Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
File: unnFAIApfLnMDMk07jifUMPnPUo.mft (raw, json)
Hash identifier: ZqPFa2rev9Vh+UoPIo6oSIY8eyWMkPu7HIRmt6f7SlI=
Subject key identifier: 65:56:9D:2F:4F:72:FA:A7:44:3E:6A:22:00:68:C6:65:30:69:20:57
Authority key identifier: BA:79:C5:00:80:29:7C:B9:CC:0C:C9:34:EE:38:9F:50:C3:E7:3D:4A
Certificate issuer: /CN=ba79c50080297cb9cc0cc934ee389f50c3e73d4a
Certificate serial: 019896A5DD9B72634DC55777AEF989AA6E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
Manifest number: 04F7
Signing time: Mon 11 Aug 2025 01:01:49 +0000
Manifest this update: Mon 11 Aug 2025 01:01:49 +0000
Manifest next update: Tue 12 Aug 2025 01:01:49 +0000
Files and hashes: 1: CpPRk_TNW4CH4jbImpFoaI2OcL4.roa (hash: eYYsy6V5aRdmdwv40uWtw/bgoED55t23eDlp8kMf818=)
2: unnFAIApfLnMDMk07jifUMPnPUo.crl (hash: DBmZ0tc0kxabFlICFz3RMB4pcBTLM38ueoNG93PCM/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:dd:9b:72:63:4d:c5:57:77:ae:f9:89:aa:6e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba79c50080297cb9cc0cc934ee389f50c3e73d4a
Validity
Not Before: Aug 11 01:01:49 2025 GMT
Not After : Aug 12 01:01:49 2025 GMT
Subject: CN=65569d2f4f72faa7443e6a220068c66530692057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:c0:74:61:4b:16:bc:30:e1:b4:ec:50:f7:
db:7e:6f:e5:71:de:93:53:36:9f:ff:2c:35:53:19:
b5:58:a1:c6:1a:ed:00:17:2a:87:57:ee:a2:46:d5:
f4:46:50:08:6f:cc:8b:c5:c1:3a:a1:d9:ed:72:ca:
52:4e:19:8a:c8:84:83:aa:be:ae:08:91:b8:c8:08:
79:a7:a5:b5:90:98:db:4d:05:f8:48:da:5b:72:1e:
e5:10:4e:c3:62:be:ca:48:3b:c6:de:e2:00:a2:54:
5d:01:21:c6:66:8a:1c:57:d6:d5:cf:cd:18:1e:87:
8e:3b:c9:e2:4a:8e:f3:2a:8e:8c:6d:6d:d1:7e:15:
fd:e0:69:37:09:c1:3a:9d:38:14:b7:ba:60:fb:39:
42:72:ad:84:c1:8b:0b:f0:6b:f0:01:18:61:b0:d5:
b2:19:13:21:72:b2:bf:73:e7:a4:04:0e:bb:80:fc:
36:53:52:74:9f:86:a7:65:56:12:c8:c9:95:05:04:
65:f1:6e:d5:0e:c6:9f:9b:7b:d1:37:f6:db:8f:f9:
b4:3a:49:9a:0e:ff:4d:bd:9e:fb:61:99:14:83:2a:
7b:bf:9a:6f:e4:af:aa:31:e2:44:7c:98:cf:25:7e:
2a:64:c8:41:57:1a:e2:59:9d:73:57:3c:19:63:5d:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:56:9D:2F:4F:72:FA:A7:44:3E:6A:22:00:68:C6:65:30:69:20:57
X509v3 Authority Key Identifier:
keyid:BA:79:C5:00:80:29:7C:B9:CC:0C:C9:34:EE:38:9F:50:C3:E7:3D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9c:d8:91:ae:43:ba:28:72:44:c4:a6:dc:0e:08:48:dd:da:
6d:f7:1c:9e:6a:de:57:25:78:22:fc:6d:57:11:ce:a4:18:07:
ea:8b:bb:35:9f:f1:a5:d0:5c:31:af:06:1d:f0:d3:60:6a:bf:
7d:bc:fa:61:46:3a:a0:97:46:d5:ce:04:6f:b1:eb:73:08:c7:
3f:c4:22:4f:e3:aa:6d:7d:77:c1:ec:74:70:99:b6:71:4d:01:
b5:f0:eb:36:fb:b6:0a:54:01:79:5d:be:11:56:e6:22:e1:91:
d8:12:ed:e2:a8:15:a4:c4:94:99:a9:ff:a1:d7:e4:ed:17:cf:
d6:8c:8d:ad:39:09:ce:17:43:68:d8:a2:36:a8:25:53:75:a0:
92:03:05:29:05:12:82:e9:e9:22:22:57:95:fd:50:f3:36:17:
dd:5d:bf:fd:c6:14:5c:d8:72:fc:7d:17:73:00:52:5b:a3:cf:
80:13:73:f2:2d:32:f3:cd:a2:3d:b3:be:13:1e:74:0b:f1:08:
5b:1a:1e:95:6f:64:58:cd:d6:13:e5:48:9a:00:37:56:83:17:
9e:3a:6d:5d:f7:7d:c2:31:a4:f6:c8:e8:44:22:a3:7a:50:ab:
d6:ef:db:47:52:fe:8f:03:b5:34:59:be:27:70:9a:e2:e1:87:
55:65:32:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpd2bcmNNxVd3rvmJqm5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNzljNTAwODAyOTdjYjljYzBjYzkzNGVlMzg5ZjUwYzNl
NzNkNGEwHhcNMjUwODExMDEwMTQ5WhcNMjUwODEyMDEwMTQ5WjAzMTEwLwYDVQQD
Eyg2NTU2OWQyZjRmNzJmYWE3NDQzZTZhMjIwMDY4YzY2NTMwNjkyMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycLAdGFLFrww4bTsUPfbfm/lcd6T
Uzaf/yw1Uxm1WKHGGu0AFyqHV+6iRtX0RlAIb8yLxcE6odntcspSThmKyISDqr6u
CJG4yAh5p6W1kJjbTQX4SNpbch7lEE7DYr7KSDvG3uIAolRdASHGZoocV9bVz80Y
HoeOO8niSo7zKo6MbW3RfhX94Gk3CcE6nTgUt7pg+zlCcq2EwYsL8GvwARhhsNWy
GRMhcrK/c+ekBA67gPw2U1J0n4anZVYSyMmVBQRl8W7VDsafm3vRN/bbj/m0Okma
Dv9NvZ77YZkUgyp7v5pv5K+qMeJEfJjPJX4qZMhBVxriWZ1zVzwZY11lBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVWnS9PcvqnRD5qIgBoxmUwaSBXMB8GA1UdIwQY
MBaAFLp5xQCAKXy5zAzJNO44n1DD5z1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW5uRkFJQXBmTG5NRE1rMDdqaWZVTVBuUFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hNjIxYTgtZTA3OS00YTE0LTk4YmEt
ZTM2YTk3OTNlYTZkLzEvdW5uRkFJQXBmTG5NRE1rMDdqaWZVTVBuUFVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hNjIxYTgtZTA3OS00YTE0LTk4YmEtZTM2YTk3OTNlYTZk
LzEvdW5uRkFJQXBmTG5NRE1rMDdqaWZVTVBuUFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZzYka5D
uihyRMSm3A4ISN3abfccnmreVyV4IvxtVxHOpBgH6ou7NZ/xpdBcMa8GHfDTYGq/
fbz6YUY6oJdG1c4Eb7HrcwjHP8QiT+OqbX13wex0cJm2cU0BtfDrNvu2ClQBeV2+
EVbmIuGR2BLt4qgVpMSUman/odfk7RfP1oyNrTkJzhdDaNiiNqglU3WgkgMFKQUS
gunpIiJXlf1Q8zYX3V2//cYUXNhy/H0XcwBSW6PPgBNz8i0y882iPbO+Ex50C/EI
WxoelW9kWM3WE+VImgA3VoMXnjptXfd9wjGk9sjoRCKjelCr1u/bR1L+jwO1NFm+
J3Ca4uGHVWUyMA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:39 2025 by rpki-client