Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: P68Ez+VaLiGpPrfGFaI0LT64sCWJ7ac1ShtzmH4rOuQ=
Subject key identifier: 89:F3:4A:F5:D2:DF:40:24:01:60:D9:92:3E:07:A1:DC:B5:68:16:06
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 0199FD345481D4C605CB680B5B966EB398E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 06EA
Signing time: Sun 19 Oct 2025 16:01:29 +0000
Manifest this update: Sun 19 Oct 2025 16:01:29 +0000
Manifest next update: Mon 20 Oct 2025 16:01:29 +0000
Files and hashes: 1: 0XKLHVF6OopWfkCp5SGDRjUGSwc.roa (hash: LlbXk7YPxKtyITregmmE7lsrGbU25UL9jnRqhgrsqYQ=)
2: BXJ7UivZREqfV3oE_cto5-RbCwU.roa (hash: H5O0TywJPldSIFgMKfugAhkIQ7kPwBy5/c6iSkGttag=)
3: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: rPO/m2Sov8/ro/DpX1EReZYfkTWi5l2CqnC7XWlhl+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:54:81:d4:c6:05:cb:68:0b:5b:96:6e:b3:98:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Oct 19 16:01:29 2025 GMT
Not After : Oct 20 16:01:29 2025 GMT
Subject: CN=89f34af5d2df40240160d9923e07a1dcb5681606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:e4:fe:14:05:7a:3d:b2:e9:ab:18:aa:56:
6c:8f:ae:c5:ae:86:a9:31:0c:bd:c1:84:2f:ea:cf:
23:a0:36:9c:4d:67:f5:e1:36:dc:a8:2d:8e:60:98:
84:8c:cd:86:ef:07:34:6b:24:49:ef:c9:6b:6d:8d:
2d:96:27:6e:55:68:9a:a2:95:f6:bb:e6:19:4e:59:
cb:61:44:d2:54:f1:cc:ed:59:9b:d5:49:6c:91:ae:
5f:37:14:69:50:57:89:50:c4:2a:3e:66:c0:24:82:
26:b3:e7:d3:c3:35:5f:07:49:47:39:0f:8d:68:09:
b5:c2:cd:90:c9:16:77:d4:93:b6:8a:91:a7:0d:cf:
77:50:6c:e1:2b:7f:c3:74:94:ec:c5:22:15:a6:c0:
6f:ad:84:7e:8b:2d:cf:f4:32:bc:d5:e3:df:24:7c:
42:94:1d:76:5f:18:ee:c6:cd:d7:95:25:37:be:fa:
db:0d:d5:af:f6:91:38:1f:be:90:c4:44:a9:ed:8e:
79:f0:47:72:cf:f1:92:b5:2e:2f:af:be:9b:5c:42:
af:01:54:7c:91:96:d7:ec:43:30:e2:d2:c0:70:d0:
84:f4:00:18:b3:f3:87:66:10:22:c6:cf:62:40:70:
76:1a:37:19:fa:10:51:38:7f:3d:18:f3:ef:d2:b3:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F3:4A:F5:D2:DF:40:24:01:60:D9:92:3E:07:A1:DC:B5:68:16:06
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:36:ab:73:0f:7f:b9:98:70:2b:9e:4a:ea:51:bc:bf:68:53:
e3:49:d5:c2:5b:51:e1:66:32:30:87:3e:0d:ec:fb:a9:97:6d:
9e:cc:9a:db:1c:5f:d0:a4:7b:54:42:6f:0c:46:3d:fd:9d:f1:
5a:ff:fd:55:e0:b0:61:4c:eb:00:77:04:4f:6d:1e:b1:bd:9b:
46:d1:d8:45:9b:a0:63:1e:31:04:7b:47:c7:3e:b6:22:64:b7:
8c:f3:66:05:dc:c6:4c:d7:85:9c:27:ac:3f:51:02:54:4a:d1:
cd:43:ed:27:59:a7:34:6c:ec:9a:ed:ac:83:bb:07:ff:a7:ca:
8f:b3:db:2f:2a:20:28:ca:9f:44:85:a8:88:be:f2:a2:8c:a4:
db:21:87:77:9b:cf:90:0d:a6:19:ee:16:55:cc:97:14:a4:ad:
90:9a:16:ef:ea:10:c7:c0:79:e8:4d:b5:5c:34:2e:03:fb:25:
13:1c:bf:26:31:18:9f:a6:0c:69:37:83:b5:04:e7:86:b2:d7:
2d:27:47:df:63:87:03:ad:03:9f:d8:82:5b:5f:96:f8:34:4a:
7d:d6:1b:bb:55:c1:b9:6a:8b:6b:b2:80:b6:53:4a:b7:6d:72:
76:56:ef:38:be:2c:bf:60:ba:bc:0f:b6:ed:92:0f:1c:0f:38:
e0:cd:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:45 2025 by rpki-client