Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier: Ss3uDG97m51clKx0754IjjMuBcXU6IzMOD46lL5Zrfg=
Subject key identifier: D4:6E:06:FC:11:0F:E3:19:42:40:9E:0A:B8:1E:BF:68:EC:3C:38:55
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 0199D46ED29A971148E36CFA36CCAF9529CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number: 05A6
Signing time: Sat 11 Oct 2025 18:00:56 +0000
Manifest this update: Sat 11 Oct 2025 18:00:56 +0000
Manifest next update: Sun 12 Oct 2025 18:00:56 +0000
Files and hashes: 1: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: ICNmNE5Kz027msW0WX0B6C5YVZN0dQDigRXVSvPZfWE=)
2: tfQVIf0zNMfuGd1tpip3CLYwCts.roa (hash: +gDGXslGsdNWpAD47LvCZk6SPybHtwdwVZQN5l58KIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d4:6e:d2:9a:97:11:48:e3:6c:fa:36:cc:af:95:29:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Oct 11 18:00:56 2025 GMT
Not After : Oct 12 18:00:56 2025 GMT
Subject: CN=d46e06fc110fe31942409e0ab81ebf68ec3c3855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:98:57:64:be:6a:82:6d:44:8a:1a:d6:30:5f:
1f:07:6d:ec:2e:f5:4e:f9:5b:32:76:3f:6b:d9:9f:
2c:b1:fb:6c:ab:18:0d:8b:84:0e:50:da:d6:9c:9e:
b4:e5:73:08:5e:ee:4f:d8:6e:e3:70:62:7a:ca:30:
fc:56:be:d3:74:eb:52:39:ba:86:44:21:6c:95:22:
58:a7:30:11:75:7b:76:55:9c:45:8b:6d:08:fa:59:
51:3d:de:d9:27:a9:bf:9a:94:1d:32:c9:0b:53:28:
96:5c:c4:35:4f:88:56:ce:d9:cb:55:dc:ce:a6:1c:
0d:dd:6f:bd:ae:0e:75:4b:00:ce:8e:d8:8b:ec:d2:
94:9a:44:ec:11:32:2f:6b:97:57:0c:18:64:aa:21:
0c:c2:43:d7:49:2d:c3:33:ae:7d:93:32:cc:05:50:
d4:8e:1a:8e:3e:99:85:90:18:f0:29:36:e6:06:eb:
ff:c4:70:f5:8b:2f:9f:f5:ef:e5:80:c4:42:e2:d0:
69:f8:2b:f1:c7:92:b3:27:4a:78:15:07:5c:e8:1e:
f4:58:d0:ef:57:83:c7:1a:f4:6f:d6:17:c4:9b:ca:
fe:98:0a:92:25:d0:86:12:50:9b:4d:28:1c:92:88:
f6:78:53:a6:c4:05:b9:e2:1d:01:79:bc:c5:a4:9f:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6E:06:FC:11:0F:E3:19:42:40:9E:0A:B8:1E:BF:68:EC:3C:38:55
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b6:4d:b5:70:82:c4:34:31:1c:40:6d:6c:25:ba:c2:3a:e4:
de:53:5e:3a:fa:34:a3:43:32:bd:71:7d:cc:05:18:41:9e:ee:
5b:5a:3d:de:76:5a:ba:0c:31:0c:e6:c2:00:0c:a9:ae:bd:90:
b7:48:0a:10:5c:15:46:7f:d6:00:be:87:9c:d7:93:cb:dd:84:
43:83:70:65:76:01:3f:25:4e:c9:72:b6:a0:d8:12:25:69:22:
7a:ac:4b:f1:f2:dc:83:f2:5a:c0:5f:f8:44:23:59:cc:31:4a:
85:f5:52:96:81:13:94:6e:9d:0c:1b:92:5d:db:2b:f7:0f:d2:
1f:46:cb:e1:c9:f1:70:48:3b:9b:08:59:65:58:3d:e1:88:e4:
d9:ca:73:04:d6:c6:1e:6d:2f:5f:51:bc:0d:40:d6:38:df:d7:
0b:c5:8d:dd:f8:01:fc:f8:1f:16:e0:55:cb:8b:69:a6:20:44:
a6:e5:66:6d:ce:df:5c:56:b6:64:40:f3:07:5b:63:97:43:b0:
19:01:22:a2:92:f9:cc:a1:ae:19:9b:e8:76:8e:41:75:53:a6:
df:d4:0b:e6:1b:14:89:d0:88:ee:1c:b6:ab:d1:70:a0:9b:95:
55:a4:41:e4:b9:84:78:f9:db:71:3e:f5:40:dd:72:71:c0:86:
75:c5:f0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 21:45:52 2025 by rpki-client