Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: HOSgQIvwYdcwdT723hWFiA5IbirZi4zmfPmDLMju7BU=
Subject key identifier: F2:44:74:D6:98:CF:86:F2:3E:4B:EA:04:1D:68:C2:88:D6:92:B3:BF
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 01975C812463C2ACA2A088D44F33AAB0DA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1593
Signing time: Wed 11 Jun 2025 01:00:56 +0000
Manifest this update: Wed 11 Jun 2025 01:00:56 +0000
Manifest next update: Thu 12 Jun 2025 01:00:56 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: NRd1Kgf5Pe/MMCkJB0I+anqU7E956dXJEnee3MZygqI=)
2: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (hash: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=)
3: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:81:24:63:c2:ac:a2:a0:88:d4:4f:33:aa:b0:da:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Jun 11 01:00:56 2025 GMT
Not After : Jun 12 01:00:56 2025 GMT
Subject: CN=f24474d698cf86f23e4bea041d68c288d692b3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:c9:dd:f0:1a:76:bf:96:3b:8b:14:c7:40:
6b:0d:c4:a0:cb:af:fd:b1:5b:c4:2c:09:3c:c2:0f:
5a:60:4a:8a:f6:62:dd:98:56:1d:69:5e:50:49:92:
be:f1:de:95:0b:12:62:63:ce:38:63:4b:a4:c1:75:
ba:a4:fb:a5:cd:df:9c:cc:fb:2e:f9:b4:d7:b7:33:
46:09:6b:c9:a4:48:e3:f6:e5:e7:7a:b5:2b:f8:ef:
66:f9:4c:a8:88:71:41:08:76:8c:65:ae:3c:b9:c7:
d1:7e:96:94:4e:0f:2e:16:34:25:b2:1b:bb:48:bd:
48:3b:f8:ea:13:47:1d:02:2b:aa:d1:ce:5a:b1:f6:
94:4e:67:05:d0:2c:00:59:30:43:ff:81:06:9e:aa:
1a:41:64:d6:a4:d2:c2:1d:8b:01:0d:4d:a8:82:98:
0d:86:78:10:f1:4b:b8:fa:fe:65:9e:90:95:e0:9c:
7a:c2:d8:56:c4:74:34:5f:8e:bb:07:07:bf:9e:0e:
3d:a6:8a:37:6b:9f:f3:a1:ef:af:88:03:d4:9a:3e:
c3:27:e1:d5:2b:4a:28:99:86:13:5d:c7:9c:16:fe:
ca:a6:a4:85:b2:8d:7f:4e:5c:e7:a1:10:7e:1a:63:
73:69:01:b2:55:77:7e:b7:d6:35:da:92:8a:ca:b9:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:44:74:D6:98:CF:86:F2:3E:4B:EA:04:1D:68:C2:88:D6:92:B3:BF
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3e:74:45:5e:c4:41:a6:9d:0b:ea:88:5c:92:da:ed:86:f9:
d4:ac:8b:34:40:f0:98:49:ba:15:0c:51:49:8a:65:f3:37:17:
e8:34:96:af:08:1a:4a:7b:e4:2d:8b:48:81:22:73:fd:e7:4f:
4a:a6:40:2b:9d:5e:75:13:99:fa:2f:2a:20:a1:94:18:c9:d3:
10:90:55:8e:32:65:55:8d:06:99:31:74:fb:f1:18:f2:88:28:
b9:50:92:8c:80:61:63:79:4e:49:90:28:4b:2e:01:44:77:fd:
f0:b0:f5:0e:a3:ac:8d:c2:fb:31:6a:fb:ba:12:79:17:88:0b:
55:04:a7:26:89:ff:3f:3c:54:ab:2f:27:63:3f:08:48:27:1b:
ea:ab:d2:25:1c:59:4f:a9:e2:34:2e:5b:6b:83:84:dd:3e:21:
cf:31:2b:3b:2d:c3:fb:86:33:2e:45:ca:f3:90:30:af:a3:86:
36:25:01:52:01:b8:eb:ad:7c:cc:ea:4f:f7:d4:77:85:b6:7c:
7d:25:d2:bc:f0:d7:4c:9a:77:f9:05:fd:a7:6a:13:e3:d2:be:
98:53:62:b9:42:d1:0f:91:5b:19:49:dc:62:6b:fe:2a:ed:e7:
14:ee:c1:46:18:ff:4c:47:cb:75:fb:ad:f9:ad:a0:2a:d9:56:
fe:a3:f0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:26:40 2025 by rpki-client