Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File: 33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier: NncNojcoXQUdX9uo10rds6JpfXNAz++RktIoAMjaaDs=
Subject key identifier: 3E:F7:C2:20:8E:06:E7:12:0C:5F:BF:45:7F:1E:70:80:BE:40:13:73
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial: 0196722F17079688F09F7B186D57EAB213EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 13:00:10 +0000
Manifest this update: Sat 26 Apr 2025 13:00:10 +0000
Manifest next update: Sun 27 Apr 2025 13:00:10 +0000
Files and hashes: 1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: yFZd7Ksj0mrUBNsZaIJR/4aL0M6AtMpzil0KnjlMNjY=)
2: 3fEpeO8KRpblUKytupeE9QmRO10.roa (hash: J/sgD9Gkv93PRSGDC5y1FBEaffbfuEvNlwwRc1f17bc=)
3: IaFtNttSKZaCyjtsIDwe2puFZb8.roa (hash: 1NfM53YlIhgQ+Nv6uT/TNmq/fXmn5FfwUXrSWjD1Rm8=)
4: ynxlTzW2Z7OOg39MYnktecMbQ34.roa (hash: /1enFWpBnhSEiy75MLooqHcnc9RoQMKxSSL0rlifuAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:17:07:96:88:f0:9f:7b:18:6d:57:ea:b2:13:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Validity
Not Before: Apr 26 13:00:10 2025 GMT
Not After : Apr 27 13:00:10 2025 GMT
Subject: CN=3ef7c2208e06e7120c5fbf457f1e7080be401373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:dc:37:1c:3a:51:20:be:ba:de:1f:6e:c0:
74:08:96:cd:25:9f:6f:88:25:e4:55:5d:b9:d7:0a:
21:45:0c:ed:41:ce:85:e9:df:b2:19:51:1a:a9:12:
82:cf:e9:0a:2b:42:43:ab:d9:0d:68:af:23:8c:ce:
0e:3b:0c:c2:e2:60:75:1b:b2:4a:24:d6:40:22:be:
b8:55:ec:ab:2e:3b:7e:cc:ee:f0:83:79:15:70:de:
01:80:01:4c:fd:65:bc:d2:09:5a:9f:46:a9:a0:a2:
9d:46:8a:3c:31:36:c9:85:32:96:04:e7:f6:2d:75:
f3:32:b1:1f:96:15:ee:70:4b:da:dc:4e:4a:05:01:
7a:cd:9b:ef:eb:16:9e:55:c0:fe:35:a6:96:ce:b0:
89:d3:cf:d5:0e:d2:af:1a:95:0a:dc:23:7b:64:9d:
00:bb:bf:71:99:f2:17:5b:08:92:67:fd:e6:78:f2:
8b:6c:2c:ed:2a:2d:6d:ce:a2:7d:11:e0:ed:be:da:
e0:b4:03:57:93:73:ef:90:5d:ba:d2:4e:bc:c7:12:
d5:1c:08:34:fb:8c:78:ac:23:85:a3:31:4d:81:0f:
6d:f5:fb:63:48:a3:e3:cf:1a:68:b5:74:e6:14:22:
4e:15:77:a5:7d:04:c2:c9:d5:6f:90:20:98:cc:f2:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F7:C2:20:8E:06:E7:12:0C:5F:BF:45:7F:1E:70:80:BE:40:13:73
X509v3 Authority Key Identifier:
keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a8:de:85:45:bd:5b:c1:b6:b1:08:4a:0b:22:b9:47:b4:8e:
42:70:5a:52:d5:5a:c7:2f:55:b8:20:7b:19:73:89:e2:a1:10:
25:60:fe:3c:07:67:75:fc:6d:b2:9d:67:4f:65:5d:23:7c:5a:
c2:1a:b8:9e:ff:a4:68:8a:40:b4:3e:f7:60:54:fd:4e:2d:38:
5d:01:cb:2c:00:78:fe:3b:70:e2:ae:74:92:43:1a:fa:24:a0:
04:c1:ea:f3:09:09:04:dd:01:a6:15:28:7c:13:24:1c:bc:04:
db:af:64:f4:ea:4a:6f:90:62:e5:36:ca:16:3e:81:98:ad:78:
0d:f3:ba:eb:2e:99:bd:23:d0:5e:fe:70:9a:9d:de:cb:35:13:
9a:c9:95:15:52:cb:79:6c:2c:40:8c:23:14:7c:2c:04:b5:3f:
6a:25:5f:48:a1:76:dc:cb:14:e8:bf:d7:61:32:b0:b2:c9:60:
fd:35:f6:8c:49:67:77:8a:9f:60:11:18:d8:e7:4e:81:58:28:
67:0e:21:fe:25:5f:27:be:b0:97:7f:62:bc:53:b0:8d:fb:88:
07:38:99:ea:2c:18:4a:bc:33:da:ae:54:d5:e0:bb:d6:21:70:
7a:a4:85:4e:99:77:01:99:86:b3:46:d9:3b:56:e0:d9:4a:51:
57:e7:42:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:09:24 2025 by rpki-client