Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
File: 339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json)
Hash identifier: bD8xzzxG/yKdPmK/4/rFRZr9GcRTROxXtqL97+ibZEM=
Subject key identifier: CA:97:19:11:60:CE:9F:0B:43:D6:EA:AD:E2:0D:87:5D:45:9A:9F:34
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Certificate issuer: /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial: 0196ACFA96D615E37E19631C27C0599F9D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
Manifest number: 1228
Signing time: Wed 07 May 2025 23:00:25 +0000
Manifest this update: Wed 07 May 2025 23:00:25 +0000
Manifest next update: Thu 08 May 2025 23:00:25 +0000
Files and hashes: 1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: isl+aB9ZuR/f9ABEFc4faNtnkb0hQuKrsJWunblktGk=)
2: h8Gl2OsdLuWPWtrNcU8n0JlSjzU.roa (hash: evSWiyr6r/rxtz4+EcFa39VIdmSuUvtGUXcbAAeqm0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:fa:96:d6:15:e3:7e:19:63:1c:27:c0:59:9f:9d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Validity
Not Before: May 7 23:00:25 2025 GMT
Not After : May 8 23:00:25 2025 GMT
Subject: CN=ca97191160ce9f0b43d6eaade20d875d459a9f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:00:bd:2e:c6:9a:c1:5f:84:6b:9e:db:9c:
17:0d:b4:8c:01:63:3f:66:8c:bb:66:45:5b:57:b3:
7d:dd:73:ec:9c:18:9d:f1:b8:cc:63:98:63:d4:52:
d8:09:14:be:6c:ad:9c:b2:9d:6b:68:5a:63:56:70:
75:ce:f3:f3:b6:16:ee:85:e1:f2:52:79:d5:43:28:
3a:f3:d6:c9:a8:ee:04:af:c5:9f:6c:84:49:0b:a1:
03:a3:e2:a2:11:46:c6:5d:8d:4c:12:b9:a9:c8:93:
a1:18:b6:d1:23:8e:f8:0b:e3:67:04:49:05:cb:6a:
84:86:56:ca:99:bd:ed:e6:71:86:fb:83:6a:ba:55:
6d:56:64:46:b6:1b:62:92:2a:84:5b:9e:a6:b7:f9:
8a:33:04:7c:15:b6:10:ef:be:8f:58:5c:a6:27:3a:
da:23:96:fa:93:c0:88:7d:19:29:50:9f:78:ba:73:
f6:42:94:a0:37:f1:12:79:5d:c1:b4:66:07:16:8d:
df:34:29:18:fe:7d:a1:58:f5:8a:e1:3c:c3:34:6d:
45:49:44:7c:6a:22:5e:58:ec:ac:e9:c4:71:2d:93:
41:d9:ad:fd:5d:5b:ad:4b:4d:e4:0f:0b:59:fc:8c:
ae:74:9c:1f:a5:28:21:6b:b9:1c:d8:4d:5b:b1:2f:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:97:19:11:60:CE:9F:0B:43:D6:EA:AD:E2:0D:87:5D:45:9A:9F:34
X509v3 Authority Key Identifier:
keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4d:ba:01:0d:6a:7c:e0:4b:7f:ad:5c:a4:ff:dc:6c:fa:03:
74:ea:ef:fe:8d:92:aa:51:59:36:56:e6:9c:19:a2:8b:27:ff:
38:29:cf:c0:a4:93:18:63:89:fd:91:49:ff:aa:ed:ea:50:98:
e4:cd:58:83:18:0b:6b:61:56:e8:08:90:2f:5e:79:47:41:90:
82:10:82:47:42:e0:94:d6:87:ed:84:ba:c8:4a:f6:29:59:1d:
09:04:f7:f8:73:01:18:cd:0e:0f:da:00:87:8c:2c:93:e5:7c:
b9:3f:ec:ff:51:c4:0c:7f:f3:14:5e:6a:b5:67:e9:f4:64:9e:
6e:7c:1d:c6:26:20:98:e6:0a:2d:88:5e:c9:7f:96:95:de:d4:
e1:7a:ad:3c:7d:25:7b:80:ef:5f:88:29:a8:9d:52:a2:62:a2:
cb:33:d6:a9:18:1f:87:72:48:18:9f:8c:4e:ab:ad:8d:12:74:
92:9b:5a:f2:ee:2b:da:e3:86:02:a1:be:e9:fc:a6:ea:f0:59:
a2:7a:87:59:d2:fa:d7:44:2f:1b:85:55:0d:05:21:5b:ce:c6:
a3:37:48:90:4d:f0:80:7d:a2:e8:93:3b:cd:af:0c:45:e8:06:
07:e2:ce:a3:b6:a8:31:57:31:f6:92:e8:9a:f7:8c:bf:82:73:
a0:2c:cb:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZas+pbWFeN+GWMcJ8BZn52fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2Y1ZWI4ODE3ZjJkYTk3ZjY2NTUwNzY4M2I1YzQ1YTc0
ZDBjYTAwHhcNMjUwNTA3MjMwMDI1WhcNMjUwNTA4MjMwMDI1WjAzMTEwLwYDVQQD
EyhjYTk3MTkxMTYwY2U5ZjBiNDNkNmVhYWRlMjBkODc1ZDQ1OWE5ZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBQAvS7GmsFfhGue25wXDbSMAWM/
Zoy7ZkVbV7N93XPsnBid8bjMY5hj1FLYCRS+bK2csp1raFpjVnB1zvPzthbuheHy
UnnVQyg689bJqO4Er8WfbIRJC6EDo+KiEUbGXY1MErmpyJOhGLbRI474C+NnBEkF
y2qEhlbKmb3t5nGG+4NqulVtVmRGthtikiqEW56mt/mKMwR8FbYQ776PWFymJzra
I5b6k8CIfRkpUJ94unP2QpSgN/ESeV3BtGYHFo3fNCkY/n2hWPWK4TzDNG1FSUR8
aiJeWOys6cRxLZNB2a39XVutS03kDwtZ/IyudJwfpSgha7kc2E1bsS8r5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqXGRFgzp8LQ9bqreINh11Fmp80MB8GA1UdIwQY
MBaAFN9/XriBfy2pf2ZVB2g7XEWnTQygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84NTdkOWMtNTk2ZS00Yjg5LTlmMWMt
ZjkyMTI4YmU4Yjc5LzEvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC84NTdkOWMtNTk2ZS00Yjg5LTlmMWMtZjkyMTI4YmU4Yjc5
LzEvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkU26AQ1q
fOBLf61cpP/cbPoDdOrv/o2SqlFZNlbmnBmiiyf/OCnPwKSTGGOJ/ZFJ/6rt6lCY
5M1YgxgLa2FW6AiQL155R0GQghCCR0LglNaH7YS6yEr2KVkdCQT3+HMBGM0OD9oA
h4wsk+V8uT/s/1HEDH/zFF5qtWfp9GSebnwdxiYgmOYKLYheyX+Wld7U4XqtPH0l
e4DvX4gpqJ1SomKiyzPWqRgfh3JIGJ+MTqutjRJ0kpta8u4r2uOGAqG+6fym6vBZ
onqHWdL610QvG4VVDQUhW87GozdIkE3wgH2i6JM7za8MRegGB+LOo7aoMVcx9pLo
mveMv4JzoCzLEg==
-----END CERTIFICATE-----
Generated at Thu May 8 08:30:04 2025 by rpki-client