Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier: pE2EXuoVml+Mn1UmcHGXb0hMIqsH75825HNuxnh+wVI=
Subject key identifier: 8D:FB:E7:D8:D5:9A:F7:C7:D1:B1:D3:1A:FF:EE:2B:D7:2D:B0:DF:B4
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 0196D40898D385BE042074082E5A3E893871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number: 0423
Signing time: Thu 15 May 2025 13:00:55 +0000
Manifest this update: Thu 15 May 2025 13:00:55 +0000
Manifest next update: Fri 16 May 2025 13:00:55 +0000
Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: 7/+w/pLELRpeAg8L94jkK9fxzZz/lN197epXRa69uc0=)
2: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (hash: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=)
3: vmUg0yzYcnRJZC2n9pSGw6JlB2A.roa (hash: f45/pAD/SVLyT8PSsTHGZFNyd/9e/fwYtYXEyg22gkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:08:98:d3:85:be:04:20:74:08:2e:5a:3e:89:38:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: May 15 13:00:55 2025 GMT
Not After : May 16 13:00:55 2025 GMT
Subject: CN=8dfbe7d8d59af7c7d1b1d31affee2bd72db0dfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cb:66:ff:b0:4f:00:4e:04:e3:a6:7e:93:36:
c7:e3:c6:fc:b2:9f:27:15:53:fd:e7:dd:75:d3:0f:
b6:e6:a3:56:7a:fe:46:a2:45:ad:d8:21:cb:1e:6f:
8e:71:a1:2b:4e:5e:06:1c:06:cf:e4:2f:59:ef:ac:
57:d2:f8:ed:99:c3:4f:be:c6:e5:1f:3b:a8:98:6c:
f3:91:8d:f0:69:ca:ac:99:5e:ed:28:e0:7d:cd:d6:
92:d8:17:a5:27:34:5d:f1:8e:be:27:9c:c4:90:ab:
38:23:d5:b7:b7:1a:c2:00:c9:41:56:a4:e6:45:0c:
ff:e1:28:9d:8e:5a:00:11:fd:86:bd:5e:06:aa:7b:
01:f9:e6:46:2f:22:55:3a:a7:b0:69:10:ff:e4:a7:
2c:3d:81:d4:58:f5:a5:74:92:20:10:03:04:d9:bb:
f0:c1:87:56:93:ae:29:2f:cc:d3:7c:8d:a6:94:29:
6f:32:ff:8e:b7:62:3c:c2:03:3e:f7:23:16:ac:80:
04:ce:fd:23:2e:c9:b4:e8:4d:a2:40:ef:7b:4f:a8:
0e:99:e1:b2:d7:51:68:b5:4d:2a:71:a3:72:b0:0d:
26:59:fe:7b:36:cf:77:94:3e:d4:d0:75:77:94:5f:
c8:1b:29:fd:84:fb:c8:5b:03:a0:f8:5b:91:28:2c:
3d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FB:E7:D8:D5:9A:F7:C7:D1:B1:D3:1A:FF:EE:2B:D7:2D:B0:DF:B4
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ed:a8:5e:37:2d:a5:b4:08:54:a8:5e:93:a3:9d:c6:28:34:
38:16:c5:f6:97:ff:f6:f2:cc:cb:b5:62:cf:22:fe:13:b5:3d:
ca:3a:45:f2:16:11:41:1a:d3:57:05:fe:3a:10:97:dd:d3:0c:
62:29:dc:30:47:cb:3b:cf:04:c7:7d:24:2f:5e:57:5e:a5:bb:
48:f5:30:25:d2:43:25:3c:ab:6a:ff:5b:75:16:fe:ad:c7:a7:
24:44:d6:49:48:54:b8:3f:b4:0c:70:e8:cb:67:ed:c6:47:ee:
74:05:66:81:ab:eb:73:01:34:e6:e3:d4:88:6f:4d:f2:5a:4d:
73:e5:4a:2c:eb:7e:6f:f4:01:45:4c:c8:08:99:42:f0:8e:76:
6a:cf:61:b6:70:4b:bc:1e:22:c8:f8:c1:a0:bb:3e:50:43:5c:
22:05:81:ec:ee:31:8b:15:6f:f5:4e:50:5c:65:d5:2c:72:66:
70:a2:b9:c8:77:83:4c:3e:6e:c1:89:d1:b1:a1:23:5f:12:5b:
0d:71:6f:64:74:d8:5e:e3:0b:82:e9:89:e3:30:14:ef:4c:81:
ab:19:39:bf:0f:82:0f:3f:67:dc:61:4f:3d:6b:cd:cf:e4:59:
f4:da:e0:a4:4a:27:a5:5c:8b:ab:e7:91:41:33:82:75:a2:89:
7f:45:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:59:40 2025 by rpki-client