Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
File: 339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json)
Hash identifier: JayM02bn8SkBbR4mfjfPvJseVw7bIfO7MXJFRHThQRg=
Subject key identifier: 44:66:97:54:04:C4:7B:90:5E:33:C1:D0:94:B7:BD:D8:79:26:31:CF
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Certificate issuer: /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial: 019A70A524622F7DCD9A6FFDB038538E2454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
Manifest number: 141B
Signing time: Tue 11 Nov 2025 02:01:02 +0000
Manifest this update: Tue 11 Nov 2025 02:01:02 +0000
Manifest next update: Wed 12 Nov 2025 02:01:02 +0000
Files and hashes: 1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: j1qo5mJpE/7tSWUbL5B7eRlxKbwNc2Sbkopr64GUnik=)
2: h8Gl2OsdLuWPWtrNcU8n0JlSjzU.roa (hash: evSWiyr6r/rxtz4+EcFa39VIdmSuUvtGUXcbAAeqm0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:24:62:2f:7d:cd:9a:6f:fd:b0:38:53:8e:24:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Validity
Not Before: Nov 11 02:01:02 2025 GMT
Not After : Nov 12 02:01:02 2025 GMT
Subject: CN=4466975404c47b905e33c1d094b7bdd8792631cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:bd:08:23:1d:9e:70:ae:67:46:a7:7c:ad:
c8:f5:03:88:16:55:7f:57:00:f9:41:e6:40:84:70:
cf:28:01:2f:9a:d6:82:a8:3f:22:c6:3d:b0:22:13:
93:9b:c5:37:63:52:68:25:d1:82:1f:f4:4a:4a:52:
bb:a0:b4:4e:48:d7:4a:ad:cf:96:f2:06:b6:e8:00:
d1:6b:75:02:b5:22:f9:b0:ae:e2:39:c9:c0:56:5d:
4f:fa:d5:b2:a7:5f:aa:d6:b7:bb:47:39:4d:9b:0a:
d0:7a:e8:cc:cd:1d:32:fb:3c:26:16:69:d8:53:3a:
55:2f:63:59:e1:1c:7f:d1:d0:a6:c8:4c:22:02:0b:
ec:5e:b3:26:2f:6e:bb:30:89:57:2d:b7:31:2e:00:
f9:9f:b8:0f:fc:f0:ac:4c:23:cc:3c:11:a2:26:f7:
04:ef:5c:d8:8a:32:b7:26:bc:69:d9:54:ae:69:79:
f4:5f:2e:d5:07:76:cf:2d:44:0a:22:fe:e6:51:96:
3c:63:28:5c:c4:9f:05:76:ef:03:d6:a2:6e:07:0f:
c3:7a:74:09:5b:05:0f:44:d8:e9:4c:c4:bb:69:ff:
8c:ca:f0:b4:fc:d7:c2:66:a4:63:b4:9f:a7:8a:f2:
2f:2f:87:47:4e:21:cf:36:39:5b:5e:89:1d:25:26:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:66:97:54:04:C4:7B:90:5E:33:C1:D0:94:B7:BD:D8:79:26:31:CF
X509v3 Authority Key Identifier:
keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:61:0d:12:86:92:86:3a:c3:00:df:1e:0f:3d:7c:69:17:44:
7c:ac:83:74:28:a9:4d:a8:fc:c1:07:40:6c:7a:9c:33:22:64:
d5:c2:97:d2:dc:49:82:08:76:d9:97:e1:21:ba:5a:c0:ac:47:
7e:47:ac:9a:e4:5c:f0:51:58:d5:6b:b1:1e:8b:65:a8:0c:5b:
21:d6:e6:97:13:65:16:bf:3c:b1:b8:97:72:36:93:38:f1:03:
65:99:ee:8c:ab:01:0d:ce:bd:43:14:c3:fb:68:be:4c:c3:75:
24:e3:c1:3f:92:64:80:04:5c:26:1a:b4:78:aa:b0:56:e8:0f:
2e:16:e3:c5:3c:bb:cc:bc:14:3e:b7:0d:8d:12:0a:21:0c:3c:
b9:f1:30:cb:74:fe:1b:2f:06:23:7e:0b:88:2c:61:de:4c:36:
36:0a:3d:60:8c:aa:5e:9b:70:8d:fe:70:d4:9a:98:8f:0f:31:
77:25:a8:e7:24:ac:45:e3:54:67:8d:c9:d4:39:f7:b1:be:63:
f6:c8:bc:99:db:63:8a:f2:cd:4b:7c:8c:66:88:a6:33:9b:07:
b4:4f:60:3a:9e:2c:db:3e:9b:89:a9:3b:3b:82:5c:9c:ef:42:
27:e4:63:4f:97:4e:7f:fb:5e:d4:77:f0:bb:7b:24:d5:5b:bb:
b7:9d:e1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:41 2025 by rpki-client