Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: kcjMQt48IQSVOkzWwOuKq28HLoZiQmzF6eI3Bj2y4iQ=
Subject key identifier: EE:D4:6D:08:B0:3B:1D:E8:C9:27:AD:D6:F7:DB:88:87:E8:18:71:CA
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 019686245EB2F46EC437B8779F4C2DB9E586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1524
Signing time: Wed 30 Apr 2025 10:00:52 +0000
Manifest this update: Wed 30 Apr 2025 10:00:52 +0000
Manifest next update: Thu 01 May 2025 10:00:52 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: VL1jEDB7/mf6ZTAFcLABOygiiZUwEq0MbJMXPMgPUb8=)
2: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (hash: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=)
3: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:24:5e:b2:f4:6e:c4:37:b8:77:9f:4c:2d:b9:e5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Apr 30 10:00:52 2025 GMT
Not After : May 1 10:00:52 2025 GMT
Subject: CN=eed46d08b03b1de8c927add6f7db8887e81871ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:00:13:d3:fa:cb:b5:dc:30:62:cc:b7:13:
23:12:53:23:81:35:92:0d:21:f3:c4:95:33:65:f2:
f8:84:d3:33:ca:cb:c3:c0:2f:cb:03:dc:b8:f3:17:
d8:c7:bb:6b:f7:53:7a:6c:4b:51:b2:e4:ec:76:d9:
c8:96:68:02:00:66:17:63:0e:96:bb:22:0b:c7:71:
e4:37:9d:4a:a4:c8:1e:2e:5d:f5:e2:45:e4:e5:07:
b9:40:f8:e0:1d:28:41:67:e5:88:79:c4:d6:09:75:
b8:c0:23:fd:88:38:fc:df:f5:11:64:70:04:50:d1:
ac:91:5c:d7:25:5b:d3:1c:56:cc:e7:85:67:f1:24:
6c:51:dd:98:13:17:6d:af:7c:30:93:c0:4d:4a:48:
56:6b:fe:7a:99:e0:60:83:87:c4:1c:dc:ed:72:71:
4a:0a:1f:1a:c8:bc:d6:c3:3b:00:54:2c:57:b5:b0:
ff:ca:9f:e0:ad:0f:e5:49:f0:d2:f2:01:d9:4d:13:
6d:5f:d5:5d:33:9b:4d:1c:04:67:30:81:01:d7:b2:
2d:d4:11:01:dd:3c:4c:71:56:b7:15:1a:f0:37:2c:
82:a2:c1:5f:9a:ad:83:05:16:a8:a9:15:4b:4a:02:
78:80:32:ce:c1:3c:7a:43:ad:41:bd:d0:2c:22:58:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:6D:08:B0:3B:1D:E8:C9:27:AD:D6:F7:DB:88:87:E8:18:71:CA
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3e:bc:dd:8b:de:36:e6:8c:d3:ab:bf:35:aa:22:9c:38:d6:
cb:6c:c5:e4:a3:70:b1:cf:26:02:6a:29:71:94:c9:41:21:8c:
11:95:ba:e5:65:63:75:d6:4b:ec:76:8a:61:73:81:71:25:c5:
b9:7f:53:93:b8:2e:62:e2:38:10:d3:75:0a:97:2e:5f:78:4c:
61:8d:e9:ce:91:38:3a:8e:af:6a:5c:ad:d6:d5:bf:80:ba:49:
43:de:3a:e3:28:46:d2:59:1f:ed:64:e0:1a:e0:e9:85:08:2c:
05:20:c8:31:a8:e1:97:88:b7:ba:96:b3:8e:f6:af:25:66:5a:
80:d7:a0:e1:50:fa:40:e5:7f:85:0a:ff:25:8a:9c:7a:5b:f8:
8c:66:e0:5d:b2:1b:a0:e3:81:95:58:b7:b0:f3:bf:86:5c:5d:
44:29:b9:55:78:78:bc:8b:1a:2c:0c:3e:de:49:74:18:3f:cf:
5c:08:97:a6:7d:38:88:64:90:30:b9:07:d0:c1:dd:ac:e4:05:
d5:47:6a:63:b6:ef:43:a3:c2:24:ea:f0:d3:4e:a3:65:64:7b:
c8:95:50:84:f3:7c:ce:ad:42:29:3a:ed:a6:0b:52:68:c4:b8:
45:d5:48:ef:eb:95:91:43:eb:e4:94:96:d3:ae:2e:2c:4f:ff:
c2:5d:85:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:32:55 2025 by rpki-client