Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: wgks5L/dEAipVSvuTY5svHPxFW/HotaoQmNK++MuIlE=
Subject key identifier: B9:A8:60:48:C8:3A:64:3E:6C:76:BF:B3:24:EF:3B:CE:52:AA:F7:6C
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 0197C75DA011F6ACEC01247D0BF4E1DA5EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 05C5
Signing time: Tue 01 Jul 2025 19:01:31 +0000
Manifest this update: Tue 01 Jul 2025 19:01:31 +0000
Manifest next update: Wed 02 Jul 2025 19:01:31 +0000
Files and hashes: 1: 0XKLHVF6OopWfkCp5SGDRjUGSwc.roa (hash: LlbXk7YPxKtyITregmmE7lsrGbU25UL9jnRqhgrsqYQ=)
2: BXJ7UivZREqfV3oE_cto5-RbCwU.roa (hash: H5O0TywJPldSIFgMKfugAhkIQ7kPwBy5/c6iSkGttag=)
3: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: uBdC6J2N9rkp4BmOggU/idC5Qph8X2vV9LjviD0JZSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:a0:11:f6:ac:ec:01:24:7d:0b:f4:e1:da:5e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Jul 1 19:01:31 2025 GMT
Not After : Jul 2 19:01:31 2025 GMT
Subject: CN=b9a86048c83a643e6c76bfb324ef3bce52aaf76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:4c:67:f6:67:2f:74:a2:a5:ea:8e:48:a6:
c3:52:5e:97:b0:73:ea:9d:17:68:df:0c:f0:aa:b4:
a7:42:f7:1f:0c:14:5e:ce:2b:03:96:e5:79:07:63:
53:aa:83:78:55:cd:1b:ee:fe:94:d2:40:92:cb:a9:
a1:e9:87:83:08:99:ff:6f:3a:c6:87:ad:f1:94:37:
55:45:33:29:cc:b2:e7:b2:e2:9b:70:02:54:a7:c2:
a2:e6:9e:28:e9:a3:d0:b5:63:f9:ea:9e:f7:95:02:
df:49:7c:b8:3b:42:39:8d:11:e8:4d:ec:18:fe:04:
3b:10:8b:cb:9b:92:72:18:40:20:a4:31:3d:c7:27:
3e:1a:d9:17:39:3b:be:74:73:a7:2a:05:60:ba:bd:
d4:1d:4e:22:f5:a8:b3:34:07:4b:6d:43:54:04:53:
39:39:ef:93:dd:b2:62:d7:54:8e:6d:c5:04:1d:6e:
d1:98:a9:5c:c6:c8:7f:bc:91:57:83:59:75:c6:bb:
3e:ee:7d:40:c6:41:48:30:79:3a:b3:ca:95:d7:64:
1a:c6:03:fe:c5:c5:76:5a:69:93:64:89:02:33:4e:
18:36:5d:b2:c0:65:3e:d2:f0:4b:bd:2c:f7:ca:55:
4c:1d:2a:c7:68:f1:b2:d9:fc:09:80:97:da:54:24:
ec:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A8:60:48:C8:3A:64:3E:6C:76:BF:B3:24:EF:3B:CE:52:AA:F7:6C
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:17:75:b9:6a:24:79:60:f1:a1:b2:37:02:67:a8:b0:67:3d:
59:04:90:b5:18:95:de:c7:29:9c:69:3a:63:be:ac:a5:7f:95:
9a:1b:6f:bb:02:4f:e2:da:52:5b:52:dd:b3:d5:2d:7e:27:f6:
f8:46:91:4a:7e:fa:80:e7:6d:b2:6b:29:71:f5:17:a1:9e:5e:
a7:0f:c1:23:9e:b0:7f:84:90:73:53:fe:1f:e1:75:2d:5e:93:
70:4e:77:72:92:e6:28:88:29:91:ed:c8:0b:3a:f3:8d:88:e3:
ff:a9:8e:f6:c0:1d:c2:2d:df:bd:e1:49:d5:b2:94:6f:bc:34:
68:3b:0e:76:58:9c:c9:ee:4a:8e:bd:8e:1d:83:8d:b9:83:3f:
9c:56:81:f0:91:33:da:11:70:2b:66:6a:c7:3a:10:21:33:13:
0b:cd:36:b4:70:0a:cb:4c:72:13:98:da:d6:43:84:26:53:bd:
c3:07:9c:96:c8:3d:4d:2a:08:5e:33:e4:c9:79:22:82:02:60:
39:a9:36:60:fc:f1:e0:03:ef:12:fc:c0:07:c2:f1:9b:85:a9:
93:ae:79:bb:ae:45:8b:bb:d8:11:a2:ab:24:2b:7f:d2:b1:94:
19:94:4b:f8:30:1e:65:c7:7f:0c:fd:f7:df:d0:19:77:4d:e1:
1e:bd:ef:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:16:26 2025 by rpki-client