Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier: ZhI0bM8dxf0QNkjceHUxYP0bNuoICNZes9FcVF2/W50=
Subject key identifier: 56:FC:54:0B:F3:4D:21:27:FF:A0:1C:F7:75:24:1E:02:86:99:7A:F5
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 019874500A22DC8469B0ABF598F8A97185A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number: 04EF
Signing time: Mon 04 Aug 2025 09:00:59 +0000
Manifest this update: Mon 04 Aug 2025 09:00:59 +0000
Manifest next update: Tue 05 Aug 2025 09:00:59 +0000
Files and hashes: 1: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: Sgsq878oA02Mc0SdiqSTauu8B31u7jMWfwOZkkdkxNU=)
2: gdQzieOsDk19MHxPUsWlQ5yL-6E.roa (hash: O4NLUsT+6P2pJIZ4vji37jHYnfU3emApXIC6cXFBisM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:0a:22:dc:84:69:b0:ab:f5:98:f8:a9:71:85:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Aug 4 09:00:59 2025 GMT
Not After : Aug 5 09:00:59 2025 GMT
Subject: CN=56fc540bf34d2127ffa01cf775241e0286997af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:57:23:a2:de:0f:53:c4:e6:29:86:7f:34:
c5:08:7e:b6:3f:c1:79:d8:c9:5f:03:6e:c7:e8:d8:
32:48:9a:3c:b1:8a:40:91:8f:c4:69:d7:ef:b3:d7:
6b:e5:19:1f:f2:38:81:fd:cd:a5:5c:55:da:99:f4:
9b:24:a8:15:e1:7e:20:65:c9:31:e5:eb:a1:92:e8:
3d:b5:fd:0b:7f:ed:00:3e:fa:6b:1f:5c:f3:d2:e6:
7c:05:f5:c8:b8:0d:bc:fa:79:97:01:f8:c2:1c:ee:
c5:d5:06:07:55:a6:43:77:47:21:7d:9e:57:d3:96:
18:74:33:8a:07:a6:66:89:cb:08:3b:2c:6a:3a:5a:
66:49:ae:7b:91:70:17:1d:46:3c:07:ac:75:60:11:
4f:d8:ae:45:19:8c:ae:0e:30:c2:5e:f0:14:d6:77:
9a:34:90:70:f3:a0:4d:f5:62:74:fe:73:68:73:c7:
e1:69:3a:d5:7a:e7:1b:f6:b0:fb:2a:67:72:8d:38:
7b:4a:d4:bd:1a:8b:da:28:6d:e9:af:42:73:f1:78:
9a:7b:f7:85:1a:72:a6:29:a9:14:0c:7a:4b:d0:da:
79:5a:2e:82:73:5d:c7:4e:8a:95:72:59:3f:66:a4:
ea:e9:1c:aa:22:f4:0d:29:d1:e4:35:4b:23:68:de:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FC:54:0B:F3:4D:21:27:FF:A0:1C:F7:75:24:1E:02:86:99:7A:F5
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:29:10:6b:ce:0f:6b:0c:c7:d6:40:87:ab:47:c3:d7:59:86:
1e:93:31:55:e8:ec:56:97:01:5f:c4:58:69:73:ec:de:fa:d7:
9b:2a:1e:a9:76:0c:3f:4f:15:00:d8:d6:7c:e8:b0:05:cd:10:
c0:ac:65:43:d4:cd:fe:75:d2:5a:6c:f1:ef:ae:81:53:dc:19:
08:77:51:e2:ce:35:3a:31:09:14:fc:3a:c8:a2:c2:08:86:57:
6c:c9:3e:b9:81:74:30:dd:51:90:76:8e:09:fc:c8:3d:bb:66:
99:45:ee:32:1b:ad:14:80:22:1e:d4:4f:f0:26:66:64:25:96:
5e:5b:e4:40:f0:aa:1c:4e:5e:65:22:e3:ce:e5:49:2d:4f:52:
f3:9f:f1:0c:64:db:ca:3b:aa:e1:2a:61:ab:bd:1c:68:52:35:
d3:f1:5d:10:a2:91:38:09:e6:10:6f:de:32:47:92:ee:a0:11:
61:64:17:78:7c:0e:38:f2:90:94:ac:ff:62:c8:46:64:56:51:
00:6f:1e:c3:33:e3:9b:75:7b:71:4f:99:a2:cf:1d:f7:bf:de:
ed:a5:d3:10:d4:bb:52:0d:72:5b:c6:04:40:0d:96:bf:24:ee:
c2:96:c5:27:e7:83:37:75:2a:c9:f6:f0:2e:74:ec:fa:ad:65:
ad:a2:ac:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:11 2025 by rpki-client