Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
File: 39hkHjKKpdGclg1Ikc-Gd84Siec.mft (raw, json)
Hash identifier: Kf36c+SODK79QfL35Dcs5N4OcD46PgMsDlhqcrP/oio=
Subject key identifier: 41:57:C0:91:83:24:75:01:A7:0C:4A:84:CC:D2:04:83:23:C1:7B:91
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 019A3647CD2EC80F5BBF4CD0F5D7E907B222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
Manifest number: 04
Signing time: Thu 30 Oct 2025 18:01:06 +0000
Manifest this update: Thu 30 Oct 2025 18:01:06 +0000
Manifest next update: Fri 31 Oct 2025 18:01:06 +0000
Files and hashes: 1: 39hkHjKKpdGclg1Ikc-Gd84Siec.crl (hash: kqPP78nHQmzvUd07IF/dfl85YnFYLzqdHBgwTTVha08=)
2: FC0bdyuplJI1KGX4AfHE0Zx0LqE.roa (hash: ErGqRSFSyWBG0JZf35Cme2HC95smdmZ0LBiGyRvWJfo=)
3: Vs52J8_I6-6Ar4H7IoxIsedczaU.roa (hash: YX47Rdu8iskILAUdKTjD7fvWJ5LUe8zcxY/3psdpsYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 15:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:47:cd:2e:c8:0f:5b:bf:4c:d0:f5:d7:e9:07:b2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: Oct 30 18:01:06 2025 GMT
Not After : Oct 31 18:01:06 2025 GMT
Subject: CN=4157c09183247501a70c4a84ccd2048323c17b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:f2:21:c1:ea:4b:f4:d1:81:c0:26:f9:a0:
93:d7:25:3d:ca:52:1b:bf:11:2c:57:6d:f1:52:f5:
e6:4e:1e:e5:e1:a2:cb:12:d1:89:9b:fd:eb:e4:70:
d9:58:cf:05:d4:81:be:8c:a1:7d:64:46:9c:c6:97:
5c:35:b3:22:f0:31:78:a6:fa:86:52:8a:c6:2c:d0:
93:d6:69:5c:40:4f:70:ff:6a:68:95:49:02:f2:0e:
34:5c:34:1b:46:5a:88:93:5a:c1:35:0a:78:cb:1d:
0d:05:38:4f:ee:be:ae:26:72:01:c2:06:0c:6f:8f:
c5:ec:91:f9:08:65:eb:cd:bf:40:ef:bc:c1:8e:7f:
d5:64:03:d0:27:6b:c2:27:f6:33:c3:ae:34:42:32:
e3:9e:63:12:89:20:51:65:cd:43:96:74:60:e2:9b:
f3:62:8f:72:c4:6e:1e:84:56:90:5b:f9:cf:37:b9:
82:5a:8d:9d:9c:60:a4:12:76:dc:1c:00:47:07:e4:
7f:6c:8d:67:de:72:14:5c:dc:f3:11:79:fe:06:d3:
4b:d0:ff:9f:7d:42:0b:72:2c:55:08:f8:e8:13:97:
db:db:69:21:92:5a:6e:4a:f3:e9:40:e2:dc:bd:c3:
f0:5d:cb:1d:bb:59:9b:b2:ea:90:82:31:e5:b1:98:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:57:C0:91:83:24:75:01:A7:0C:4A:84:CC:D2:04:83:23:C1:7B:91
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:aa:43:af:47:91:bf:9a:61:7e:fe:7c:03:de:8a:34:2e:62:
38:75:ff:a1:fc:75:06:e6:f7:f9:e9:13:17:f5:91:4b:60:e7:
ce:de:5c:7b:70:18:0f:14:7e:de:07:80:77:97:15:aa:2b:2a:
c7:d7:a9:af:2b:f8:3a:86:42:de:c2:ca:c7:45:db:dc:d6:e7:
cf:37:52:32:fa:a3:dd:66:57:b0:a5:8c:e2:a4:b4:a8:e1:2a:
d1:25:51:88:d5:69:27:3c:69:e6:c2:77:d4:93:60:45:6a:e7:
83:1e:8d:b4:1a:08:63:64:63:be:9e:35:88:7b:40:f8:01:9b:
f9:66:22:2f:34:28:48:78:2f:e4:ea:09:50:f4:29:67:6a:92:
9d:5a:b1:f2:ca:b3:04:69:b2:24:fa:b3:9c:af:ad:a7:23:13:
50:89:a1:4c:cd:95:3e:cb:77:d4:82:9f:02:17:ad:6e:aa:1d:
d6:75:b7:99:d1:dd:fe:6b:ed:b7:3d:14:a0:08:21:f6:9f:e1:
c5:de:ac:e8:e8:e3:6c:0d:a5:b2:55:7f:93:2b:50:8b:52:0d:
25:4f:47:03:36:ed:a8:66:e5:99:ce:63:9b:47:bb:13:20:a1:
fc:51:56:fb:a5:6e:3e:ef:35:ee:ab:7c:97:90:08:cb:fc:0e:
1c:d1:da:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 21:57:31 2025 by rpki-client