Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
File: 39D7xN6B7icnq6PpEK_NKlOmZAw.mft (raw, json)
Hash identifier: iAROBGX6DMdPwMK5nGLLFm9klHFWOq2y/Itzr6lvx/c=
Subject key identifier: AF:B3:08:B9:82:AA:29:C9:C8:93:64:49:83:5A:93:D9:FD:D7:95:E6
Authority key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
Certificate issuer: /CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Certificate serial: 019A5119DA26C072D9E15449C8317AF9889C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
Manifest number: 0D
Signing time: Tue 04 Nov 2025 23:00:39 +0000
Manifest this update: Tue 04 Nov 2025 23:00:39 +0000
Manifest next update: Wed 05 Nov 2025 23:00:39 +0000
Files and hashes: 1: 39D7xN6B7icnq6PpEK_NKlOmZAw.crl (hash: 0TDMsjJc4Z/kUebvPfRv7f5eYtMyMJi0v3pdvRKyvEA=)
2: 4FynWQReK8fRxN_uNnLkwTP2lYE.roa (hash: VEq12KahPtGBV1be7sGcqyI3vqUnKDMcKj34J54Xm3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:da:26:c0:72:d9:e1:54:49:c8:31:7a:f9:88:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Validity
Not Before: Nov 4 23:00:39 2025 GMT
Not After : Nov 5 23:00:39 2025 GMT
Subject: CN=afb308b982aa29c9c8936449835a93d9fdd795e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:4f:07:81:87:9e:d7:91:10:39:3e:5e:e4:
ab:4b:f2:f6:3b:64:48:ac:d6:c9:fe:d6:ee:ba:9c:
7f:03:59:3a:ab:b2:5f:8e:b8:27:a7:f7:b1:dc:c0:
c1:8f:c0:63:fe:1d:c9:80:9f:87:1e:e5:91:96:9a:
64:3b:21:41:25:cb:12:9e:74:f1:fd:c7:17:98:27:
99:ab:2c:1f:59:8c:ce:b4:fb:84:15:90:8b:d5:94:
47:fa:c8:fb:c1:1b:16:be:8d:18:d3:69:63:0d:1b:
88:e1:e5:6a:33:a7:19:1a:c6:b3:c7:50:88:97:42:
39:20:d1:7d:33:57:8b:49:c3:e7:87:f5:bb:63:17:
6d:0f:d3:78:26:56:d3:35:eb:b0:97:3a:13:20:17:
85:9f:e2:f7:b0:80:2b:75:03:cb:7d:d6:9b:85:90:
03:e6:aa:23:71:7a:42:25:33:01:6d:81:96:d9:43:
f5:a5:b7:93:24:10:09:43:2d:eb:71:10:20:1b:4b:
29:56:7a:86:64:6b:fa:a2:39:ca:bb:35:04:bb:cf:
77:93:ca:5a:a6:76:22:6f:1c:2c:6d:47:df:1f:0c:
a3:c8:15:18:ea:d6:bc:fe:aa:03:d3:fc:40:41:42:
77:98:e6:6a:5c:fd:78:38:81:14:76:ff:74:1a:aa:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B3:08:B9:82:AA:29:C9:C8:93:64:49:83:5A:93:D9:FD:D7:95:E6
X509v3 Authority Key Identifier:
keyid:DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:fe:99:d6:04:cb:94:41:97:0e:1e:92:ee:67:a3:df:de:c8:
4b:54:d8:14:6c:e6:cf:9b:e2:ec:8b:fd:be:94:36:ef:94:4d:
e0:e6:32:85:7a:62:23:01:42:a7:71:0c:df:f8:41:18:a2:57:
cf:b8:dd:a6:6c:b9:31:2a:fa:e4:29:07:06:06:df:1b:93:ef:
98:77:ea:e6:34:2a:cb:a5:a2:83:5c:cc:30:a2:2b:fd:0a:02:
bd:6a:b9:0b:ab:59:94:80:56:a4:37:ca:7d:49:7b:1d:86:9d:
90:72:da:d6:d2:5c:22:c3:45:bb:14:72:66:b0:30:bf:57:fb:
7d:5e:04:79:3a:bd:05:09:ca:f1:df:88:26:13:df:16:b6:c1:
f0:34:68:7d:78:03:83:f0:01:02:f7:5f:90:ab:2d:87:33:81:
85:46:83:67:82:f5:06:27:a4:ab:b6:57:1f:20:1b:15:1c:4b:
b3:07:a7:88:8a:42:4e:8c:da:9b:00:59:7c:56:14:8d:cb:55:
6e:82:0e:e3:40:60:01:72:6b:4c:a0:39:00:0a:63:27:55:30:
f7:2e:a7:d9:1a:d4:9e:bf:36:dc:e9:fb:40:c3:43:ca:54:d4:
d4:2e:b4:6a:9c:64:6e:97:ce:33:c5:12:52:9d:a4:ee:be:90:
4d:cd:76:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:12:47 2025 by rpki-client