Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
File: 339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json)
Hash identifier: Fk8nn6wpoM2Bj6DPHQuwqQ5QczxQJ8MQJ//4KhMafVI=
Subject key identifier: FF:81:92:26:52:17:70:EE:EE:82:4C:A8:89:D8:93:22:30:1B:8D:80
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Certificate issuer: /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial: 0197B77CD5BB8AE4D7BA10393693AFDD81DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
Manifest number: 12B2
Signing time: Sat 28 Jun 2025 17:01:41 +0000
Manifest this update: Sat 28 Jun 2025 17:01:41 +0000
Manifest next update: Sun 29 Jun 2025 17:01:41 +0000
Files and hashes: 1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: SlLokR3K9BuphCMn1xxjxbRvOAHdh+95RvagDje1cAA=)
2: h8Gl2OsdLuWPWtrNcU8n0JlSjzU.roa (hash: evSWiyr6r/rxtz4+EcFa39VIdmSuUvtGUXcbAAeqm0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d5:bb:8a:e4:d7:ba:10:39:36:93:af:dd:81:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Validity
Not Before: Jun 28 17:01:41 2025 GMT
Not After : Jun 29 17:01:41 2025 GMT
Subject: CN=ff819226521770eeee824ca889d89322301b8d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:e1:fc:4d:28:53:34:9a:58:52:c6:1f:96:
66:ab:c8:5d:bf:62:fe:00:9e:e3:a3:d0:82:48:49:
a1:06:80:fb:ce:ee:b0:50:a4:f7:4c:48:0f:3b:81:
38:83:41:b9:da:ae:75:f2:27:57:48:5f:d1:7a:f6:
3e:f0:b5:cb:28:f4:08:f6:3b:72:06:e8:ca:4b:a7:
5c:b2:34:ce:71:a2:15:01:07:fc:0c:61:ed:53:c5:
fb:1d:c0:34:23:94:f2:f7:85:07:7b:ea:bb:9e:4d:
54:e0:47:a1:0b:c8:97:22:6d:da:69:a1:96:b5:a3:
e7:7c:5c:78:57:dc:95:ab:cf:0b:8a:0d:37:94:26:
2b:0a:12:8f:1c:59:63:8a:d5:f2:25:32:28:42:fd:
89:3f:b5:21:f1:02:a1:73:dd:5f:c0:eb:23:94:ea:
e8:70:46:7a:22:df:c9:aa:75:d8:27:4c:16:f9:c6:
7d:42:8a:e8:76:d3:8e:ae:fe:ef:db:79:eb:d0:de:
dd:85:f0:5a:11:51:6c:2d:3a:c8:9b:cd:22:a4:1c:
dc:e8:04:73:a2:dc:b4:bb:f1:c5:0b:0c:54:81:c6:
0b:1a:70:85:07:ea:41:74:a6:1c:1b:97:c6:ed:c4:
fe:34:5c:3d:e5:02:63:45:0b:34:de:1a:77:6f:f0:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:81:92:26:52:17:70:EE:EE:82:4C:A8:89:D8:93:22:30:1B:8D:80
X509v3 Authority Key Identifier:
keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:eb:e4:e5:fc:90:46:fc:df:8f:5f:e0:6b:76:6b:ef:d0:a3:
fc:4c:6b:ce:8f:41:a7:59:74:a0:09:96:bb:11:c2:97:54:ca:
c5:56:b0:3f:2f:6d:8a:6b:d2:0d:7a:19:92:78:14:d7:21:11:
1d:13:ba:d9:29:cd:1a:82:15:65:7c:16:04:de:96:57:71:f2:
70:d8:1d:5c:a5:27:3d:b0:1a:98:6d:0d:54:c2:d6:39:70:62:
7b:7a:7f:c6:02:e2:97:ae:79:ff:48:fa:ee:88:77:cc:81:1e:
b3:57:70:18:19:10:b1:44:20:d7:c0:72:dd:16:7f:d0:70:5c:
d0:ce:10:23:2e:48:d7:3c:c9:b7:47:b8:c2:54:cf:56:e8:c3:
1c:fc:89:17:52:50:bb:84:ba:ff:da:69:90:46:e3:4f:ce:60:
f6:12:30:99:c3:a6:b3:73:18:af:38:87:7a:86:cd:e1:d8:4d:
45:18:0e:eb:6c:e2:3e:88:39:70:89:fa:e9:38:50:26:7f:af:
49:d1:56:3d:ff:c5:c0:37:f8:d2:c2:89:d4:28:00:81:d2:7e:
c1:35:ad:4d:ff:f0:5c:c7:73:3f:0c:ab:e7:b9:b6:07:3c:83:
e6:16:a7:1e:e9:96:e7:a4:0d:a8:de:ed:d6:4a:ac:86:51:b4:
e3:76:a1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:58 2025 by rpki-client