Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier: pVg5iRXb2tQiAxFVofqcKzOvmQMCtbzdcXRwqDZ+SrA=
Subject key identifier: 32:A5:CB:CC:E3:6B:0C:0E:6D:F0:5E:90:5C:7B:9D:C0:79:F5:E1:85
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 0198E4F697EEE4CCAB4CF4F168A19E39AD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number: 052A
Signing time: Tue 26 Aug 2025 06:00:22 +0000
Manifest this update: Tue 26 Aug 2025 06:00:22 +0000
Manifest next update: Wed 27 Aug 2025 06:00:22 +0000
Files and hashes: 1: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: cRcc2EhGp+yZ80RJ9LEeZrWs0hzm/8NVlX7ZxVzyKTU=)
2: tfQVIf0zNMfuGd1tpip3CLYwCts.roa (hash: +gDGXslGsdNWpAD47LvCZk6SPybHtwdwVZQN5l58KIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Aug 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e4:f6:97:ee:e4:cc:ab:4c:f4:f1:68:a1:9e:39:ad:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Aug 26 06:00:22 2025 GMT
Not After : Aug 27 06:00:22 2025 GMT
Subject: CN=32a5cbcce36b0c0e6df05e905c7b9dc079f5e185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:8b:c4:8e:2b:78:b5:c7:c4:f2:ab:cf:bf:
17:6f:f1:17:35:98:a8:22:ee:91:af:77:05:3e:67:
3e:1a:cb:1b:d3:fe:fc:02:cc:06:6c:fa:43:dc:22:
fb:0d:36:95:73:34:af:c4:d0:05:de:bf:7e:48:64:
02:98:19:86:98:2e:0c:b1:10:aa:66:52:35:be:a4:
cf:9e:4c:58:e8:fd:62:60:84:78:b0:dd:1d:15:5c:
be:63:ad:16:39:5f:e4:75:1c:60:55:e7:98:6f:2d:
5d:0f:45:55:00:b2:97:9b:50:a1:50:ad:f6:a7:f6:
01:6c:3c:ac:dd:f7:bb:53:55:61:a4:4c:37:17:e3:
18:05:70:a9:dd:45:c6:9b:2c:fb:e1:d8:81:11:1a:
ab:cd:94:64:aa:14:23:bf:9c:e5:4c:e2:4e:a8:cc:
9f:ee:92:33:e1:79:ca:e2:80:09:1b:78:78:03:71:
23:e6:4f:f7:48:36:a2:52:c7:d4:2d:8a:a0:28:47:
65:74:7a:8f:bf:94:8e:85:a6:e6:d4:0f:53:95:44:
dd:10:d5:cd:1f:5d:bf:91:fc:53:e2:a4:75:31:dd:
e0:5e:47:8f:24:59:d4:2e:82:9b:05:0e:26:f6:da:
b6:fb:f7:52:99:6b:d8:7c:e1:5b:c6:4f:35:6c:f9:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A5:CB:CC:E3:6B:0C:0E:6D:F0:5E:90:5C:7B:9D:C0:79:F5:E1:85
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:30:64:2a:ec:c5:c6:7e:6a:33:30:2e:3e:10:5d:42:c9:c3:
67:45:48:16:e5:13:79:cb:43:f4:4b:19:87:39:21:bb:c2:be:
c0:6b:15:b0:c5:f6:02:38:3b:ab:bc:5a:b3:ac:22:d7:4a:83:
8b:b3:8d:0a:de:86:1b:73:25:74:43:b0:b2:df:dc:03:99:bb:
f3:35:6b:9f:09:d1:30:de:ef:98:92:a0:71:43:9c:cd:24:3b:
bc:e0:34:81:bb:a6:1a:82:23:2f:b7:83:fe:87:a2:9e:b9:87:
93:6f:ac:83:52:7c:95:f6:7b:25:06:4d:51:e7:0c:2a:b2:8d:
48:be:1c:9b:8e:42:7e:d4:ec:7f:fb:ec:bd:2e:42:f7:f4:e2:
80:9d:53:eb:ae:8c:65:83:e3:d2:0f:38:e4:c1:58:c0:68:ae:
bf:54:bd:fb:a7:91:71:7b:47:a5:4b:d8:fd:86:43:f1:8f:1b:
1e:9f:72:53:a4:a5:89:a6:cf:f6:3c:6d:8a:d7:6a:cd:67:af:
c4:9e:0e:d3:4e:bc:b6:6e:af:ba:4b:c1:c8:93:84:96:bf:17:
16:16:40:f5:93:50:3f:04:73:3b:22:1d:e2:15:08:fc:70:2e:
d1:d9:20:0e:3b:9f:8d:a5:36:a2:e1:35:cb:45:3a:99:14:f3:
e3:57:b9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 14:29:20 2025 by rpki-client