Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: gDCfcUUscZUeG8YT3MbbleOE6FwZT/eYstRVr/ZxrEM=
Subject key identifier: 8B:8C:96:6A:D6:72:0F:C3:22:D2:51:28:AB:A6:16:62:05:D3:9E:27
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 0197850F54C89C1B762327D7DCD72BC85554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 15A8
Signing time: Wed 18 Jun 2025 22:01:03 +0000
Manifest this update: Wed 18 Jun 2025 22:01:03 +0000
Manifest next update: Thu 19 Jun 2025 22:01:03 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: TCczRhAHsI0vrgFTXxRwUP9u8jykJNlDShw6ThFPCn8=)
2: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (hash: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=)
3: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:0f:54:c8:9c:1b:76:23:27:d7:dc:d7:2b:c8:55:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Jun 18 22:01:03 2025 GMT
Not After : Jun 19 22:01:03 2025 GMT
Subject: CN=8b8c966ad6720fc322d25128aba6166205d39e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:0b:48:34:ee:b4:15:e4:63:6c:bc:d9:66:
41:f9:bd:21:9a:2a:40:b1:4e:0f:e0:c9:6b:0b:77:
21:60:45:83:94:f5:62:3d:67:87:8e:96:fc:03:4a:
8d:a3:6a:f4:85:72:c3:de:2a:35:c6:38:04:dc:b0:
de:3c:52:ce:5a:77:67:87:c2:e2:2c:70:6f:1b:3d:
19:8b:d4:a4:73:2a:70:22:5a:f0:42:98:d3:8e:84:
71:3c:61:8f:84:05:7f:d2:b0:52:fe:6f:e1:00:f1:
ef:d7:9f:fc:27:7e:ae:e9:35:2b:e9:bc:22:78:10:
8c:b5:ff:95:39:b3:70:79:62:ee:f6:00:a3:1a:ab:
ac:1b:d2:a5:d9:e4:0b:a5:3b:d4:ad:84:10:df:7e:
b4:47:0e:7a:64:d0:f6:80:34:70:0d:b5:11:d3:70:
00:23:1e:4f:65:3a:f8:94:ff:54:96:06:10:ad:ec:
ae:36:38:e6:04:b8:13:f3:d4:54:61:98:38:34:61:
af:86:c2:a8:cc:f7:3d:0b:01:11:cb:8d:53:28:06:
82:fb:15:e6:0c:c5:db:08:43:7c:38:00:cf:b6:59:
cb:03:db:5d:c7:c9:99:ec:ac:41:83:0c:5b:ef:71:
cc:0a:8b:76:d3:3c:fc:8e:c4:e5:86:da:5b:3b:a4:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8C:96:6A:D6:72:0F:C3:22:D2:51:28:AB:A6:16:62:05:D3:9E:27
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f7:0c:04:3b:0d:bd:c9:b2:04:23:2c:3f:ad:76:8f:bf:02:
2a:89:b3:b4:30:7c:91:3a:79:c2:ff:a2:83:9f:79:2d:a6:83:
f6:bd:24:af:3e:f0:4d:6f:b2:fd:94:06:29:ff:1e:f4:c2:d8:
05:69:2d:0a:f9:cd:52:85:5b:ed:fa:be:0f:88:86:53:14:7c:
68:b7:25:af:22:41:bc:df:56:d4:00:46:e7:3e:bc:ed:de:c3:
32:32:17:c6:1f:a5:99:da:69:34:40:c8:fb:e9:3f:c2:90:1b:
9e:24:20:2d:30:e6:cb:57:1c:4e:ef:af:32:7e:ef:9a:85:9c:
8c:28:f6:6e:35:96:40:94:12:5e:b9:27:24:a5:2b:d0:c8:32:
b6:c9:96:21:05:26:92:35:ca:39:b8:8c:74:ef:79:83:85:63:
05:cc:a7:6a:6a:1a:e5:41:0a:a2:e6:a1:ee:3a:8a:1b:36:45:
a7:ef:00:b4:5a:3e:41:0d:f6:7e:26:3b:1a:1a:18:64:81:6f:
90:b8:ce:65:48:58:d4:86:98:52:31:80:3f:12:ad:fc:4c:30:
fe:1d:2e:fb:7f:a8:9a:be:a8:e4:7e:64:75:a4:df:be:79:9c:
99:ea:43:ca:46:89:80:00:fb:07:3e:55:ec:13:55:f1:be:6f:
d9:04:51:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:42:08 2025 by rpki-client