Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier: bmwAC7WxhJxqdbPqCJCB9UfkKlBfB3Dzablmy+hA/rg=
Subject key identifier: A5:CC:C5:AF:6F:F5:F0:5A:A1:17:C8:A2:B1:5B:3D:D8:DD:85:0B:73
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 0197BAEB39B199D7105442CB2FC721289486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number: 048F
Signing time: Sun 29 Jun 2025 09:01:07 +0000
Manifest this update: Sun 29 Jun 2025 09:01:07 +0000
Manifest next update: Mon 30 Jun 2025 09:01:07 +0000
Files and hashes: 1: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: +EVkSnhw6u00FN9WvIb5sQPzK+TUGU3A+EQVNOaCJt4=)
2: gdQzieOsDk19MHxPUsWlQ5yL-6E.roa (hash: O4NLUsT+6P2pJIZ4vji37jHYnfU3emApXIC6cXFBisM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:39:b1:99:d7:10:54:42:cb:2f:c7:21:28:94:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Jun 29 09:01:07 2025 GMT
Not After : Jun 30 09:01:07 2025 GMT
Subject: CN=a5ccc5af6ff5f05aa117c8a2b15b3dd8dd850b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:2f:f3:de:a8:e5:ad:ec:8c:4b:07:58:b7:
b2:66:b5:0c:42:b9:d3:8a:78:29:dc:b1:7d:da:b4:
dc:2d:f8:40:b7:2a:f2:72:a1:36:00:c1:6a:3d:cb:
f2:d0:ba:33:18:cd:4d:47:f5:61:46:40:63:3c:25:
d8:2f:5a:16:65:05:da:8e:00:4b:d2:8d:e9:50:af:
63:fc:18:1f:ca:93:b7:93:ac:70:e4:65:d7:00:53:
16:3f:bb:01:eb:e5:72:b9:84:42:0b:32:a6:22:36:
19:fe:79:0c:0b:7d:08:f9:e4:06:44:dc:3d:f6:c3:
43:c2:97:9a:74:42:2e:40:47:28:f6:5c:22:32:2c:
ec:39:e2:11:b2:87:97:f2:bd:a5:2e:8b:ed:79:18:
2e:91:ff:b9:5a:f8:36:41:31:1d:36:fc:65:94:e4:
4f:cc:6d:98:1e:ae:f8:18:89:f1:e4:a5:46:2f:a7:
28:e2:7d:14:87:3f:bd:7c:6d:f4:8b:a2:b7:a3:33:
92:83:23:9e:5a:9c:8d:4b:e8:ec:a1:99:7b:2c:c6:
dc:59:ec:df:b2:09:1c:f1:6b:7a:23:94:9c:17:37:
02:87:65:41:0e:1c:9a:86:37:18:3b:4c:e3:c1:ad:
b3:de:ad:06:af:cd:e1:e3:38:15:37:7d:2f:06:e8:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CC:C5:AF:6F:F5:F0:5A:A1:17:C8:A2:B1:5B:3D:D8:DD:85:0B:73
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a3:cc:2f:89:ef:4d:13:8c:98:ed:f5:17:51:c3:5f:ec:56:
4a:4a:c1:42:33:c3:5a:ed:8f:81:4e:99:df:64:f4:45:a0:05:
5d:97:a3:26:aa:27:32:c0:37:03:e7:5a:dd:03:d7:8f:1a:cc:
db:70:7b:0e:94:63:2e:b8:3b:e7:9e:37:d8:75:1a:0b:b8:18:
b3:4c:79:c5:6c:44:b9:18:22:63:fd:35:30:8a:90:0e:2b:b4:
3f:fc:78:3b:9b:6d:bb:4f:3c:83:1d:74:dc:a1:8e:b3:0d:ee:
51:c5:d0:ab:7e:4e:c8:05:00:8b:81:da:e6:77:96:5c:dd:1d:
25:32:30:1d:f8:86:2d:e9:f7:6e:43:c6:f0:a0:2b:16:a5:dc:
12:a8:ee:8f:26:8f:a3:36:ae:ad:08:4d:92:8a:37:cb:a3:d3:
21:40:8d:5c:69:88:ea:3a:78:d7:c2:d5:05:80:cc:91:ab:f7:
7a:84:6e:13:79:94:51:d3:58:a9:11:cf:0b:39:df:55:b4:e4:
c3:47:62:ad:ea:95:02:9e:2d:5f:19:03:53:e0:46:8d:7a:8c:
60:6b:86:fe:2b:aa:76:0e:cd:bb:3d:ad:7e:f0:4c:46:cd:51:
98:15:98:d3:4d:89:15:65:13:50:fd:36:7d:42:c3:b3:fd:32:
78:3e:ee:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:55:44 2025 by rpki-client