Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: OGfybyu4wvI7mQcSdOzYa4hrrZUInUhT7dXZzlEbHs8=
Subject key identifier: 2C:2B:74:2E:92:B4:BF:8E:89:9E:E8:08:8A:96:A5:02:23:28:9C:8D
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 019758A45FF153620F9BF6854FB1990D3797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1591
Signing time: Tue 10 Jun 2025 07:00:56 +0000
Manifest this update: Tue 10 Jun 2025 07:00:56 +0000
Manifest next update: Wed 11 Jun 2025 07:00:56 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: Iw+AyXUC6zqxcJDhtvTXH3ln3YonsfjoL9DHSEyaY/4=)
2: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (hash: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=)
3: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a4:5f:f1:53:62:0f:9b:f6:85:4f:b1:99:0d:37:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Jun 10 07:00:56 2025 GMT
Not After : Jun 11 07:00:56 2025 GMT
Subject: CN=2c2b742e92b4bf8e899ee8088a96a50223289c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:82:ec:70:6b:dc:f9:1f:61:69:54:59:5f:71:
83:ca:d5:e7:7e:b1:6e:12:2d:10:28:e3:99:91:ee:
c2:e3:bf:36:20:71:c5:cd:77:9a:52:33:83:5d:4a:
8f:12:67:70:f4:97:eb:52:c4:20:b9:72:3d:f0:76:
4e:cb:84:32:81:3f:3e:c6:a5:69:8c:d4:a6:00:44:
30:c8:56:25:b6:90:ad:d8:f9:10:79:4d:1d:41:f7:
66:c9:3d:12:7e:c7:6d:1b:2d:16:62:4f:b4:4e:9e:
27:ad:19:99:a4:7a:2c:3d:ea:cf:e5:14:76:5e:59:
10:68:42:cf:57:76:7e:16:02:62:fa:4d:8b:df:9c:
6e:1f:a3:6c:b5:ef:b3:ee:cd:b5:96:5b:2a:cd:a9:
f7:b3:34:43:bd:1b:8b:07:ed:4e:7b:f5:6d:d2:43:
81:5a:3d:30:e3:c2:7b:80:0b:8c:de:6c:3f:39:8c:
59:b7:63:e9:9c:b4:1c:d1:3c:91:70:54:01:0b:e5:
c9:f6:66:10:af:c3:2f:bb:e1:20:c3:56:58:1a:99:
59:cc:da:95:10:e8:45:52:53:c1:22:cd:06:8d:fe:
c9:fb:60:74:1f:69:89:f3:d1:ff:d1:fc:46:ad:80:
4c:1e:29:3e:03:f3:52:a3:c8:d7:5e:b6:bc:94:5a:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2B:74:2E:92:B4:BF:8E:89:9E:E8:08:8A:96:A5:02:23:28:9C:8D
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:00:bf:a9:1e:5d:aa:9c:40:4d:08:a5:76:03:b8:53:47:4e:
9a:87:95:8a:cc:ee:0d:9e:79:c9:f0:2d:c6:22:ae:06:23:f0:
e0:d0:81:6d:70:e1:0a:f4:c4:9b:b8:31:4b:f4:91:c7:62:1b:
0e:4e:f8:36:d1:98:47:32:48:f8:e9:9a:29:cc:04:fc:d7:20:
9a:9c:a8:a0:79:d0:2b:7b:ea:70:f5:2e:5d:1b:3c:6b:bc:61:
c8:b4:56:5c:20:cb:1f:a7:36:05:76:66:be:72:50:e4:12:7e:
78:f7:91:76:91:f6:84:50:08:3b:82:a7:9c:31:69:d6:26:43:
e1:70:0a:0d:5d:24:dc:c2:a9:14:db:8c:c3:7a:c0:5b:3a:bc:
e9:72:0f:8e:56:40:e8:25:1b:f4:78:bf:84:45:43:d9:1c:13:
e7:fd:10:75:bc:34:13:05:a9:00:ed:db:c2:33:29:b6:cd:9c:
15:9a:06:a6:3a:f5:0e:b4:df:3f:fe:c3:e4:1f:24:c4:4f:bf:
7e:f1:48:82:fb:5c:45:5d:6f:14:0a:58:ad:4e:3e:28:c8:97:
cc:4c:0c:03:51:9c:05:82:da:63:8e:a9:46:5e:25:a1:b5:64:
55:a6:ab:ca:5b:4b:64:78:71:8c:d6:a8:c8:bf:fb:f2:d3:09:
e4:2c:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:25:18 2025 by rpki-client