Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: evH3Cwa6UQYpK9Xtlggh4naOzkuMdh5+qdYEpAs0ZV4=
Subject key identifier: 08:2D:A6:74:59:56:FE:3E:2D:9B:76:C9:88:2D:3D:D3:B3:C1:2C:6E
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 019872CF16226DC622F86FC6CF39097BB27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 02:00:30 +0000
Manifest this update: Mon 04 Aug 2025 02:00:30 +0000
Manifest next update: Tue 05 Aug 2025 02:00:30 +0000
Files and hashes: 1: 0JNfBNzU72OAoNIfj1jhygVeYQU.roa (hash: oGcfqT/JJ8LL0qB7k2QsQSpg+/RTt2AO65zLWXlHWAA=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: LHov3ilKV6CgslsmxgfI9RnKGA6jbhQ1Ymg6dI0fXqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:16:22:6d:c6:22:f8:6f:c6:cf:39:09:7b:b2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Aug 4 02:00:30 2025 GMT
Not After : Aug 5 02:00:30 2025 GMT
Subject: CN=082da6745956fe3e2d9b76c9882d3dd3b3c12c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:de:91:53:65:1b:10:2c:f7:bc:5a:6d:bc:
48:eb:40:4d:ff:6e:2d:ca:71:d5:76:66:f8:6d:cd:
a0:2d:d0:4d:18:5a:b1:88:78:30:51:5f:4c:82:2c:
6e:e8:ee:b3:18:d7:4a:1b:80:a9:ed:5d:9c:0c:11:
d9:65:00:c8:9f:5d:bc:86:37:61:55:57:5e:b2:4b:
8b:7d:b6:88:5c:93:8f:42:df:05:b0:5a:ff:e0:ac:
ed:e2:12:08:7b:c7:cf:e5:8f:16:12:fb:3f:a2:cf:
48:0d:d0:fd:d4:40:00:bb:71:d4:4c:86:ca:4e:1b:
52:eb:0d:f6:72:e1:95:2c:79:2a:43:31:14:63:8a:
78:f1:06:59:db:4d:2a:c4:5f:f5:38:3a:fa:7c:fc:
9b:79:95:65:04:56:e8:72:cd:c2:60:b9:bb:cf:f7:
10:ce:d1:63:52:b4:f9:eb:6d:80:8f:90:05:26:1f:
fc:ee:5f:d2:1c:e9:d3:34:2a:28:c9:90:6c:ba:cb:
3f:27:e5:f3:34:01:dc:a9:0e:4d:09:a8:c8:2f:d5:
ce:54:f0:05:24:4e:36:17:77:02:16:1f:e3:7b:8b:
5b:b3:4a:40:fd:1e:d9:df:78:ab:12:89:c9:d8:97:
d4:4f:35:51:93:dd:ff:51:c4:27:9a:9c:46:41:ce:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2D:A6:74:59:56:FE:3E:2D:9B:76:C9:88:2D:3D:D3:B3:C1:2C:6E
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8d:f1:ef:ac:57:6c:b1:6a:c7:e3:7a:14:84:94:da:85:56:
38:cd:60:b7:6d:fa:1c:46:e9:42:15:94:d5:e9:e5:c5:40:1f:
fb:c7:8b:23:6d:be:e7:d3:44:04:94:d8:7f:9f:62:67:a4:c8:
d9:a2:a2:60:bd:30:97:39:e2:10:cf:03:fc:27:df:93:69:15:
0a:66:8d:fa:32:df:a2:73:41:bb:b3:61:c2:06:58:84:b7:3b:
24:c6:f2:55:20:c8:4a:f7:e4:e1:f1:f5:53:ba:b0:43:7b:0c:
83:11:68:65:85:be:47:dd:d7:e4:c6:0e:f4:5b:78:0a:d6:17:
be:ce:01:1a:cc:01:04:fd:49:c6:9f:1e:b4:0f:fc:ba:21:81:
13:2e:e7:95:7f:de:d7:78:15:6a:02:2b:90:67:70:78:bb:70:
75:d6:04:d9:f9:8c:b7:6a:98:0a:67:ec:78:74:fd:0a:a1:f8:
fe:1f:57:8a:ae:c9:a5:21:82:41:ef:33:18:1b:f9:16:b7:2a:
91:a0:03:42:0e:18:d8:6f:91:a8:29:79:e8:c0:70:3e:3c:2d:
1f:42:eb:e0:1e:de:50:d1:63:37:b9:16:19:2f:32:20:b7:55:
cc:0c:bf:c2:5d:6e:c2:70:d9:35:23:5a:e3:01:12:5a:dd:f0:
e4:0e:39:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:58 2025 by rpki-client