Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
File: 339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json)
Hash identifier: JhkARZTbjHdyzRx03DslI4T/9Qwa5UNFjYwKLdJhvns=
Subject key identifier: BD:5B:59:AB:E4:B4:29:90:CB:CC:69:FE:E0:02:6F:97:CE:CD:7A:CB
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Certificate issuer: /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial: 01964A7CF5B41AD348ED2CDC62E6D0E8B5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
Manifest number: 11F5
Signing time: Fri 18 Apr 2025 20:00:25 +0000
Manifest this update: Fri 18 Apr 2025 20:00:25 +0000
Manifest next update: Sat 19 Apr 2025 20:00:25 +0000
Files and hashes: 1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: r9RdxsY057YRk6ieXAMMhAaBt608yZHWuGaEzkn0zrc=)
2: h8Gl2OsdLuWPWtrNcU8n0JlSjzU.roa (hash: evSWiyr6r/rxtz4+EcFa39VIdmSuUvtGUXcbAAeqm0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:f5:b4:1a:d3:48:ed:2c:dc:62:e6:d0:e8:b5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Validity
Not Before: Apr 18 20:00:25 2025 GMT
Not After : Apr 19 20:00:25 2025 GMT
Subject: CN=bd5b59abe4b42990cbcc69fee0026f97cecd7acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:55:4d:24:a0:a7:3b:a1:2a:37:25:81:9a:
6b:82:42:6b:26:ca:bc:9f:4f:ca:95:01:20:78:a2:
d8:d9:70:93:da:c1:f4:64:9f:aa:ac:31:9a:64:df:
b6:23:b6:48:14:af:fd:6c:3d:df:6f:75:5e:86:db:
c5:2c:1d:c3:b8:f0:b0:67:f2:43:de:fd:29:c3:7a:
65:fe:6d:72:df:0d:d6:12:9d:6c:30:59:6e:29:95:
83:ad:bc:c6:d0:2d:5e:a1:33:fe:23:b4:8d:3b:65:
bb:c3:0d:e5:04:ea:52:99:50:7e:1d:78:48:f0:6e:
46:e1:97:ea:fa:cf:e5:24:0c:e2:53:db:63:73:7a:
69:51:22:03:fe:cd:34:31:f1:31:3e:f5:4d:2d:e0:
6a:d3:22:64:f4:ab:73:ad:6f:4d:5a:81:ef:b1:78:
6b:1a:dd:b7:a6:57:06:1b:b1:5c:b7:4a:20:0d:b4:
0a:f5:8c:4c:af:fe:7e:29:56:dc:b7:77:e7:a6:c4:
72:ba:07:0e:8d:a3:a3:5f:b6:4e:ed:13:e2:c4:24:
32:55:57:45:1e:a6:b7:2e:cc:73:86:56:5e:14:95:
bc:4d:11:3e:bd:b7:71:ea:cf:66:89:02:96:8e:d0:
c7:3d:67:cc:a9:ff:68:f6:e2:15:92:cb:b2:8b:78:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5B:59:AB:E4:B4:29:90:CB:CC:69:FE:E0:02:6F:97:CE:CD:7A:CB
X509v3 Authority Key Identifier:
keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a8:a2:38:11:ca:cd:ca:c3:08:c0:bb:99:f8:95:4f:1a:37:
79:da:e0:fa:aa:ab:1a:36:9d:6e:fd:9f:44:6d:e1:6f:24:87:
a7:5b:38:ec:53:c4:d5:5e:b0:ed:d3:8b:3d:6b:5c:4c:01:a0:
3e:fb:67:d8:e6:e3:df:0b:78:ac:d2:8e:6c:5a:25:f4:01:50:
91:80:20:00:0a:7f:5f:cb:1d:a1:6e:85:85:3d:da:7c:4b:4c:
6b:03:f2:4a:7a:9f:fc:c9:d7:65:99:18:bc:bb:e4:5b:09:6b:
41:55:82:5f:0d:85:c7:65:e1:3b:89:19:b2:0d:7c:0b:a4:03:
bb:57:b3:44:97:cf:2a:b6:5d:8c:79:68:4a:c9:15:ac:de:02:
6b:36:b4:60:2a:d1:65:b1:17:a4:94:42:5d:3d:3e:48:e0:3e:
ad:9c:c0:4f:5a:65:64:96:63:83:18:a5:76:35:6f:84:a9:ba:
69:58:fe:91:4d:31:da:01:2f:67:f1:a6:25:0e:1a:13:a0:a0:
16:fa:01:54:d2:c3:09:1f:75:5e:06:71:6b:2b:f6:2a:ab:18:
d7:e8:9b:db:9a:6d:31:c2:7a:15:9b:b7:86:c3:80:72:1e:c2:
72:0c:88:34:c0:c9:06:a8:83:df:70:ad:74:18:fa:85:69:87:
06:79:09:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:51:25 2025 by rpki-client