Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: 5iRI6Po8NBHJFnUVKlJ1dv1ynoFhvruDMUoJ9OQEEoM=
Subject key identifier: 14:AA:2E:1B:6C:59:F7:7A:1D:D4:93:37:01:18:F4:68:30:C3:42:B3
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 0197B7451255A72E9E4123CA84A611BC8DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 15C2
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: urdoXMcSIq9znIZ2y/24UugqsBzhOf9sd0SsYMtFPdM=)
2: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (hash: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=)
3: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:12:55:a7:2e:9e:41:23:ca:84:a6:11:bc:8d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=14aa2e1b6c59f77a1dd493370118f46830c342b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:64:0e:b0:2c:d8:da:a8:fd:75:b9:99:90:
40:1d:01:61:c6:15:a5:88:68:73:cc:8e:fa:08:72:
0b:61:61:cf:a3:7d:d8:61:55:2e:40:ad:6a:13:ca:
e8:aa:f9:6a:42:63:6e:d9:2e:ca:6f:91:91:63:ee:
4c:ac:2a:51:77:ba:e6:92:3a:51:6d:86:c1:1c:e3:
53:06:d8:2b:b8:ca:20:65:c1:f2:c1:f6:1c:f0:02:
45:2e:aa:4e:94:32:37:1c:a4:3c:a2:ab:2c:42:d1:
64:6a:2d:71:c3:50:37:99:cc:bc:8d:eb:e0:e1:00:
16:af:6d:72:69:63:7a:31:d2:7e:ab:87:44:51:8d:
79:8a:02:11:47:d3:cb:a6:de:27:f9:71:d5:96:bc:
c2:aa:d6:47:07:fc:80:5e:9a:d2:7b:34:ad:c6:3e:
93:91:5e:52:78:44:fe:1d:81:f3:45:0d:9f:99:20:
2d:5b:8a:56:58:32:fd:54:0f:e8:34:bb:27:df:a4:
16:d5:77:53:b8:b4:33:71:96:db:c0:3a:36:56:51:
96:11:e3:93:c3:9a:33:04:f1:90:da:a6:4f:dd:82:
db:b7:67:24:17:09:b6:07:70:a1:da:09:43:e6:5d:
84:59:0f:87:d9:68:35:e5:00:8b:3c:72:62:38:e2:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AA:2E:1B:6C:59:F7:7A:1D:D4:93:37:01:18:F4:68:30:C3:42:B3
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e8:d8:a3:db:ac:16:f7:02:ab:70:e6:13:5c:f0:e6:59:e9:
b7:a3:19:94:e3:c0:3d:aa:4d:11:16:ed:8a:ab:d0:59:0c:ff:
5a:a3:21:ae:00:a0:23:bb:c2:d7:cb:e1:1d:68:67:a2:98:d8:
9b:fc:45:67:5b:9e:4f:59:4a:c3:a0:95:d5:6c:ac:01:c4:4a:
6e:ec:c5:a1:31:31:34:2c:54:0a:bd:cc:29:cb:a0:4f:98:7f:
f1:96:f6:d9:24:2f:1e:a0:96:9e:20:72:a9:a5:8b:ea:1e:34:
e9:0d:6e:d2:9c:81:04:37:91:e9:a0:f3:66:b4:55:fd:69:7c:
21:65:c8:8b:9d:c2:e4:3e:07:05:14:50:80:b0:47:72:d4:73:
5f:35:bc:3f:f6:42:a9:3f:be:eb:22:eb:6d:8e:6d:01:02:6a:
f5:17:df:d5:e8:c3:75:da:cd:9d:4b:52:89:39:70:50:98:9f:
28:bb:56:d5:46:10:20:ed:e2:c8:1f:eb:b1:1f:5d:9a:57:0e:
d1:85:12:2d:62:e2:09:fe:0f:41:0d:09:dc:15:1f:99:a7:d4:
07:90:7a:44:cf:86:48:06:0d:3b:f2:f5:86:34:75:cc:ea:bc:
6c:6b:51:b7:6c:4d:b3:a0:b5:88:e3:7f:99:8a:10:fb:b7:8f:
ba:03:d1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:32 2025 by rpki-client