Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: uAtvU5/d+UML0VObV2ZI9m+SZBCl9t4pl0NAqDT3Qyk=
Subject key identifier: 8A:35:B9:54:4B:7B:84:00:0A:80:99:D1:96:70:98:EA:3B:19:59:9D
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 019A61323A0517FE1F6D10BEC91553EE994C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 1719
Signing time: Sat 08 Nov 2025 02:01:12 +0000
Manifest this update: Sat 08 Nov 2025 02:01:12 +0000
Manifest next update: Sun 09 Nov 2025 02:01:12 +0000
Files and hashes: 1: 0JNfBNzU72OAoNIfj1jhygVeYQU.roa (hash: oGcfqT/JJ8LL0qB7k2QsQSpg+/RTt2AO65zLWXlHWAA=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: cT73NN4P2A5PuieE9DETo4KKq+rq7vBKW7wVgTvpZ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 21:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:61:32:3a:05:17:fe:1f:6d:10:be:c9:15:53:ee:99:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Nov 8 02:01:12 2025 GMT
Not After : Nov 9 02:01:12 2025 GMT
Subject: CN=8a35b9544b7b84000a8099d1967098ea3b19599d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:3b:e1:32:87:50:8f:45:3e:29:4a:a6:e5:
59:22:5a:35:8c:55:7b:f2:52:df:4e:c2:15:d7:37:
94:84:a9:6e:31:d2:ab:3b:38:75:d5:7a:7f:ca:4c:
8b:fe:13:85:b2:2c:e6:45:e0:a4:5f:69:bf:fa:d3:
78:94:fe:14:37:f6:4d:60:d1:cf:4e:4c:7a:0e:13:
cb:03:7e:33:13:68:f3:c8:67:94:87:91:ce:52:0d:
29:bb:11:8c:d0:35:96:b0:bf:c9:e3:46:5e:9e:d5:
b1:42:86:4f:2e:2f:01:29:9c:b8:c6:4a:70:7f:13:
d7:0c:36:7d:96:6b:1d:20:77:cb:ff:4d:90:8c:94:
d4:2c:69:16:67:4d:c6:ab:d4:6f:d0:73:a6:ed:4f:
69:e3:84:8e:4d:5b:eb:17:0d:0e:4b:14:7e:bf:7f:
4a:7a:08:08:63:da:49:de:35:f7:13:c6:af:ee:d5:
4e:27:ed:f0:8f:26:54:f6:a8:96:53:ae:43:69:e9:
62:7f:79:7e:42:93:a2:12:5e:fb:8c:7e:e1:fc:16:
25:72:51:8e:1a:ad:f8:71:fb:e5:00:e0:b4:2d:1b:
c2:54:1f:16:2a:b3:87:61:3f:c2:53:de:c5:c7:a5:
95:c5:85:47:9a:1e:08:3f:50:e9:29:9b:ce:75:b4:
9a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:35:B9:54:4B:7B:84:00:0A:80:99:D1:96:70:98:EA:3B:19:59:9D
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f4:41:77:d4:6f:5e:27:44:92:e1:e2:65:f3:88:bd:e4:d4:
55:a2:21:f4:c8:a9:38:c6:70:59:fd:3f:3e:0c:d6:64:45:d1:
fa:40:da:22:7d:22:e4:6c:b7:84:d4:09:a5:ba:58:55:09:0b:
2f:cf:4c:d9:87:54:61:fd:39:16:04:77:05:5b:9c:ab:f2:a9:
d0:30:8d:52:b6:ee:7a:52:94:14:ae:82:22:b0:55:56:2a:4c:
0d:9e:b6:c6:b3:bd:7e:b0:a9:e9:04:20:9e:e4:48:77:12:80:
6a:0a:cb:e9:2c:ac:e5:1b:66:c7:58:6b:83:cd:b7:dc:96:a6:
64:d4:52:84:f7:e0:3b:8f:47:aa:dd:c3:25:b7:b4:7c:9f:49:
56:a0:ef:8b:67:8f:9c:48:8d:94:18:93:bf:a3:d8:9a:a8:75:
e1:8d:2b:60:99:c8:4f:52:11:1b:04:34:3d:ea:10:e8:a1:e3:
a5:e2:93:03:a0:58:28:e8:62:d5:53:21:dc:d6:9f:f2:c7:d7:
3e:c1:68:58:8b:df:3e:21:75:ee:b3:6f:fa:ed:0a:a4:28:31:
f9:99:15:8e:f0:2f:9d:f6:1f:9c:b6:7a:cc:75:8d:05:11:82:
75:39:c4:ed:e7:c0:2f:f6:04:c4:96:4e:60:73:8e:6c:a2:ac:
bc:d0:de:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 05:12:43 2025 by rpki-client