Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: AU89sKmezqE9QdsQdHNwAjNUFxRWyLcVPJR7dfPBUCg=
Subject key identifier: 43:CE:97:BC:88:28:F2:6C:EA:D5:03:AB:0C:9F:58:EF:DB:44:85:9A
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 0197643AB583D18AC0FD332A2145A15A319F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1597
Signing time: Thu 12 Jun 2025 13:00:58 +0000
Manifest this update: Thu 12 Jun 2025 13:00:58 +0000
Manifest next update: Fri 13 Jun 2025 13:00:58 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: 997mY7IGyb90rbZXV0MffRo5i2D6dCsPEMMIr5WBVJA=)
2: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (hash: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=)
3: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:3a:b5:83:d1:8a:c0:fd:33:2a:21:45:a1:5a:31:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Jun 12 13:00:58 2025 GMT
Not After : Jun 13 13:00:58 2025 GMT
Subject: CN=43ce97bc8828f26cead503ab0c9f58efdb44859a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:91:18:19:17:d3:bf:9b:af:59:66:7b:ad:
eb:2b:fe:90:3c:df:60:d0:9b:2b:be:be:42:22:e9:
19:bd:3b:25:0b:be:76:b3:c5:0e:d5:e3:a5:b7:99:
d2:01:9d:f3:4c:40:f8:fb:39:4b:a3:ef:0d:a8:36:
f3:52:8f:e1:dd:a5:b9:7f:53:06:5a:7f:1a:52:f5:
98:c7:ae:82:d3:c3:51:56:6f:27:f3:a2:22:3e:69:
32:b6:14:da:f6:1f:da:a9:9d:d1:a2:d1:6b:64:2d:
e8:8a:1d:ce:39:0c:0d:fd:79:c6:e9:75:35:8b:46:
f7:73:1b:c2:72:1e:66:8a:74:1e:aa:86:67:36:b4:
a6:0c:a2:02:26:1f:dd:ab:04:f3:dc:ae:ea:9a:96:
bc:2b:9e:bd:5e:a0:e2:87:8e:33:50:7f:b9:85:d4:
69:9d:00:a0:10:88:77:7c:78:4d:17:1e:4d:4d:64:
a4:a5:c1:eb:5d:52:f1:4f:0d:23:ab:85:9c:ee:0c:
7d:58:bf:dc:9b:df:d9:46:89:16:ff:23:4b:e5:6b:
14:3d:70:5b:a3:84:ee:e6:44:d5:e6:ad:d6:fb:2e:
c4:58:b3:79:7e:36:04:71:4f:3a:cb:45:2c:ea:71:
ae:38:07:06:68:8d:86:e3:bb:71:59:98:93:95:29:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CE:97:BC:88:28:F2:6C:EA:D5:03:AB:0C:9F:58:EF:DB:44:85:9A
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:35:a5:e0:af:79:27:df:cd:fa:6d:26:25:91:45:f8:64:f9:
78:df:2b:d0:37:0d:5d:0a:fb:f7:9d:61:af:0e:0e:dc:51:b6:
4c:15:80:08:b7:58:95:42:73:84:a5:2d:ad:64:ba:93:01:f8:
d3:73:5a:08:6f:8d:42:da:46:42:9e:1c:1f:47:ce:6e:e4:1e:
bb:5a:5c:a7:5e:c0:c6:9b:c9:1a:df:d4:16:40:32:85:5b:fb:
13:ad:5b:69:e3:8e:1e:3b:94:66:f0:60:4b:27:32:f9:ee:d5:
ee:21:bb:85:d7:6e:e0:f5:d0:49:31:81:76:c5:6b:a2:6d:ed:
ff:a6:66:a2:24:33:0e:95:4b:f4:6b:cc:d7:0d:8a:c5:8e:f3:
0e:65:c2:32:d9:29:24:88:68:52:34:c3:f5:c6:4c:1b:31:5b:
ab:61:39:a1:4a:e5:2b:0d:23:47:06:80:7e:a2:e3:cd:d8:1b:
ec:d6:2d:72:27:0d:e8:f4:f7:74:f9:a4:9e:36:13:d4:3a:e8:
65:42:d6:3a:fa:5a:c3:9a:87:79:e9:9c:b0:7c:6f:cd:4b:fc:
45:df:a5:ab:a5:38:32:08:ed:43:c7:84:cf:9b:7f:37:69:83:
d3:90:0d:38:de:5c:d0:f8:e6:46:2f:e3:52:e3:d1:1c:de:39:
f7:e4:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:46:57 2025 by rpki-client