Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: onQAYI7PIT/wqwmdwjmkyV27023k2DNQTKpuhpLpjY8=
Subject key identifier: F1:DC:9F:B0:8D:91:E3:D5:08:27:0D:E2:1C:D0:26:4B:C5:D5:F6:AF
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 01988DA22B15DCC33F61397DB83B15B36E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1631
Signing time: Sat 09 Aug 2025 07:01:11 +0000
Manifest this update: Sat 09 Aug 2025 07:01:11 +0000
Manifest next update: Sun 10 Aug 2025 07:01:11 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: fAQfGeT9e/W7NlocCN50yZ+F2bOAnmMnZVBWKqnwJSE=)
2: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (hash: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=)
3: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:2b:15:dc:c3:3f:61:39:7d:b8:3b:15:b3:6e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Aug 9 07:01:11 2025 GMT
Not After : Aug 10 07:01:11 2025 GMT
Subject: CN=f1dc9fb08d91e3d508270de21cd0264bc5d5f6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:03:49:f0:78:14:b1:6c:02:0c:79:6b:c1:
ef:94:e6:e7:e0:06:fa:02:9b:df:a3:5a:cb:96:92:
a6:d7:06:6f:11:26:5b:b9:71:98:78:81:b2:63:d1:
32:bf:24:d3:a4:7e:22:a5:7e:be:6f:6d:ec:bb:ae:
77:5a:23:a5:54:50:eb:52:ee:6d:5e:00:13:6c:01:
ac:3d:db:c3:f6:c0:59:b6:9c:37:a4:6b:dc:b7:52:
20:c6:0e:f3:01:40:11:9d:55:22:23:23:12:5f:e5:
c4:7c:5e:bd:93:4a:64:94:e3:36:3f:82:f7:46:9e:
7c:14:b6:07:41:d5:3c:37:d2:29:36:ba:9c:01:8a:
ed:1d:8a:51:16:dd:ce:72:79:61:48:18:64:cd:a2:
0b:53:b1:fb:8e:ab:39:60:48:cf:51:65:c2:ee:5f:
50:83:2b:f6:24:56:33:af:0b:16:de:0f:77:9e:34:
97:98:52:9c:cf:65:96:73:f7:f2:b4:9a:f1:3a:f5:
c1:1d:1a:a1:40:d1:53:1b:7c:19:97:a5:75:73:00:
a0:e9:a7:65:05:7c:a1:6e:40:2d:c4:33:b3:55:f2:
16:c0:27:89:7e:30:aa:db:7e:b3:ce:7a:9c:47:11:
ec:a4:11:a4:fe:5b:4a:30:dc:b4:b8:6a:27:27:44:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DC:9F:B0:8D:91:E3:D5:08:27:0D:E2:1C:D0:26:4B:C5:D5:F6:AF
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:37:80:9d:68:fc:bd:29:d5:ed:e9:ed:e5:d6:e8:89:a0:93:
06:d5:bf:83:8a:f3:57:66:16:f7:54:5b:28:07:dd:62:54:80:
0b:fb:56:77:bd:87:b9:ad:05:5b:87:46:94:5b:2a:a9:b9:bc:
7d:ec:72:de:29:40:ab:e9:cf:b1:ae:97:6a:81:eb:67:63:7b:
c7:0e:8c:c2:eb:9d:56:2f:e6:c8:a3:78:f8:8c:95:a8:89:49:
18:06:b8:ea:be:39:14:fd:30:26:eb:21:5a:bf:fb:c6:ca:a6:
86:3c:4d:9d:21:35:46:e8:09:9f:a1:90:73:11:07:cd:a6:01:
aa:4d:7b:5c:9c:ef:d4:11:44:f0:f5:68:88:fb:fc:8f:b0:c2:
2c:41:f1:3d:93:1c:20:d7:08:f7:53:21:02:78:32:42:e0:5c:
dc:73:3d:96:0c:2a:17:85:d4:0d:02:8e:c2:82:a4:3c:22:9e:
ff:3b:83:8c:04:45:8c:8f:05:76:85:30:8c:8d:77:b9:7e:97:
1f:ba:ef:8b:5e:10:fc:73:99:8a:93:1e:db:b4:b3:ce:e7:0e:
5f:88:ed:9c:99:45:34:fd:71:4b:fe:f5:37:95:f3:da:9e:55:
ac:48:78:d5:3f:f7:12:35:08:a0:dc:c2:23:7a:3a:ca:3b:12:
83:38:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:27 2025 by rpki-client