Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: uDHn7YAQLgBKoP1LxdpiTVAYm9vYaetlCIToSGnO33s=
Subject key identifier: 31:14:E9:88:D1:D5:C0:EC:64:5A:43:63:BD:2F:0B:FE:D2:F9:F0:06
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 01963EAFCF55854F9D9ED8FDAF5F26B47AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 14FF
Signing time: Wed 16 Apr 2025 13:00:31 +0000
Manifest this update: Wed 16 Apr 2025 13:00:31 +0000
Manifest next update: Thu 17 Apr 2025 13:00:31 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: 4rXlnaDdEs4BmQxsVv6hgeuOPWBk7y2sBztse2/rgws=)
2: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (hash: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=)
3: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:cf:55:85:4f:9d:9e:d8:fd:af:5f:26:b4:7a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Apr 16 13:00:31 2025 GMT
Not After : Apr 17 13:00:31 2025 GMT
Subject: CN=3114e988d1d5c0ec645a4363bd2f0bfed2f9f006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:94:c8:c1:11:10:b3:b5:02:a7:5a:23:8d:86:
5c:ff:ee:ab:d6:aa:b5:70:94:52:9b:55:e8:b7:0a:
a6:fc:39:c6:59:2e:0c:6f:78:f2:bc:20:62:66:b9:
68:7e:9e:fd:1f:ba:0d:7f:25:03:44:12:07:42:9a:
26:90:65:23:12:b9:51:d4:42:d3:fc:0a:fb:41:b9:
3e:d5:77:1b:98:33:68:f7:1d:b6:f5:78:9b:b1:f9:
d1:d5:bb:96:f8:8b:95:4a:94:87:f0:0d:4b:ec:8a:
2c:44:54:91:4b:a3:85:0c:b6:48:4a:84:76:df:8c:
86:a5:32:3c:f2:8a:d4:8d:72:f8:86:4c:59:21:4d:
26:c1:fb:e3:d0:1b:62:48:06:91:b8:eb:f4:93:91:
a9:1d:c5:eb:8f:38:e2:97:c2:ef:ba:0a:cf:75:26:
4e:12:e6:b2:36:10:14:89:91:3a:1d:2d:f8:57:d9:
5a:42:6d:ff:52:23:5f:74:c8:56:8f:0b:60:a0:a4:
6d:e0:9a:90:88:c6:73:9f:37:dd:62:aa:fd:03:fa:
f8:82:08:9b:0a:fc:45:a6:5e:23:e7:0c:0e:39:d9:
bc:55:75:e2:2b:95:57:65:5c:e6:ec:c0:a7:5c:08:
0c:f1:f1:91:77:a7:3e:d8:24:9f:86:16:d5:a2:2c:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:14:E9:88:D1:D5:C0:EC:64:5A:43:63:BD:2F:0B:FE:D2:F9:F0:06
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9e:2c:9f:c1:db:59:40:d4:7f:32:5f:d3:c9:ae:3f:47:ff:
2a:88:90:84:df:e8:05:bd:8c:75:b1:c1:28:ec:0d:01:ca:dc:
3d:fc:a9:fc:85:b5:df:1f:bd:c4:9b:27:fc:c5:78:f4:bd:0f:
10:4f:09:d9:6d:9e:4f:3c:0e:ac:9d:13:26:19:37:62:90:77:
ef:68:36:e8:3c:db:b4:d6:2b:d8:4e:22:7e:22:13:e4:8d:4e:
d3:97:36:58:1c:98:3e:02:13:e7:1a:ec:a0:45:5c:b9:d5:96:
4e:cc:dd:0e:1d:21:95:f6:bf:38:df:ad:0c:00:2b:fc:29:d6:
aa:25:ed:25:f6:17:45:5f:99:28:5c:82:00:2c:18:ff:83:7a:
42:99:c3:d9:05:b2:04:54:20:19:19:87:3a:a1:53:47:1f:83:
ed:f3:b0:e5:15:59:ff:3e:33:4b:aa:17:42:3c:f5:99:94:a9:
b7:cf:6d:7d:b6:4c:6b:f9:79:f1:bc:41:0b:9f:dd:df:4d:56:
1d:48:6d:05:02:c7:61:8c:fb:ee:d1:a8:d7:2b:b1:15:2a:9c:
02:f5:93:b2:7a:51:a4:52:f6:7d:82:6e:37:bf:a3:4d:ea:2c:
5c:a2:35:74:91:c3:b7:7c:f6:9e:54:7f:0a:ca:78:a0:49:fb:
dc:10:1c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:13:17 2025 by rpki-client