Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier: /X5E3At7htg8bI2+tHx4lK8vb2j3cq4Ynn8ban0cmxE=
Subject key identifier: 05:46:6C:C7:73:02:74:04:A8:97:54:C7:36:9D:0E:63:F9:41:80:AF
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 019A5006EC551228545B04D9E6D71DE10FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number: 05E6
Signing time: Tue 04 Nov 2025 18:00:22 +0000
Manifest this update: Tue 04 Nov 2025 18:00:22 +0000
Manifest next update: Wed 05 Nov 2025 18:00:22 +0000
Files and hashes: 1: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: AA3EjWhbRaDLKnBSn4rxE18Q7rj7xx4G+RYhUKHLOKQ=)
2: tfQVIf0zNMfuGd1tpip3CLYwCts.roa (hash: +gDGXslGsdNWpAD47LvCZk6SPybHtwdwVZQN5l58KIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:ec:55:12:28:54:5b:04:d9:e6:d7:1d:e1:0f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Nov 4 18:00:22 2025 GMT
Not After : Nov 5 18:00:22 2025 GMT
Subject: CN=05466cc773027404a89754c7369d0e63f94180af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:f0:68:71:8d:49:7d:ec:84:32:4f:6c:61:
52:96:66:89:b9:f3:c1:f0:a4:e3:ad:e6:ab:94:e6:
13:d9:05:54:c8:f7:cd:1c:4d:c0:57:4e:4d:bf:73:
73:cb:b5:3b:e8:1b:97:22:97:58:bb:16:71:94:fc:
ed:56:b9:02:f7:79:aa:09:c5:e4:ec:9e:54:bb:0f:
8d:4e:97:31:22:94:a3:dc:72:d5:1d:2f:3a:ad:26:
77:59:88:5b:44:f5:e0:fd:1b:60:4b:98:01:6e:3e:
c5:b1:34:2d:ff:c6:f4:a2:b8:77:1b:44:a8:62:14:
96:b1:36:01:85:6f:08:1d:38:2e:30:0f:55:d7:fd:
c1:64:43:70:b3:3f:39:43:1a:9d:2f:64:52:b8:51:
d5:11:3d:7f:f9:2f:f2:7a:1b:45:d2:13:70:9b:9e:
7f:dd:4c:2c:2f:5d:8c:f7:ae:49:37:f1:06:a1:fe:
43:fb:b6:0d:a0:f7:7a:ab:c2:91:37:a9:32:ea:4d:
9d:52:5a:00:b5:70:0a:5f:c4:d5:5d:cc:ea:60:a5:
22:34:d0:9c:e1:a6:cb:0a:c0:b1:9a:15:8f:1e:33:
90:d6:12:e0:0d:d9:cf:50:13:e1:e3:e8:ed:fd:c5:
15:e0:17:82:a0:30:42:3a:17:98:0d:6d:a4:5f:f0:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:46:6C:C7:73:02:74:04:A8:97:54:C7:36:9D:0E:63:F9:41:80:AF
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2a:a2:0e:ed:07:36:31:d4:c8:ee:fd:15:dd:d8:ea:e6:24:
c2:37:7c:54:99:4d:35:97:33:92:ca:c8:2e:eb:9c:84:4e:c6:
f1:e7:e9:7d:42:f0:20:5e:0f:fb:1e:48:91:66:ec:36:28:07:
e7:74:51:53:66:55:4a:9d:38:5f:a8:f5:a3:b1:5a:60:b3:b2:
0a:71:ca:d2:5b:03:73:bc:70:1e:05:8a:74:25:b1:10:f5:fd:
71:08:14:db:66:c3:69:6b:93:14:dd:9d:73:45:a2:5b:06:16:
33:9c:01:2f:42:a2:dd:a4:be:89:05:0e:c9:76:f3:b4:f3:59:
d7:c3:2c:cb:0d:fd:95:c0:b4:43:fc:e6:d5:4c:11:b8:8d:d1:
54:c8:35:f7:95:06:05:07:c2:b5:04:07:e3:24:82:4e:17:aa:
cf:dc:85:c2:53:61:01:42:2c:cb:c3:ef:a3:ad:7d:93:04:aa:
da:3c:12:c5:63:69:b9:1d:83:5d:91:b7:7e:98:07:a1:15:43:
b4:c3:ab:8a:fb:6c:be:90:a5:f8:78:1b:d0:0f:90:c1:b0:d5:
6f:92:ac:6d:1f:06:4f:f4:e0:36:f1:58:cd:9a:de:7f:50:bf:
90:15:bb:b1:6e:1d:74:95:ad:da:1b:4a:21:9b:5d:d8:28:13:
f7:6c:43:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:59:32 2025 by rpki-client