Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
File: 339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json)
Hash identifier: 1G0weoGIo0wUw8bCWMI92jQigaB+x6HHCmIx2PhBXfI=
Subject key identifier: 43:66:52:DD:A7:23:6F:CC:DC:96:67:D8:58:09:B8:A1:68:89:A5:B9
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Certificate issuer: /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial: 019678D6A22B0D4FC5A12D2C144CA8E5E7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
Manifest number: 120D
Signing time: Sun 27 Apr 2025 20:00:54 +0000
Manifest this update: Sun 27 Apr 2025 20:00:54 +0000
Manifest next update: Mon 28 Apr 2025 20:00:54 +0000
Files and hashes: 1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: gF7LkMSUZ9/hKfib8wUCv+ArKpvl4w6xyM7YdiKM1Ww=)
2: h8Gl2OsdLuWPWtrNcU8n0JlSjzU.roa (hash: evSWiyr6r/rxtz4+EcFa39VIdmSuUvtGUXcbAAeqm0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:a2:2b:0d:4f:c5:a1:2d:2c:14:4c:a8:e5:e7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Validity
Not Before: Apr 27 20:00:54 2025 GMT
Not After : Apr 28 20:00:54 2025 GMT
Subject: CN=436652dda7236fccdc9667d85809b8a16889a5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:51:f7:08:32:87:d1:e3:6d:6c:72:f5:b0:9d:
6c:7f:d5:54:3e:d2:8e:51:e9:49:00:95:da:ad:d0:
d9:f2:2b:69:11:91:23:91:ed:9c:90:8a:3f:03:cd:
bd:c8:60:7b:e3:8f:94:8f:40:f7:e8:81:6c:9d:df:
42:23:f5:a8:0a:a5:78:2c:af:04:e6:8f:1f:8f:6d:
bf:24:fa:fe:fe:fa:ca:64:35:a3:20:89:bb:49:da:
56:78:38:cc:24:ad:68:71:da:72:dd:da:69:60:a5:
1c:ca:f9:7b:db:09:01:6c:c1:62:d4:d1:a5:78:a3:
d0:24:e0:ff:34:fb:00:b3:33:32:f6:6f:e3:1e:3b:
23:c1:a1:88:a9:e7:b0:86:af:d0:33:d6:02:26:d4:
57:5e:2c:74:35:10:f7:b8:18:88:13:2a:f3:e1:7b:
65:9d:e0:b4:e1:7c:e1:d7:ed:3d:0d:eb:d9:03:1b:
c3:32:43:0e:1b:d1:7c:07:8c:1f:26:a3:aa:1e:cf:
68:ab:8c:58:e0:35:ee:a6:39:7d:5f:f0:1c:35:dc:
f2:e0:2d:7b:8e:7b:d7:27:f0:30:5b:3b:aa:48:bb:
33:18:cf:98:45:ac:c2:c1:50:9e:fe:1e:5b:3b:34:
4e:14:19:0c:2e:fb:a8:1d:bf:1d:ca:95:b9:55:9d:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:66:52:DD:A7:23:6F:CC:DC:96:67:D8:58:09:B8:A1:68:89:A5:B9
X509v3 Authority Key Identifier:
keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:73:f2:4f:c2:bc:75:be:40:aa:f8:f6:6d:3f:d8:71:41:06:
55:df:ff:d7:eb:77:b8:81:b6:5d:8c:f9:89:5d:ea:89:d0:26:
57:b6:f5:09:d4:fb:3d:ce:3f:60:3a:36:b2:51:7b:56:17:1f:
4f:58:64:c5:05:aa:be:6b:86:15:b5:ea:be:4a:6c:2f:4d:6e:
b6:e1:21:7d:30:83:06:db:b1:66:1d:ee:49:00:10:77:9d:e1:
23:a4:5d:40:cf:3e:64:58:e2:eb:99:a9:b2:9a:88:93:cb:16:
90:7b:1f:cf:f5:62:5b:7c:8f:58:e0:f1:87:48:3d:77:f8:31:
6e:bb:96:a0:ec:1b:24:5f:ac:55:d4:bc:9d:2e:3a:68:a2:27:
14:14:92:2e:b3:0f:61:95:bd:bd:c1:c4:88:39:fc:c0:b7:1e:
11:78:42:23:53:da:fe:e9:a2:62:c3:6e:e6:91:60:cb:dd:bc:
a8:56:3a:4d:da:74:2c:01:4b:d6:eb:45:0b:cd:74:df:ec:f5:
72:9e:50:a5:46:54:de:d5:1e:8a:b6:52:06:c8:c0:15:f8:0e:
3b:6a:3e:7c:93:19:63:b9:5d:9a:30:0d:ee:34:ae:55:56:c9:
a7:c9:3d:6a:99:6f:f5:c8:0a:9c:8f:58:08:6b:fc:e1:a1:de:
57:ca:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:20:12 2025 by rpki-client