Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: YPuapsVmiES05az0doU+cQVrWPpqcdfCM5qexHfIklA=
Subject key identifier: D3:0F:75:E7:85:47:AB:B4:D3:13:65:70:90:B5:54:1E:D8:44:63:1C
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 0196C5DE91F3559641D4D6CF0C1EA3A9664D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1545
Signing time: Mon 12 May 2025 19:00:19 +0000
Manifest this update: Mon 12 May 2025 19:00:19 +0000
Manifest next update: Tue 13 May 2025 19:00:19 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: aQFK8q67TjZAongwE+TPqDiFhhiWSMGXnJhwU+e4k1o=)
2: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (hash: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=)
3: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:91:f3:55:96:41:d4:d6:cf:0c:1e:a3:a9:66:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: May 12 19:00:19 2025 GMT
Not After : May 13 19:00:19 2025 GMT
Subject: CN=d30f75e78547abb4d313657090b5541ed844631c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:d4:96:fa:88:84:01:56:5d:ca:ea:73:66:
ec:62:2d:23:b6:ba:05:51:5a:21:01:bd:2f:87:1e:
66:5f:8b:e8:15:97:72:08:1b:c7:ac:8e:3d:ca:ae:
0f:f0:14:80:7f:1f:c7:8c:e8:fa:a3:20:c3:eb:70:
c9:ff:6b:ab:d2:70:dc:dd:fb:45:4c:81:e8:5a:45:
1d:1e:a6:ea:46:ec:5b:08:b5:a6:ac:2a:88:b0:67:
64:ef:b5:ee:1f:85:cd:84:0c:1f:3a:a4:b1:3e:7d:
e8:87:e1:76:47:21:bd:f0:93:13:2d:7a:eb:5b:6a:
cf:e8:e8:8a:00:da:4e:86:10:e3:2e:7e:6d:79:0f:
39:a9:7d:74:76:8c:1d:c0:ed:49:8e:27:94:e9:7f:
07:ab:ce:19:98:01:1f:47:e8:76:73:85:43:f5:cd:
76:45:ec:e9:28:72:1a:81:2f:a1:f2:11:3c:18:09:
ba:41:6a:7d:be:6a:b1:9f:05:c8:a6:ca:e1:41:d4:
8b:e4:0a:3e:8e:78:55:24:46:0d:53:53:e2:4f:0a:
28:04:85:f7:9d:e0:1a:49:65:40:38:cc:8a:cf:34:
70:ac:16:20:94:b3:d3:78:0f:bf:00:4f:68:87:35:
f8:54:d2:e2:2e:8d:5d:bc:82:10:9d:6d:bb:8f:ae:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0F:75:E7:85:47:AB:B4:D3:13:65:70:90:B5:54:1E:D8:44:63:1C
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a3:9b:86:98:8c:14:28:70:b3:a9:b8:25:ef:69:56:ee:d1:
df:fa:47:b4:3d:24:f9:a8:5e:25:cb:3d:04:83:bd:b5:ed:27:
1b:5a:66:a6:88:3a:49:99:4e:13:0f:cf:b0:33:68:0e:74:14:
fa:78:df:c3:5f:69:0a:38:2c:0b:81:6c:df:78:a3:7f:c4:58:
6d:b4:0a:5e:cd:cb:56:0f:41:0b:73:f0:19:a8:0a:6e:fb:bd:
27:3a:3c:2b:95:e9:ca:53:2c:1f:ff:27:12:9d:1b:7a:0a:24:
7a:d8:5a:eb:d1:fc:d6:39:ee:31:3a:c9:f3:3b:fa:49:f4:93:
30:99:79:9d:83:1a:77:1d:90:3b:f3:c0:0e:78:a3:03:76:fa:
86:87:e6:7e:ec:34:ce:e7:c9:e6:7e:9f:9a:3c:ac:eb:e9:1b:
e5:b1:a7:ca:0f:30:de:e7:d1:a2:74:ee:0f:7a:62:e5:36:e9:
4e:70:7b:4c:0c:9c:cf:23:70:22:8b:90:f7:28:da:a6:8c:f3:
62:7d:31:66:3e:0f:4f:37:bc:85:15:3d:dd:a1:52:ba:9c:c7:
af:34:9d:c1:36:92:de:52:e2:ec:9f:f2:e6:10:27:ef:16:dc:
74:d2:a4:81:12:50:e5:7a:c5:b5:5a:6a:d0:c7:fe:48:4e:d9:
20:15:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:07:20 2025 by rpki-client