Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
File: 39hkHjKKpdGclg1Ikc-Gd84Siec.mft (raw, json)
Hash identifier: 7T/ihW0wEgw6sD3B1DO7M//+/C0eYbQQoOnFm5XGO34=
Subject key identifier: 96:42:33:A0:21:44:D4:46:2E:5E:79:8E:87:9F:4D:6B:90:3F:60:5A
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 019A533F07E7750CA3D6ACA42402467127FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
Manifest number: 13
Signing time: Wed 05 Nov 2025 09:00:30 +0000
Manifest this update: Wed 05 Nov 2025 09:00:30 +0000
Manifest next update: Thu 06 Nov 2025 09:00:30 +0000
Files and hashes: 1: 39hkHjKKpdGclg1Ikc-Gd84Siec.crl (hash: SZEI9yhC5g74vRDwmccLm7p2bp1jKicXzLDGKt4jHXg=)
2: FC0bdyuplJI1KGX4AfHE0Zx0LqE.roa (hash: ErGqRSFSyWBG0JZf35Cme2HC95smdmZ0LBiGyRvWJfo=)
3: Vs52J8_I6-6Ar4H7IoxIsedczaU.roa (hash: YX47Rdu8iskILAUdKTjD7fvWJ5LUe8zcxY/3psdpsYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:07:e7:75:0c:a3:d6:ac:a4:24:02:46:71:27:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: Nov 5 09:00:30 2025 GMT
Not After : Nov 6 09:00:30 2025 GMT
Subject: CN=964233a02144d4462e5e798e879f4d6b903f605a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:a8:78:b4:73:06:36:d8:ba:0e:61:c2:72:
fe:fa:4f:7d:8d:36:c4:84:b8:c1:10:bb:61:f5:d0:
d3:e6:f9:30:78:e9:98:50:0f:90:98:ec:da:06:fe:
51:87:0a:75:12:59:79:a4:e4:40:83:b1:97:af:e0:
81:23:0f:07:c7:06:ec:37:20:f9:b3:56:56:a1:ef:
10:e9:e8:06:df:70:e2:e7:85:16:53:5a:03:d9:c0:
72:ac:7d:6d:0f:63:60:e9:86:e5:3b:8e:b3:2c:33:
de:e3:1a:12:80:8f:42:2a:99:e2:9a:66:4e:aa:98:
9d:ee:cc:34:fc:be:b2:84:02:52:d1:13:81:d1:86:
ae:c8:a2:40:2a:9a:67:80:0b:e2:43:e9:d0:8f:66:
de:8f:da:31:2d:bf:b5:84:a9:42:d8:a2:3d:78:1e:
70:54:1a:e8:72:c3:8f:f4:80:5d:66:91:97:0d:d6:
a5:07:89:ee:be:3d:c4:05:71:a5:a1:26:90:7c:10:
6e:1f:30:73:1f:b7:a3:db:63:6d:a7:23:07:c0:bb:
0f:b1:c6:25:5e:ee:70:00:b2:bd:b8:8e:55:4c:34:
8b:43:d7:08:73:24:09:69:cb:7f:0d:bc:af:8b:46:
f2:ee:2c:36:48:95:d2:a0:69:4c:01:20:c3:87:0d:
6b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:42:33:A0:21:44:D4:46:2E:5E:79:8E:87:9F:4D:6B:90:3F:60:5A
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:37:12:4f:ae:00:4c:69:8e:62:76:f6:91:7c:8b:08:79:93:
b4:0a:82:3a:ed:38:31:16:81:a2:4f:05:3d:56:d9:4f:45:cf:
b9:34:eb:b3:fb:a2:45:78:d4:9f:8a:97:4c:2d:fc:df:4c:a0:
d8:bf:6d:b3:1a:57:51:2b:84:d3:3a:6d:a1:18:54:fb:a6:9d:
44:ea:25:cb:52:34:30:97:5d:06:15:16:f3:5b:89:a1:5c:25:
69:f3:0d:57:8f:39:56:55:5d:bf:2f:37:92:10:92:6f:3b:90:
f8:55:9a:cf:41:b2:a5:5e:3a:f8:7b:80:53:db:f4:22:7a:09:
18:67:d8:7e:5e:e0:4a:2c:f2:92:9f:3a:43:bc:64:e7:97:95:
0a:5e:30:6d:ae:7b:be:94:33:ac:3f:74:b3:53:4b:4c:ed:63:
49:4e:b3:21:0f:d0:2d:bf:bb:d2:d1:94:6a:4d:b0:08:62:45:
44:1f:2a:05:f1:38:90:9a:68:50:7a:e8:24:4c:67:70:f7:bc:
e6:0c:f3:be:de:6d:ad:14:94:e9:3d:c1:ba:a4:48:3d:28:85:
58:ad:b0:11:5a:b3:5c:08:56:b8:c5:66:79:06:7b:d3:23:bf:
97:48:6e:97:9b:80:99:c1:66:36:c0:d8:7b:d1:6d:cd:bb:38:
32:e5:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:29:06 2025 by rpki-client