Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier: gs/O62pvf2+sMkvvMPuJzXFqPk5ucbOSJ8wgYClAKd8=
Subject key identifier: 98:8F:6B:FD:CC:5D:DC:64:BD:33:79:D4:C4:BA:71:41:01:37:D7:A3
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 01974FA0CD50CCA74FA413F4F49D6519F82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number: 0463
Signing time: Sun 08 Jun 2025 13:00:27 +0000
Manifest this update: Sun 08 Jun 2025 13:00:27 +0000
Manifest next update: Mon 09 Jun 2025 13:00:27 +0000
Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: eFuoA3Gis1hJMN/Y4ANilOugp4TOD0umM8ziQX0EBBg=)
2: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (hash: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=)
3: vmUg0yzYcnRJZC2n9pSGw6JlB2A.roa (hash: f45/pAD/SVLyT8PSsTHGZFNyd/9e/fwYtYXEyg22gkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:cd:50:cc:a7:4f:a4:13:f4:f4:9d:65:19:f8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Jun 8 13:00:27 2025 GMT
Not After : Jun 9 13:00:27 2025 GMT
Subject: CN=988f6bfdcc5ddc64bd3379d4c4ba71410137d7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:aa:ff:4d:6f:6f:e3:10:05:92:68:d1:aa:
83:de:99:3b:a4:66:85:b1:49:2b:60:11:11:80:b2:
1d:f0:2e:be:a0:24:1b:fb:d5:a1:b7:16:08:51:0b:
02:fc:b0:75:46:f4:9b:bd:57:4b:5d:f1:9a:b0:bc:
d4:ff:00:24:83:e4:c9:9f:37:c5:b6:81:a8:d3:fa:
1e:04:28:b5:42:05:d1:e3:04:7b:4e:ac:d7:50:5f:
83:0c:a4:62:c7:c1:1e:a7:8a:5f:9a:3b:15:e5:c2:
02:07:b9:6f:a6:0f:cd:22:e4:fa:7a:b7:dd:77:fd:
4e:e3:0a:5b:43:00:d9:ba:e5:ce:38:3e:78:74:4c:
e9:f9:cd:29:c8:1a:3d:b9:0f:6b:92:96:6f:a6:db:
a7:f1:e4:76:2f:4a:e8:4a:b8:db:c7:0a:ae:d9:24:
05:e3:20:4c:09:7e:33:b7:29:9b:ff:b0:7e:ee:db:
5a:f7:58:cc:b3:8f:b7:a6:c2:4a:05:a2:fd:f0:6c:
9a:c2:b9:d0:26:22:de:63:51:53:d6:55:09:06:36:
c9:be:64:db:a3:98:fd:24:98:1c:1e:09:c2:f4:c0:
bd:be:27:3b:24:7a:b2:42:fc:6d:d5:d5:e6:27:48:
1a:f4:78:34:80:bf:a3:94:0d:81:68:fb:ef:53:b8:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8F:6B:FD:CC:5D:DC:64:BD:33:79:D4:C4:BA:71:41:01:37:D7:A3
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:eb:47:d6:d9:d9:15:fd:30:5f:44:af:ca:20:a0:86:ae:c6:
3f:39:da:98:0f:ea:e4:f2:15:20:bb:38:dd:b9:e5:54:ef:d7:
7e:cf:88:f5:31:2e:3f:8e:66:cf:cd:b2:3d:72:36:9f:32:c1:
f5:2e:f3:c0:34:1d:09:a3:1b:e1:e6:bb:27:39:1e:24:6f:61:
6d:d2:b4:54:0d:5d:cb:77:02:ae:ea:7f:d2:6b:61:d7:94:4d:
06:66:3f:ae:47:a1:c7:b8:d8:b2:14:a7:2f:1e:63:2c:86:d1:
b6:81:71:a0:6c:19:0c:77:af:aa:9d:34:e4:32:04:12:5f:09:
9e:84:63:16:6f:7b:14:7e:70:88:04:38:db:71:63:b7:4d:ad:
c0:2c:14:ba:bf:56:5b:c9:7d:d0:d6:24:69:78:0e:4c:19:8f:
d5:33:5b:6b:e6:2f:3e:4f:9e:26:4c:a9:bc:43:2a:94:d0:35:
b6:ac:83:29:99:bf:36:32:d4:ac:7e:af:0f:9d:f0:82:1c:e9:
49:d1:cf:cb:b5:ec:a4:fa:0b:34:a5:1d:17:b1:fd:29:c2:dd:
be:da:01:ef:7b:e5:4a:bc:63:e8:34:00:67:49:22:65:a1:ff:
19:a2:4e:79:11:8d:4c:89:ee:bf:dc:0d:21:0e:10:b3:3a:20:
35:c9:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:36:26 2025 by rpki-client