Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: jpzkLc5kc1usrc8LWQChFckqA3pCJCL4UgAnYpp4Acg=
Subject key identifier: D4:3C:4D:A3:04:81:24:93:AD:46:7F:A6:35:B9:DF:7A:B6:DC:83:6C
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 0199FC8F3E50838F402EF3E17D3EDF0AB67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: XkH77DhPZnRAwV0of4DFLg79lQG3UztCwFvPM7t+X/o=)
2: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (hash: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=)
3: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3e:50:83:8f:40:2e:f3:e1:7d:3e:df:0a:b6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=d43c4da304812493ad467fa635b9df7ab6dc836c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2a:64:b0:0b:d0:3a:9c:4d:79:3f:51:0d:55:
5a:25:e3:10:5c:dd:16:a4:e2:8c:e6:4b:4c:f6:d0:
7e:9a:d6:9f:a2:36:8a:a4:c1:cb:e2:70:e5:4a:75:
0c:86:14:f9:20:8b:df:57:bb:1b:83:95:b8:51:7a:
81:e7:21:54:7f:9d:b8:92:7f:09:2e:ec:43:8b:ee:
c1:dd:58:c7:2a:c5:d9:9f:0a:24:c2:a8:a4:6e:63:
f4:aa:9d:1a:28:21:46:c1:35:81:55:e3:73:9a:29:
9c:65:fe:a9:dd:02:f1:44:a7:3f:83:68:70:79:c9:
f2:7f:87:48:d3:bc:a8:3a:0f:68:44:74:11:a8:0d:
97:8c:5e:41:54:57:88:34:ec:8d:dd:0b:6e:11:82:
41:03:49:7a:69:8a:9e:a5:7d:4a:75:7b:52:87:ad:
9b:c5:df:dc:4c:25:4c:5c:b8:6d:8f:48:7b:c4:3a:
82:ed:e6:bd:74:4d:98:31:f7:96:a4:a6:2b:2c:4c:
57:07:ba:10:e3:29:e5:50:96:81:ec:b4:27:d9:fd:
71:09:0a:cd:60:b8:38:7d:55:84:fe:93:32:d8:0c:
13:38:34:91:72:c7:f2:3b:e6:70:b5:4e:dd:62:7d:
85:ee:31:95:4b:c3:3c:bc:a0:96:e8:94:78:18:a1:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3C:4D:A3:04:81:24:93:AD:46:7F:A6:35:B9:DF:7A:B6:DC:83:6C
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:cf:a8:24:ce:b2:ca:49:9f:3b:09:e9:7d:a4:a7:d0:09:b8:
60:e9:b0:e4:c5:a1:c7:81:59:2b:5f:5a:ca:66:9b:e9:12:54:
68:71:49:ff:44:c3:93:7e:3c:e5:dc:f9:0c:0a:e7:3a:3e:db:
54:14:7b:41:7b:82:f2:76:38:67:b3:42:93:be:bf:12:9f:e3:
7c:c4:08:40:ad:76:ff:b5:2b:fa:56:ea:45:92:d6:16:a5:93:
9d:85:f1:84:95:2b:93:da:6f:e5:90:33:74:99:92:e2:3e:02:
b0:ff:5c:92:9a:1b:6d:67:06:34:e0:ba:9e:88:9d:8a:35:b1:
1d:28:86:ad:31:10:3c:0f:61:1a:ab:00:89:47:07:fa:84:52:
06:9b:b6:9c:46:f8:5d:79:6c:24:91:de:21:2c:cc:ea:a5:b3:
6f:6c:63:0e:7a:8a:96:2a:bc:f0:95:39:66:33:b6:5e:fe:49:
56:d2:84:59:c2:8e:94:c4:63:c2:a8:2b:92:cc:fb:0c:8f:dc:
87:fa:7b:78:af:ca:d8:ce:98:9b:0c:c0:e9:6f:79:46:d4:c2:
32:ac:e5:e0:28:a0:e2:09:b3:df:5c:e3:74:4d:f3:17:fd:3f:
a1:b5:ed:59:f1:16:11:ae:cc:3d:28:bf:31:92:dd:3e:4d:f7:
9e:6b:26:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:37 2025 by rpki-client