Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: l30oE3ZBXpTmapvsyZtjhTXsOs1SRPabtY/FZ0aMpoE=
Subject key identifier: FE:D1:8D:5E:F7:4F:6F:8F:17:0E:06:EF:18:7E:75:88:F7:CE:42:C7
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 019A0FDE6DAD07A860CA822C96A09F268786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 16F9
Signing time: Thu 23 Oct 2025 07:00:26 +0000
Manifest this update: Thu 23 Oct 2025 07:00:26 +0000
Manifest next update: Fri 24 Oct 2025 07:00:26 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: MSMn9sLYbo7W6XjkUTfRmy9a8l0v4nCG65rcoZTSySA=)
2: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (hash: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=)
3: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:de:6d:ad:07:a8:60:ca:82:2c:96:a0:9f:26:87:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Oct 23 07:00:26 2025 GMT
Not After : Oct 24 07:00:26 2025 GMT
Subject: CN=fed18d5ef74f6f8f170e06ef187e7588f7ce42c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:2a:a5:51:0b:81:91:28:b2:96:b0:86:f6:
71:88:b5:cd:ac:96:81:ca:2e:54:24:e8:6a:5e:08:
03:ad:ef:61:62:36:53:9d:bf:02:cc:e8:68:6d:d0:
22:26:54:2a:94:58:99:a6:8c:a0:8f:e0:90:75:12:
8a:cd:42:8d:ce:2f:c8:46:11:3b:50:0f:be:97:1a:
93:9f:a3:8f:df:a9:2a:f9:0e:8f:5f:ed:4b:d3:b0:
2c:2b:34:9c:6e:2f:51:f6:43:5a:c0:f9:71:4d:fd:
82:e0:fe:b7:d2:80:b8:b7:84:8e:f8:f0:95:76:0e:
45:4a:d9:1f:f3:fe:a2:10:ef:cb:7c:28:a9:63:f2:
04:b9:99:1b:d3:05:a7:cd:d7:0f:a1:06:70:06:b8:
57:ca:62:56:52:0c:bb:4c:69:ed:65:5f:78:35:43:
e3:d2:00:62:c0:eb:d3:c9:57:8d:04:5e:58:8a:f8:
c9:97:33:84:02:5e:99:e1:a0:13:84:62:b0:ab:8f:
11:5b:5a:c5:5a:01:f0:bc:53:d4:8d:66:b5:24:f4:
42:55:ad:8e:eb:39:a9:19:08:3a:c1:c2:0b:63:94:
a6:51:4d:77:3e:60:91:4c:37:77:bd:47:61:94:57:
8e:17:43:93:eb:e0:09:f5:95:d9:41:78:5d:e8:03:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D1:8D:5E:F7:4F:6F:8F:17:0E:06:EF:18:7E:75:88:F7:CE:42:C7
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:45:fb:73:d3:ee:4a:5d:04:3e:68:3e:d1:70:41:1c:07:dd:
40:1b:d5:33:81:42:99:00:fb:f0:e1:ac:9f:c2:a3:bc:90:ab:
81:4e:73:a3:5d:f5:45:70:65:a9:8d:5d:d5:30:72:74:a8:a5:
87:17:1c:bd:65:56:b1:fd:1d:3d:fe:cd:75:17:08:17:0c:82:
18:fe:40:e4:77:cd:6c:c8:30:ef:a7:d5:0a:4d:5c:54:87:62:
1c:92:28:a2:83:a4:bc:b6:b7:a8:1c:11:3c:20:1a:36:25:90:
de:37:90:45:a1:2b:16:89:4e:ea:82:48:71:ff:f7:46:f3:d1:
d2:89:1c:df:17:a4:36:c4:49:56:d7:6a:bc:c9:f0:ca:29:dc:
27:c1:96:32:73:71:86:3a:6b:33:52:4a:e0:14:b4:dd:ad:24:
1e:58:2c:c9:78:23:1c:2e:af:c1:0b:70:89:4a:74:71:a5:a4:
8a:2c:77:19:47:2d:04:32:1e:d1:05:b8:d9:42:d7:16:1d:22:
a1:66:19:86:68:04:29:60:38:b3:e3:6a:43:48:42:8a:22:8f:
58:cc:00:2e:66:67:ae:f8:fa:e1:79:91:11:95:3d:83:8d:a6:
1d:e2:fe:a5:ca:43:3a:15:4e:3f:c3:34:ff:24:76:4f:4c:9f:
86:ea:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 11:26:31 2025 by rpki-client