Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier: ahHnmROG2aNdKr8eb/ZPOpi0Xc0iWnfKfdkwlMDEcz8=
Subject key identifier: F2:18:35:19:F2:55:89:DF:5E:11:2F:F1:96:E5:FB:2F:B9:1F:99:95
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 01958EBD102C679FC5F1720054CCF2D5C095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number: 036F
Signing time: Thu 13 Mar 2025 09:01:49 +0000
Manifest this update: Thu 13 Mar 2025 09:01:49 +0000
Manifest next update: Fri 14 Mar 2025 09:01:49 +0000
Files and hashes: 1: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: nhE6H/D+8kWD2QPJ4ZKdkO0jrbjDiscHEpAuayFiGAM=)
2: gdQzieOsDk19MHxPUsWlQ5yL-6E.roa (hash: O4NLUsT+6P2pJIZ4vji37jHYnfU3emApXIC6cXFBisM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bd:10:2c:67:9f:c5:f1:72:00:54:cc:f2:d5:c0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Mar 13 09:01:49 2025 GMT
Not After : Mar 14 09:01:49 2025 GMT
Subject: CN=f2183519f25589df5e112ff196e5fb2fb91f9995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:60:42:78:f6:8a:b8:ce:6d:9f:1e:da:d6:
04:58:86:28:e9:cf:cd:a6:f1:ac:ec:09:47:31:d3:
7d:e3:0e:f0:e0:6a:54:e4:d6:5f:2c:25:db:55:ad:
4d:cc:1e:eb:6f:0f:53:a0:ab:87:55:02:fc:f2:b0:
fe:1d:9d:2d:df:54:5b:b2:e9:65:c6:27:4f:9a:0b:
71:c1:6b:ce:86:32:d0:4d:3e:61:f0:5d:31:4b:4f:
58:a2:b7:df:06:17:38:a6:7d:5f:90:94:ae:49:a5:
8e:eb:77:c0:25:54:42:ab:3d:0d:52:05:e1:81:59:
7e:d2:06:a3:04:22:89:2e:82:ed:da:53:97:60:d8:
37:33:ff:17:8c:b1:5e:02:b7:d2:79:bd:81:f1:f8:
98:8b:15:cb:03:b3:d0:06:fb:ca:2f:87:42:97:4f:
ba:52:20:fe:ec:c6:a4:46:bc:66:70:28:c1:57:d2:
09:93:55:c4:83:37:dd:9b:8b:e3:1b:3d:bd:7a:8e:
48:e0:0b:60:99:2d:8a:77:2a:77:7d:3d:4e:6e:7a:
e8:5c:f8:49:ae:62:e2:5b:c3:1b:b9:b8:d8:ff:3d:
a3:07:7c:64:a4:63:29:a0:f3:57:93:0f:42:32:57:
72:94:7c:eb:1c:a6:d6:47:19:f1:ec:d0:d6:8a:20:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:18:35:19:F2:55:89:DF:5E:11:2F:F1:96:E5:FB:2F:B9:1F:99:95
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0b:c2:ae:92:19:f9:93:a8:01:ba:73:ac:20:14:78:7c:9a:
33:1a:83:09:ba:44:77:ab:fb:2a:a8:67:61:03:e5:e4:d1:74:
4b:4a:91:a4:e6:7a:1b:57:4e:f2:41:e7:af:c9:70:d8:26:0c:
cc:98:45:ed:ef:cc:ee:c9:d2:83:12:e8:dc:41:96:62:ec:dc:
57:9d:c7:2f:7a:83:1e:2a:d1:96:f0:90:69:ea:61:da:02:65:
3e:c0:7b:ce:ea:92:5d:92:89:45:d3:a8:ee:69:07:29:0f:47:
b3:67:73:35:36:d9:7a:5b:90:a7:62:34:ba:23:a0:af:2d:32:
89:79:ee:68:0f:07:70:50:19:d3:ff:b1:35:75:90:33:7d:2d:
eb:e7:94:3e:35:0d:0c:ff:74:c2:54:7a:d2:1a:8b:c1:cb:47:
b8:b4:48:e5:09:fb:eb:3c:8b:e0:58:eb:e5:3b:e0:1e:9d:16:
72:5e:4b:8b:34:58:4c:5e:e7:e6:fb:d5:b0:ad:c8:ff:c1:34:
85:ac:60:fe:9d:bf:48:dd:d9:f6:05:d1:6a:03:d6:d6:6d:e5:
38:de:16:3b:f9:5c:bd:63:7e:73:a0:20:54:b6:7d:2d:ef:e9:
6e:c5:0e:64:66:0a:7c:17:22:91:aa:bc:26:d1:3c:5c:c8:96:
0c:03:53:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:46 2025 by rpki-client