Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier: LuQpmPpCV6dEo46cRFC3f2xk8CLCvaDyYpmgVYi+Cpo=
Subject key identifier: AE:3C:C7:E6:8A:22:50:9D:BB:89:1A:43:76:CA:67:FC:39:8E:21:19
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 01977075ED3FC850BBF297110B30E844964F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number: 0474
Signing time: Sat 14 Jun 2025 22:01:05 +0000
Manifest this update: Sat 14 Jun 2025 22:01:05 +0000
Manifest next update: Sun 15 Jun 2025 22:01:05 +0000
Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: OOmiIwcjFYtnwdgRieIig6HsdUbDlKTT5uYfAiTRDOg=)
2: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (hash: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=)
3: vmUg0yzYcnRJZC2n9pSGw6JlB2A.roa (hash: f45/pAD/SVLyT8PSsTHGZFNyd/9e/fwYtYXEyg22gkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:ed:3f:c8:50:bb:f2:97:11:0b:30:e8:44:96:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Jun 14 22:01:05 2025 GMT
Not After : Jun 15 22:01:05 2025 GMT
Subject: CN=ae3cc7e68a22509dbb891a4376ca67fc398e2119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:f5:44:84:75:44:22:d0:fd:6d:2f:ca:66:
36:92:97:9c:42:6e:e1:e1:0f:4f:42:5c:bf:01:2a:
dc:60:c4:7f:6a:c2:be:7b:87:c3:42:48:75:c8:2b:
36:2c:cb:39:32:da:c7:fc:b3:a5:98:93:16:b9:76:
0e:fc:87:3e:5a:db:a8:d3:ed:59:63:6d:22:a2:db:
8c:38:45:f3:34:a8:7c:43:23:05:a1:1e:18:2b:d8:
4a:53:e3:b2:e1:7f:65:5a:f2:d3:80:75:6d:39:a2:
ea:bb:4e:09:a1:25:24:4f:46:ad:7c:e6:56:44:a2:
d1:90:e5:3a:be:fc:37:50:c8:4a:e6:ca:ff:c7:60:
5e:77:01:5a:80:df:42:53:60:af:f0:8a:ab:3d:38:
83:8d:5e:08:b0:73:23:7e:98:1e:1f:7c:46:f5:b4:
40:80:34:c3:bc:53:40:41:ff:8f:fb:26:16:41:4e:
81:e2:25:f3:13:6a:e1:19:90:72:0b:2e:4b:15:1d:
5c:f9:9d:ee:c9:f5:f0:10:a8:5a:47:07:7f:a6:2d:
fe:ed:31:a4:0f:e2:04:fe:98:3a:52:be:75:4e:31:
1a:61:95:71:5d:81:a6:f8:b2:b5:ac:bb:6c:d6:12:
ca:0e:f7:03:dd:a5:60:29:09:fc:4e:02:5e:9b:35:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3C:C7:E6:8A:22:50:9D:BB:89:1A:43:76:CA:67:FC:39:8E:21:19
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:de:64:9c:1f:e6:f9:e3:5b:3a:f1:f5:b5:b4:a7:c6:81:5c:
69:00:5b:35:5c:f3:c4:d8:e3:4d:ea:dd:f5:45:d1:cd:89:0c:
92:95:47:c9:82:30:8e:54:a2:9d:83:fe:51:4c:e4:ce:be:58:
2b:56:b8:52:17:c8:73:9f:2e:f1:37:c9:eb:cb:bf:e0:79:8c:
c2:c2:3f:6e:a8:2c:46:eb:81:95:5c:50:33:2f:e0:b9:eb:94:
32:b1:33:f1:a2:b3:84:8f:ce:e6:82:6f:aa:d2:05:b7:4f:d1:
f1:94:17:53:42:84:32:e1:e8:04:67:ef:ec:61:42:47:c1:09:
3f:13:be:de:28:39:9e:6d:bd:55:cb:fb:91:cb:1b:71:b3:a5:
96:90:46:fb:d9:ed:55:75:21:b2:52:90:55:a1:ef:c6:49:8e:
25:f6:09:b2:d5:0b:11:ac:c4:21:94:a0:30:e2:d1:79:f4:49:
22:65:4a:10:cc:b6:99:72:fc:05:8f:ae:46:81:24:bf:37:a1:
6b:f5:2a:b9:b0:92:64:85:f0:37:0e:ed:b1:e2:92:bb:b6:c7:
92:44:b7:d0:03:0b:e8:c4:9f:c6:36:e5:03:a7:b4:56:b9:e6:
21:bc:8d:f9:58:1e:51:e8:e9:45:61:6b:a7:c5:2f:2e:ab:49:
4e:b7:b5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:32:43 2025 by rpki-client