Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: DTpu/kKSpxKq4VYavEGetJhthEgkr8artsjRl9RSvKo=
Subject key identifier: 59:BE:C4:6F:3D:04:AD:DE:05:03:9B:E1:FC:16:C0:93:AF:5A:7D:E1
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 019752D8D5E702E6631DB5331504ACD48683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 158E
Signing time: Mon 09 Jun 2025 04:00:31 +0000
Manifest this update: Mon 09 Jun 2025 04:00:31 +0000
Manifest next update: Tue 10 Jun 2025 04:00:31 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: 2+aXiWU4vc5jDfjrwU11IHOTZ8o/MDLbwLvhKDrAVLw=)
2: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (hash: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=)
3: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:d5:e7:02:e6:63:1d:b5:33:15:04:ac:d4:86:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Jun 9 04:00:31 2025 GMT
Not After : Jun 10 04:00:31 2025 GMT
Subject: CN=59bec46f3d04adde05039be1fc16c093af5a7de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:d2:77:34:87:7b:c7:c8:1e:53:ec:34:db:
cd:68:69:9a:22:69:49:66:94:ae:1d:86:cc:96:de:
8e:9d:e2:5c:4d:d7:63:82:bc:03:97:7e:65:32:3f:
44:ba:fe:ea:13:50:b6:d8:6a:c7:83:06:83:5d:a7:
aa:2e:57:30:41:90:f3:29:3b:b9:4d:d0:a5:dc:68:
a0:aa:6c:89:28:81:bd:df:5b:e4:62:86:a6:0a:e1:
ef:8c:30:b2:a1:48:a1:41:2a:57:2a:17:c4:85:3c:
18:44:ce:a0:7d:7d:ee:b3:29:7d:4a:84:84:a1:e9:
97:04:ad:91:d8:86:88:d3:75:b2:88:08:4f:4b:f7:
8d:46:39:0e:f0:1e:bb:92:66:91:a6:d7:f5:bd:6e:
9f:22:1a:9b:47:e4:c7:0e:c7:2b:34:18:0f:af:a3:
eb:e9:73:06:0e:16:7b:c7:ec:5d:78:74:03:bf:c5:
09:9e:21:f7:7d:06:66:72:e8:12:b2:d9:64:44:40:
02:b1:d9:1d:24:7c:d0:6b:fd:19:12:9d:82:dc:3b:
ec:8e:12:10:99:6d:1c:65:4c:00:04:d2:6b:a1:84:
15:ce:39:3a:3f:11:66:36:cf:41:17:6e:ec:5e:d2:
00:98:57:1e:57:cc:68:b8:0b:5e:3d:a0:ff:f4:62:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BE:C4:6F:3D:04:AD:DE:05:03:9B:E1:FC:16:C0:93:AF:5A:7D:E1
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:7a:21:0b:30:88:4b:b9:84:ad:da:ec:ab:dc:9d:8d:1d:c4:
43:d8:7e:43:f9:e8:6c:22:92:92:16:d3:a0:21:87:4b:68:14:
af:b6:15:39:00:58:6c:95:bd:d9:85:e7:c2:94:d5:46:0f:5d:
19:44:d6:c4:7c:ec:65:52:80:7e:5a:2f:2a:bd:db:c1:23:40:
13:54:42:6d:0f:67:b8:8d:f3:d4:42:3b:c4:9e:8e:8f:bd:77:
c2:71:bc:80:d1:be:6d:94:ce:02:84:b4:2e:39:a8:a5:0b:6a:
ed:d3:ed:51:72:64:b4:1d:b0:41:3d:15:a5:61:8a:fa:9a:5c:
22:06:62:95:2a:08:9b:64:75:b3:87:e3:03:4b:5a:0c:55:bd:
7a:5b:86:65:59:e8:e6:19:84:e5:88:7a:55:4c:30:74:ed:7c:
0e:c3:95:2e:c9:fc:7f:8d:0d:5f:61:ab:93:8c:f7:b8:80:9f:
4a:cb:5d:f6:a2:84:8b:67:20:0c:3e:ac:f6:08:7e:8b:b2:e2:
43:43:b6:40:94:a9:38:90:23:ec:70:8a:da:b9:86:f2:ac:88:
21:63:e8:10:b0:8f:92:94:93:9e:66:bc:06:d2:3d:3f:9c:0f:
4f:d1:d0:42:b4:33:64:9b:5e:7b:4b:e6:ac:4c:9f:ce:48:bd:
c9:77:67:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:47:41 2025 by rpki-client