Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier: neW0j+QvrCIs3d7P8Qmj0CywSfXiy0nSlQNKKab27+g=
Subject key identifier: 05:4E:C7:C5:A9:5F:7B:0E:26:D5:D0:74:49:58:03:59:6F:02:03:3A
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 0197CA5E74A9CD87884048FF2B3D5E56C3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number: 04A4
Signing time: Wed 02 Jul 2025 09:01:17 +0000
Manifest this update: Wed 02 Jul 2025 09:01:17 +0000
Manifest next update: Thu 03 Jul 2025 09:01:17 +0000
Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: 3X+NWzKrjznOxFKH/fjD9K86/cKfHkD6SsKnTDQMvVc=)
2: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (hash: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=)
3: DoutZlvm4IbzXZXDTFrxAAquQLg.roa (hash: qnpQEntxymSrGJJO5sN1jep0qMMWrabFq1224NHJCYE=)
4: Jnp54uEZWEbzo5JH40T_lJ9C9Z0.roa (hash: Fnatp1DYGIx3gW9yEtvyiEfpUNIXk3xQmBuqhYqPnxI=)
5: vmUg0yzYcnRJZC2n9pSGw6JlB2A.roa (hash: f45/pAD/SVLyT8PSsTHGZFNyd/9e/fwYtYXEyg22gkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:74:a9:cd:87:88:40:48:ff:2b:3d:5e:56:c3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Jul 2 09:01:17 2025 GMT
Not After : Jul 3 09:01:17 2025 GMT
Subject: CN=054ec7c5a95f7b0e26d5d074495803596f02033a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:fa:e9:d3:0c:cf:27:6b:78:93:d7:65:c9:
83:40:31:9f:c9:c2:c0:94:c8:5a:84:a6:1d:db:b7:
d4:ac:f4:b5:63:26:01:93:d1:9d:4f:c7:3f:f1:e0:
ff:c2:25:ac:c8:b4:b9:f5:c7:a5:41:fa:3c:1d:8b:
1c:82:73:85:65:5d:60:3b:bf:8a:01:c6:9a:fe:80:
63:38:b0:87:ec:54:90:1f:93:00:c6:bd:25:89:f2:
0f:7e:da:19:1c:f7:6d:97:08:de:f1:79:d9:12:81:
44:3d:2c:19:e0:02:8c:84:a2:21:a9:e8:9b:f5:f1:
0f:f0:88:99:50:12:cc:c1:12:27:61:b9:86:56:a9:
c7:2f:40:4e:0b:dd:fd:7d:03:31:8c:9a:33:41:1a:
0a:3c:da:1b:5a:23:77:9b:ce:e0:89:de:b4:36:2b:
11:72:ec:e0:ae:6b:78:65:fe:48:e9:1f:df:61:6e:
1b:48:b4:4e:95:9b:94:a4:a7:7d:1e:a9:37:e8:8a:
04:5f:4a:e1:a2:25:af:48:4a:84:05:6f:27:7b:de:
55:4f:f3:fa:1c:39:60:41:9d:5d:25:4a:9e:76:09:
9a:93:e1:09:c3:49:8e:f3:fc:d3:a1:50:e2:99:c6:
d0:85:ff:06:83:32:8a:d7:63:e7:bf:5f:85:cb:3a:
3c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4E:C7:C5:A9:5F:7B:0E:26:D5:D0:74:49:58:03:59:6F:02:03:3A
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:85:93:2e:a7:43:15:77:6c:07:f0:a9:71:db:b5:80:16:c8:
19:00:13:66:7e:fe:f8:7d:ed:08:a4:05:1b:22:94:19:5a:c2:
23:26:1c:93:6e:06:aa:33:6f:87:f4:1b:a8:b3:0a:2b:ee:3f:
67:3f:20:fe:70:e6:fc:08:25:a5:29:9d:3e:56:94:e6:f7:c6:
b6:cc:d6:70:37:7d:ca:cb:5e:b9:d5:17:ad:05:45:2e:c9:f9:
80:26:a4:b9:77:5c:66:b4:44:4a:ac:dc:20:cd:ce:d6:fa:aa:
97:b3:f4:6c:45:94:5d:5d:42:63:95:f2:96:cc:09:3b:85:55:
bc:71:56:68:0c:22:5f:d8:e6:a5:87:74:08:69:96:1f:2a:cb:
44:7f:80:1c:48:29:f9:85:f1:84:b8:b9:47:27:13:0f:38:9b:
c1:05:41:ed:8e:11:d9:08:c4:76:3e:09:51:17:e3:69:43:32:
01:e2:90:13:2f:8f:f8:37:49:99:2c:77:a0:03:ed:6b:99:e2:
e5:c8:2c:1a:1f:29:1f:5d:b4:4f:85:ac:4f:4f:c2:ee:f3:37:
96:b9:97:cc:0e:93:98:c3:83:c5:c5:9b:22:34:f9:82:54:d2:
de:bf:7b:7d:fc:49:c7:0b:a8:21:66:d5:da:a5:f6:6f:d8:02:
b3:2b:2b:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKXnSpzYeIQEj/Kz1eVsPbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk
NjYyNjkwHhcNMjUwNzAyMDkwMTE3WhcNMjUwNzAzMDkwMTE3WjAzMTEwLwYDVQQD
EygwNTRlYzdjNWE5NWY3YjBlMjZkNWQwNzQ0OTU4MDM1OTZmMDIwMzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Lj66dMMzydreJPXZcmDQDGfycLA
lMhahKYd27fUrPS1YyYBk9GdT8c/8eD/wiWsyLS59celQfo8HYscgnOFZV1gO7+K
Acaa/oBjOLCH7FSQH5MAxr0lifIPftoZHPdtlwje8XnZEoFEPSwZ4AKMhKIhqeib
9fEP8IiZUBLMwRInYbmGVqnHL0BOC939fQMxjJozQRoKPNobWiN3m87gid60NisR
cuzgrmt4Zf5I6R/fYW4bSLROlZuUpKd9Hqk36IoEX0rhoiWvSEqEBW8ne95VT/P6
HDlgQZ1dJUqedgmak+EJw0mO8/zToVDimcbQhf8GgzKK12Pnv1+Fyzo8zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVOx8WpX3sOJtXQdElYA1lvAgM6MB8GA1UdIwQY
MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt
NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4
LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYWTLqdD
FXdsB/Cpcdu1gBbIGQATZn7++H3tCKQFGyKUGVrCIyYck24GqjNvh/QbqLMKK+4/
Zz8g/nDm/AglpSmdPlaU5vfGtszWcDd9ysteudUXrQVFLsn5gCakuXdcZrRESqzc
IM3O1vqql7P0bEWUXV1CY5XylswJO4VVvHFWaAwiX9jmpYd0CGmWHyrLRH+AHEgp
+YXxhLi5RycTDzibwQVB7Y4R2QjEdj4JURfjaUMyAeKQEy+P+DdJmSx3oAPta5ni
5cgsGh8pH120T4WsT0/C7vM3lrmXzA6TmMODxcWbIjT5glTS3r97ffxJxwuoIWbV
2qX2b9gCsysrrQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 16:11:36 2025 by rpki-client