:
61:ef:cf:50:54:c3:86:13:c0:d4:3c:5f:ba:84:dc:98:05:7f:
0e:d4:a7:84:ec:ce:7b:48:c3:07:c4:9b:d6:6c:a7:e0:e6:1f:
c7:1b:3f:e6:57:13:d0:84:15:61:57:2e:d2:5f:7e:27:94:f9:
ae:f9:60:d5:dc:98:a4:33:c9:de:e7:80:c3:db:f0:8a:0f:ea:
4d:39:f2:b5:2c:16:45:a7:32:3b:58:e9:b4:c9:ff:5a:65:90:
c2:13:e1:49:46:be:a3:a2:0c:3f:9a:7a:9c:81:2e:16:31:87:
2e:48:c8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:27:15 2025 by rpki-client