Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier: KfBAsmo5WY2vfd14/btNqbhkTT0//SKCmh4v+P40UFs=
Subject key identifier: 01:14:5A:63:12:E6:65:67:B1:4E:40:B2:0E:AC:5E:E3:4C:31:10:C9
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 0196470E83E6CCB68911FB63B8A46A9D70A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number: 03DA
Signing time: Fri 18 Apr 2025 04:00:55 +0000
Manifest this update: Fri 18 Apr 2025 04:00:55 +0000
Manifest next update: Sat 19 Apr 2025 04:00:55 +0000
Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: eBQLchTS8MLKpDVGP0yoLlXjhIAPcuJdUY2sq0rTiX8=)
2: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (hash: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=)
3: vmUg0yzYcnRJZC2n9pSGw6JlB2A.roa (hash: f45/pAD/SVLyT8PSsTHGZFNyd/9e/fwYtYXEyg22gkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:0e:83:e6:cc:b6:89:11:fb:63:b8:a4:6a:9d:70:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Apr 18 04:00:55 2025 GMT
Not After : Apr 19 04:00:55 2025 GMT
Subject: CN=01145a6312e66567b14e40b20eac5ee34c3110c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:b7:04:bf:97:a1:39:ea:af:73:b3:ba:4e:
e7:4b:7c:e2:6c:d6:16:60:1a:0c:40:4b:8c:90:80:
2d:23:3a:e3:44:25:f3:86:38:9c:81:08:5f:81:ee:
ab:df:83:02:a7:ad:c5:52:71:9f:65:7f:a5:6b:0e:
21:3b:b0:1f:a4:ad:5c:84:1f:5b:ad:b1:ce:2a:de:
d6:8a:e3:b3:8f:8c:f7:ad:53:85:98:42:74:ec:86:
bb:aa:2f:c8:4a:7b:d3:26:9e:f6:53:8d:7d:bc:0f:
e1:7b:0e:88:42:10:7b:06:a2:87:13:2b:a5:8d:e5:
eb:1d:27:e7:d9:56:aa:31:69:54:74:cb:d8:60:ee:
8f:06:f4:f3:c7:e9:6b:4f:fd:77:31:c9:c0:a6:41:
96:24:66:3b:fc:c8:fa:15:84:6a:cc:58:54:36:cc:
dc:fb:3d:57:38:9d:f9:ff:e8:39:80:6d:ca:60:89:
3b:d4:87:06:95:07:86:b2:75:73:37:f3:c3:0a:aa:
ab:e4:98:61:00:98:72:37:b9:74:d2:20:b1:7d:c6:
9d:41:28:06:97:ae:55:e6:82:be:61:dd:2c:ff:47:
76:1e:3f:34:62:06:3b:ef:ea:5d:6a:a9:d1:de:35:
2d:61:88:3a:ce:71:49:50:db:0a:15:4e:09:29:a1:
61:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:14:5A:63:12:E6:65:67:B1:4E:40:B2:0E:AC:5E:E3:4C:31:10:C9
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7f:d3:6e:ed:e5:c1:1f:c3:f7:d1:57:a5:0e:92:18:18:9a:
b2:8b:4e:a5:0d:b8:63:ae:1a:63:4e:82:7f:cb:98:95:e4:bf:
79:b4:f8:f1:ef:37:57:99:93:2e:5f:72:be:0a:29:33:58:41:
e2:73:c6:bf:39:88:28:2d:12:14:97:ce:e2:a8:f2:61:66:47:
66:0d:ea:ab:e8:e2:4e:7f:c4:e0:60:58:88:46:43:6f:ae:36:
25:2c:c6:71:5e:43:22:01:a3:fe:c0:3a:32:49:32:c1:8c:be:
1c:a5:23:6a:e7:30:34:e3:75:23:65:c3:4c:30:21:14:4a:19:
b9:7a:b5:2b:11:76:53:2d:c4:37:83:07:55:2f:be:20:f0:17:
b4:84:f5:50:e5:c2:88:34:f9:cf:ed:e1:58:c8:be:39:fd:ce:
b2:83:4e:f8:fd:62:8a:26:2b:ab:8b:46:4c:9f:2c:b4:09:01:
7a:c2:28:55:f7:3e:88:2f:96:e4:60:12:1b:36:e8:d8:94:30:
45:6c:56:6f:a4:44:9d:3f:1b:52:b9:d2:27:78:67:c2:8c:df:
d2:40:1a:c7:3a:fc:e7:d2:82:f8:67:f7:cd:2f:57:30:52:13:
d5:1e:d7:a2:aa:93:5c:84:0f:1c:1f:17:be:3a:6c:97:f5:63:
0c:64:ae:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:31:37 2025 by rpki-client