Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: 0q+mQaEieNr857shsb0tv8zgfFjz/Qj4Bis+IGP+eYA=
Subject key identifier: 34:D6:A6:42:51:EA:E1:05:09:7D:6C:BE:76:4B:0C:71:F5:31:E8:63
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 01989412275BC9C99BA3DFF8AD59683011AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 062F
Signing time: Sun 10 Aug 2025 13:01:14 +0000
Manifest this update: Sun 10 Aug 2025 13:01:14 +0000
Manifest next update: Mon 11 Aug 2025 13:01:14 +0000
Files and hashes: 1: 0XKLHVF6OopWfkCp5SGDRjUGSwc.roa (hash: LlbXk7YPxKtyITregmmE7lsrGbU25UL9jnRqhgrsqYQ=)
2: BXJ7UivZREqfV3oE_cto5-RbCwU.roa (hash: H5O0TywJPldSIFgMKfugAhkIQ7kPwBy5/c6iSkGttag=)
3: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: oGhXea9k3iQU1IT+OP2+gWkLk2cEMILXPg/lEPNqZI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:27:5b:c9:c9:9b:a3:df:f8:ad:59:68:30:11:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Aug 10 13:01:14 2025 GMT
Not After : Aug 11 13:01:14 2025 GMT
Subject: CN=34d6a64251eae105097d6cbe764b0c71f531e863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:0b:0e:aa:6b:f2:12:79:cb:59:c1:46:38:
23:64:b1:09:86:15:57:7d:78:8d:04:d1:9c:6b:d5:
50:94:b5:80:5b:4c:cd:8f:f0:9e:a8:8a:f0:63:85:
59:f2:e7:15:fe:83:90:7b:ae:57:f2:18:34:48:6f:
46:52:c0:e3:24:df:ef:7c:da:04:61:51:bc:73:5e:
59:38:f8:f8:c0:22:9d:6c:47:75:30:ae:9d:d5:ca:
b0:13:cb:e4:61:eb:9d:28:d8:91:63:a5:95:a5:bc:
a1:5b:24:07:1d:da:8a:a8:61:44:88:7f:21:a1:5b:
16:88:0b:61:ea:34:ef:f5:94:bf:0a:fa:7f:fa:d3:
03:ea:8a:41:56:cc:3f:ba:24:a4:71:a3:b7:18:f1:
f3:4e:4b:c1:0c:f7:e2:7c:9d:c2:b6:a9:1f:46:6b:
1a:df:40:e1:72:da:c7:71:45:cb:d5:c9:7e:76:c0:
37:6b:3f:6e:be:7a:0e:96:6d:68:f5:ff:40:44:ec:
34:4f:ba:c7:a1:16:64:ef:81:16:b4:48:e2:91:6e:
2b:7a:74:2a:c2:f2:29:80:4d:ba:99:1b:f1:c4:21:
63:0b:0f:86:04:b1:10:fe:6e:38:49:c1:46:f3:83:
d6:c9:62:db:5d:98:2d:0e:21:5f:3e:9f:47:5e:89:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D6:A6:42:51:EA:E1:05:09:7D:6C:BE:76:4B:0C:71:F5:31:E8:63
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:63:ff:dc:70:d5:92:5c:8f:9a:b4:6f:96:60:fc:a6:9d:f0:
a3:69:59:d5:8d:10:63:1a:fb:03:87:86:a7:1b:de:0e:d2:6a:
cd:c5:5d:63:01:f4:1d:1f:b3:cc:13:ac:f8:00:b7:54:d9:be:
64:cb:74:9f:42:97:9f:04:ad:db:06:4c:73:e5:60:7c:ab:f1:
9c:2f:0c:c2:b1:cb:5d:a7:06:8f:1d:77:8d:ca:7d:42:3e:f7:
d4:97:8d:e4:a0:aa:36:70:9d:5d:08:c7:32:d8:cf:d2:8f:be:
b9:cf:59:9d:6c:6c:11:9f:61:1a:92:94:7e:b3:3e:2b:10:b9:
ab:e7:5f:dc:b2:e7:8e:a0:c0:05:83:2d:14:9b:c0:3d:6e:e8:
06:43:39:b0:b4:c8:59:56:8b:4a:17:96:d5:70:58:0e:23:1a:
d7:09:36:ee:5f:0d:e0:22:66:ef:aa:f6:08:b6:9e:d3:b2:b0:
7e:60:fa:78:ee:15:57:6b:5f:53:15:0d:44:c4:34:30:f3:a7:
10:32:f5:6a:fc:7e:0f:63:f4:7b:03:8a:0b:6e:06:37:d5:0a:
78:9b:28:13:ff:cb:c2:51:56:26:e7:4e:ec:27:28:c1:50:12:
8a:29:c0:09:2d:da:ca:c3:e4:23:81:75:04:2e:47:72:bb:cb:
f4:97:09:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUEidbycmbo9/4rVloMBGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3N2Y0YjZlYzQzNDcxNTdjNGQxM2VmMGU3YWJlMTI5MGEw
YmY1N2MwHhcNMjUwODEwMTMwMTE0WhcNMjUwODExMTMwMTE0WjAzMTEwLwYDVQQD
EygzNGQ2YTY0MjUxZWFlMTA1MDk3ZDZjYmU3NjRiMGM3MWY1MzFlODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGULDqpr8hJ5y1nBRjgjZLEJhhVX
fXiNBNGca9VQlLWAW0zNj/CeqIrwY4VZ8ucV/oOQe65X8hg0SG9GUsDjJN/vfNoE
YVG8c15ZOPj4wCKdbEd1MK6d1cqwE8vkYeudKNiRY6WVpbyhWyQHHdqKqGFEiH8h
oVsWiAth6jTv9ZS/Cvp/+tMD6opBVsw/uiSkcaO3GPHzTkvBDPfifJ3CtqkfRmsa
30DhctrHcUXL1cl+dsA3az9uvnoOlm1o9f9AROw0T7rHoRZk74EWtEjikW4renQq
wvIpgE26mRvxxCFjCw+GBLEQ/m44ScFG84PWyWLbXZgtDiFfPp9HXonJOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTWpkJR6uEFCX1svnZLDHH1MehjMB8GA1UdIwQY
MBaAFEd/S27ENHFXxNE+8Oer4SkKC/V8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzIt
ZDhiZDI1MGI2NGY5LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzItZDhiZDI1MGI2NGY5
LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWP/3HDV
klyPmrRvlmD8pp3wo2lZ1Y0QYxr7A4eGpxveDtJqzcVdYwH0HR+zzBOs+AC3VNm+
ZMt0n0KXnwSt2wZMc+VgfKvxnC8MwrHLXacGjx13jcp9Qj731JeN5KCqNnCdXQjH
MtjP0o++uc9ZnWxsEZ9hGpKUfrM+KxC5q+df3LLnjqDABYMtFJvAPW7oBkM5sLTI
WVaLSheW1XBYDiMa1wk27l8N4CJm76r2CLae07KwfmD6eO4VV2tfUxUNRMQ0MPOn
EDL1avx+D2P0ewOKC24GN9UKeJsoE//LwlFWJudO7CcowVASiinACS3aysPkI4F1
BC5HcrvL9JcJ7A==
-----END CERTIFICATE-----
Generated at Sun Aug 10 20:59:13 2025 by rpki-client