Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: q+efaRrLs87nIFAebvsVSXAFMtycjAUrlhVLBiWsOgM=
Subject key identifier: A0:00:7A:98:DE:C1:BE:25:F6:C1:AF:40:BB:DA:38:37:A0:36:C2:D5
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 0198D51621631D5B2597BE6CFE9E29A8FDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1656
Signing time: Sat 23 Aug 2025 04:00:53 +0000
Manifest this update: Sat 23 Aug 2025 04:00:53 +0000
Manifest next update: Sun 24 Aug 2025 04:00:53 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: 6xBzpJEWCv5TxuZ5tHQkzIBPDSwoxOFLs+xSR3ACx7A=)
2: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (hash: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=)
3: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:21:63:1d:5b:25:97:be:6c:fe:9e:29:a8:fd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Aug 23 04:00:53 2025 GMT
Not After : Aug 24 04:00:53 2025 GMT
Subject: CN=a0007a98dec1be25f6c1af40bbda3837a036c2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:27:d5:26:a8:1f:64:5e:1b:1c:79:02:b5:
a2:6f:8c:d3:53:2b:10:6c:05:fd:af:e6:1d:d6:e9:
3b:c0:d7:53:63:b1:4a:77:0e:5a:e8:d8:16:8f:d3:
88:b2:c4:0c:60:01:61:80:e9:a5:14:9e:e4:eb:8a:
ac:46:c2:2c:f8:30:1e:63:de:17:f9:bd:4b:57:1c:
40:ab:20:80:19:9d:51:c5:74:7e:98:29:fd:72:3e:
f6:14:ab:02:ab:f3:10:8c:e0:7a:02:3f:fa:0b:cc:
5c:c9:a2:7b:12:58:c4:c1:11:a1:8d:0a:08:7e:be:
69:36:a2:13:c0:74:4f:e2:51:3b:39:a4:2a:0a:d7:
b4:6a:ac:72:d9:9a:a1:30:e6:5f:3d:48:67:29:87:
d2:b8:6e:c4:f8:bb:a4:0f:7f:bf:19:59:c2:36:6c:
65:0d:56:a5:12:94:3d:83:7e:5e:9d:4c:1b:f5:87:
98:04:4f:42:16:ef:3a:ab:27:fd:0b:9e:36:fd:e7:
31:6f:c9:5f:e8:5f:8d:5d:a0:92:3e:28:b7:9f:35:
c1:40:3a:69:3c:5d:f8:f6:f3:30:1d:5f:dd:81:d6:
d6:6c:dd:ec:c6:14:66:0e:d8:61:ef:c6:0e:71:2f:
3f:c1:5c:a6:65:c7:e6:4d:46:41:c0:d3:2b:7e:7d:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:00:7A:98:DE:C1:BE:25:F6:C1:AF:40:BB:DA:38:37:A0:36:C2:D5
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:db:75:3e:28:b0:40:62:da:fb:93:b7:b0:0e:26:73:0b:8b:
27:e9:64:b5:67:a3:75:2f:9a:54:fb:a9:dc:3f:59:8e:1b:45:
f8:75:59:aa:fe:cc:26:4b:7c:04:d9:fc:cd:12:4a:59:74:c9:
11:37:83:0d:f2:ce:19:92:dd:3a:1c:c4:7a:e9:df:d8:de:de:
06:72:e0:a8:3e:4d:be:93:3a:74:70:db:23:91:10:7a:df:95:
fe:7a:c9:6a:dd:af:2c:51:3f:38:81:4e:9b:61:35:ea:98:c9:
70:ef:c5:ef:2b:e1:24:6d:c6:40:20:c5:55:ae:0b:d3:f6:7a:
95:59:ac:e9:d0:e6:f8:52:14:3e:4a:08:a2:ff:74:f8:db:f1:
29:56:15:98:25:c4:bf:93:91:3c:a3:83:1d:43:6c:ff:de:a1:
47:49:a4:b3:90:79:13:c9:03:27:71:1e:a0:17:08:ad:7d:6a:
36:f1:5c:4e:88:fa:58:19:5b:80:b9:49:69:0a:b5:60:01:92:
1d:c1:1f:f9:9a:98:ce:6c:57:58:34:49:b2:ea:79:ac:e9:3e:
67:ac:62:f7:9d:92:c3:20:e8:5a:b5:ff:dc:cf:23:07:10:bb:
ed:9f:c8:ba:e0:48:93:a8:7b:36:2e:3c:53:2d:62:21:99:7e:
6d:22:db:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:23 2025 by rpki-client