Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File: 33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier: T2fGx7ab+a3CYjJFHrPqD1xQe0UhASsAXlBusFQoU9E=
Subject key identifier: 32:09:BC:98:C8:A7:B2:91:23:4D:C8:2E:7E:3F:DA:50:A6:48:34:97
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial: 019879AF15049115882C3DAAF14B240E4C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 10:02:53 +0000
Manifest this update: Tue 05 Aug 2025 10:02:53 +0000
Manifest next update: Wed 06 Aug 2025 10:02:53 +0000
Files and hashes: 1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: kg5JhxiqOHHF3YWbmSTgmDLvZrzeclkvhh1uiIffK70=)
2: 3fEpeO8KRpblUKytupeE9QmRO10.roa (hash: J/sgD9Gkv93PRSGDC5y1FBEaffbfuEvNlwwRc1f17bc=)
3: IaFtNttSKZaCyjtsIDwe2puFZb8.roa (hash: 1NfM53YlIhgQ+Nv6uT/TNmq/fXmn5FfwUXrSWjD1Rm8=)
4: ynxlTzW2Z7OOg39MYnktecMbQ34.roa (hash: /1enFWpBnhSEiy75MLooqHcnc9RoQMKxSSL0rlifuAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:af:15:04:91:15:88:2c:3d:aa:f1:4b:24:0e:4c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Validity
Not Before: Aug 5 10:02:53 2025 GMT
Not After : Aug 6 10:02:53 2025 GMT
Subject: CN=3209bc98c8a7b291234dc82e7e3fda50a6483497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:9b:da:8b:56:d6:e4:59:71:87:c1:22:b9:
a4:dd:c8:6b:94:87:fe:c1:14:ac:eb:16:7b:05:78:
2b:67:9a:62:6b:6c:d9:f5:19:9b:bc:fe:69:c7:e6:
9a:bf:a0:14:fe:28:e7:30:de:db:53:6e:e9:45:a9:
a5:ce:c5:86:0a:f1:0e:cf:d0:b3:af:e2:d8:98:7b:
e7:16:0e:e1:0f:c7:c8:2a:b2:b3:24:1b:57:cb:40:
18:00:55:44:84:42:3d:c1:45:4d:b3:9c:d5:00:7c:
ba:99:d5:82:84:69:a4:c4:5e:53:6a:b4:0f:56:3b:
fb:a3:9e:a1:74:9e:29:34:7d:4b:09:b7:1e:c5:51:
77:20:ef:8f:89:3e:6f:26:38:e6:e5:27:90:fe:d1:
7f:ec:f8:4d:da:ee:8e:59:8d:2a:cf:6a:50:bb:e3:
49:af:06:43:4d:07:21:6e:6f:ac:4f:49:8f:fd:6d:
40:9a:04:f2:39:ea:dc:de:26:bf:26:5c:f2:9f:0d:
d5:74:de:a2:99:d7:b4:d6:15:0d:93:b4:a4:e8:aa:
eb:dc:b6:86:9a:50:a8:95:55:3e:21:b2:3b:31:88:
c6:e0:7c:ae:a1:38:7e:11:68:0c:15:44:d8:ae:59:
a7:99:ff:1a:c5:18:61:57:b3:79:4f:04:b5:df:85:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:09:BC:98:C8:A7:B2:91:23:4D:C8:2E:7E:3F:DA:50:A6:48:34:97
X509v3 Authority Key Identifier:
keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:04:f0:2f:82:f8:cb:1b:4c:b0:c8:b4:03:40:57:5e:2a:8e:
b9:9c:11:e0:84:9d:b3:0e:c0:8f:1f:e1:68:a4:64:f3:4e:1b:
bc:af:8f:e5:d5:e4:dd:93:0a:1b:09:47:46:b4:1d:c2:25:78:
bc:c6:42:6c:0f:40:e7:59:9d:64:b8:a9:ce:12:24:e4:ce:cb:
8a:0f:21:27:83:34:a2:70:ad:4d:a3:9d:70:02:66:e0:a0:c2:
ae:0d:61:da:3c:f9:17:99:8e:c7:20:61:90:e5:cb:80:7a:e9:
0d:cf:09:32:c4:e5:39:7b:e1:74:f7:93:04:66:99:5b:df:be:
49:a0:86:d6:22:e9:0d:af:a7:b9:b3:53:11:cd:83:f6:45:7b:
d5:74:f6:1f:fd:1f:b7:50:34:60:ff:f2:d1:71:c8:ad:16:6c:
37:e7:a6:e9:16:45:48:d8:5a:1f:38:68:f4:ac:dc:95:25:1d:
50:1a:ae:85:a3:75:5e:b5:bc:83:83:f9:84:5e:a5:fe:ef:40:
ca:03:26:47:dd:53:92:af:0c:b0:25:42:1c:34:b4:66:81:ec:
58:01:db:d9:15:1e:74:2c:dd:d4:a2:f3:08:0a:a3:af:3d:c2:
b2:06:2b:4d:73:2e:2a:93:6a:0c:44:95:59:e2:80:3f:94:5d:
c2:06:0d:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rxUEkRWILD2q8UskDkwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNzhlYzZiMGI5NjlhYTIyMjhmMTI1ZWRhYTQxOWJhY2Ri
YmYyNWIwHhcNMjUwODA1MTAwMjUzWhcNMjUwODA2MTAwMjUzWjAzMTEwLwYDVQQD
EygzMjA5YmM5OGM4YTdiMjkxMjM0ZGM4MmU3ZTNmZGE1MGE2NDgzNDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTCb2otW1uRZcYfBIrmk3chrlIf+
wRSs6xZ7BXgrZ5pia2zZ9RmbvP5px+aav6AU/ijnMN7bU27pRamlzsWGCvEOz9Cz
r+LYmHvnFg7hD8fIKrKzJBtXy0AYAFVEhEI9wUVNs5zVAHy6mdWChGmkxF5TarQP
Vjv7o56hdJ4pNH1LCbcexVF3IO+PiT5vJjjm5SeQ/tF/7PhN2u6OWY0qz2pQu+NJ
rwZDTQchbm+sT0mP/W1AmgTyOerc3ia/Jlzynw3VdN6imde01hUNk7Sk6Krr3LaG
mlColVU+IbI7MYjG4HyuoTh+EWgMFUTYrlmnmf8axRhhV7N5TwS134U4zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIJvJjIp7KRI03ILn4/2lCmSDSXMB8GA1UdIwQY
MBaAFN947GsLlpqiIo8SXtqkGbrNu/JbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kYmIwNDMtMzc3Yi00YzRiLWEwYTIt
N2U4YzU1MjZkZTdlLzEvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kYmIwNDMtMzc3Yi00YzRiLWEwYTItN2U4YzU1MjZkZTdl
LzEvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApATwL4L4
yxtMsMi0A0BXXiqOuZwR4ISdsw7Ajx/haKRk804bvK+P5dXk3ZMKGwlHRrQdwiV4
vMZCbA9A51mdZLipzhIk5M7Lig8hJ4M0onCtTaOdcAJm4KDCrg1h2jz5F5mOxyBh
kOXLgHrpDc8JMsTlOXvhdPeTBGaZW9++SaCG1iLpDa+nubNTEc2D9kV71XT2H/0f
t1A0YP/y0XHIrRZsN+em6RZFSNhaHzho9KzclSUdUBquhaN1XrW8g4P5hF6l/u9A
ygMmR91Tkq8MsCVCHDS0ZoHsWAHb2RUedCzd1KLzCAqjrz3CsgYrTXMuKpNqDESV
WeKAP5RdwgYNHQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:16:21 2025 by rpki-client