Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier: QSuH2mdh9kNIYm4778zg65mPUJmrLG8Tu4WaPeT+//o=
Subject key identifier: 17:F3:1F:2B:A9:9A:21:0E:53:B1:1D:C0:93:DC:EB:36:2E:F1:06:74
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 0196767A0CB0C0115A454A8B7DD6EC2AA035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number: 03E7
Signing time: Sun 27 Apr 2025 09:00:32 +0000
Manifest this update: Sun 27 Apr 2025 09:00:32 +0000
Manifest next update: Mon 28 Apr 2025 09:00:32 +0000
Files and hashes: 1: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: AYZo2OjbIsbLPEmrm4WIqzX/E1RJFwOYfTSizM9iSKs=)
2: gdQzieOsDk19MHxPUsWlQ5yL-6E.roa (hash: O4NLUsT+6P2pJIZ4vji37jHYnfU3emApXIC6cXFBisM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:0c:b0:c0:11:5a:45:4a:8b:7d:d6:ec:2a:a0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Apr 27 09:00:32 2025 GMT
Not After : Apr 28 09:00:32 2025 GMT
Subject: CN=17f31f2ba99a210e53b11dc093dceb362ef10674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:35:64:e7:81:44:0d:94:81:9a:57:4b:06:
43:76:44:b5:54:66:48:f7:9c:88:fb:53:ff:e4:e1:
df:b3:c7:53:e0:05:31:a1:94:69:4d:ca:ef:40:1d:
a5:be:b9:fe:9c:2f:c3:ec:74:57:67:10:06:0b:13:
d8:67:77:83:bd:75:06:8a:34:ab:9f:51:61:b0:db:
de:14:66:fc:c1:cf:0f:be:a3:da:82:ba:97:b3:b7:
72:3f:ac:a5:8f:4d:f2:72:0c:20:da:a5:6e:65:10:
ee:d9:54:d7:bf:a5:e4:7e:96:08:8a:cb:f5:40:d4:
da:40:5b:02:ac:30:dc:84:9d:53:b1:03:4b:eb:0e:
72:93:de:e1:bb:2b:f8:ec:5e:21:09:22:5c:c3:e8:
25:72:4b:b8:29:d6:8d:f6:e6:b0:5d:a0:79:b6:83:
e3:cb:8e:59:5f:8e:26:5d:3f:15:07:62:1d:d8:d1:
3d:51:18:50:51:36:89:63:c3:2f:a9:02:b2:b8:07:
3a:91:e9:09:28:b3:ba:d7:f8:ab:10:0a:4b:2b:08:
42:f8:fb:58:fd:d5:b8:61:f2:66:ec:1e:f0:5a:38:
d5:d9:85:a0:34:98:42:cd:b2:1b:9a:11:b9:2e:c9:
47:45:a0:d9:5e:9a:df:47:a3:08:d8:d0:53:3d:3e:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:1F:2B:A9:9A:21:0E:53:B1:1D:C0:93:DC:EB:36:2E:F1:06:74
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d2:5f:f7:10:c9:03:0b:50:42:67:2b:4d:f0:7b:81:c1:51:
4b:54:db:b5:4c:27:9c:a1:12:e3:72:b6:b7:b0:54:05:cf:0b:
61:7f:03:ed:38:29:f2:c2:99:52:9c:39:5e:46:c9:26:ae:bc:
06:fb:2b:9b:8d:d1:92:34:e0:7d:e2:41:76:9b:3b:b1:df:e9:
03:d7:25:75:81:13:f8:8f:00:6f:de:38:87:5d:dd:2a:37:fa:
c3:9e:8f:57:50:de:3c:72:11:71:f5:8e:33:b1:af:0d:bd:18:
15:41:9b:18:26:4d:94:f1:7a:3d:3a:66:09:ae:b5:cb:20:04:
2d:55:08:f3:cc:5e:4e:91:97:91:bd:d5:41:d0:99:cb:15:32:
ee:7a:10:82:33:a8:b7:94:e2:20:79:c7:ea:98:d3:bb:c8:36:
70:7f:07:3c:92:ab:c3:b1:85:14:1d:d9:5a:72:74:5d:0d:0b:
1f:96:63:34:2d:49:ee:25:6b:2a:0a:c0:c7:02:b8:f3:52:7a:
7b:80:42:60:62:30:8a:21:d8:49:09:42:80:f2:32:05:d6:67:
91:b2:b3:ed:d1:2c:70:5a:b9:18:a3:27:88:42:99:30:fa:e0:
15:3d:60:d0:15:6e:8c:8a:43:22:92:70:92:b8:1c:7d:31:71:
8a:c5:ee:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:49:12 2025 by rpki-client