Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
File: UFZxLM-od6u3YMt34nBBd0ywRzk.mft (raw, json)
Hash identifier: FvHh34+d+ALlkWSC3BaRhG9trZng2Gx/WVdABiwgqL4=
Subject key identifier: 27:DC:D1:FB:CF:6B:9E:09:D9:1C:CA:5C:C7:47:1E:98:0D:EE:72:6C
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 0198A04E09ABE7AEB791E2B78F30617D560F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
Manifest number: 1632
Signing time: Tue 12 Aug 2025 22:02:05 +0000
Manifest this update: Tue 12 Aug 2025 22:02:05 +0000
Manifest next update: Wed 13 Aug 2025 22:02:05 +0000
Files and hashes: 1: KkYiM3e0iOAnAg_yFBFSK_bjJl8.roa (hash: 5A5Vdre+g6oCjMH5zABiFnTSkWahsDuZjsJoxbwHMo0=)
2: UFZxLM-od6u3YMt34nBBd0ywRzk.crl (hash: 4/9rBAOx3gUHcFoBbIrPZxtocd5Zy1pQ1WkXVHgJmt8=)
3: _Q23PPlL8v2niGzmSooSDUdLWSk.roa (hash: 8JwVrSvS2kxaZsRD1vVjitt0fjw3hWWmjxqgx0yIUoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:09:ab:e7:ae:b7:91:e2:b7:8f:30:61:7d:56:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Aug 12 22:02:05 2025 GMT
Not After : Aug 13 22:02:05 2025 GMT
Subject: CN=27dcd1fbcf6b9e09d91cca5cc7471e980dee726c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:28:23:eb:f4:9c:da:3b:3f:6a:22:df:78:
af:0a:42:dd:64:e7:c2:8c:6c:d3:c3:5d:b9:10:85:
cc:88:2c:57:54:7c:4d:2f:c0:c3:a7:5e:29:57:e4:
35:0c:f2:a1:ff:15:d6:af:3c:01:74:2f:fb:5f:5c:
f9:04:a6:f9:93:66:05:47:7f:8c:01:36:d0:75:a9:
19:8e:fb:2f:67:ca:ba:c1:c7:d6:e3:1f:5d:17:4d:
c4:48:d2:72:d2:70:72:48:36:c8:f9:68:e9:43:16:
20:17:3f:d9:c5:e2:8c:b0:4a:4c:d2:96:b0:f7:41:
91:88:2f:15:89:8e:ed:75:b5:54:30:e4:1d:83:5d:
f6:62:33:5c:17:77:0b:79:8f:82:5e:2c:d3:33:79:
33:f0:33:8e:57:0b:ac:84:a0:38:b7:8b:60:5c:d2:
7f:d5:0e:eb:05:08:aa:be:1c:c5:8c:4c:a8:4d:41:
78:61:e3:79:10:86:40:29:3c:cb:da:9c:a3:e0:62:
ba:06:54:d3:4c:86:d3:90:36:09:4a:7c:f6:55:7d:
b7:b1:45:40:71:f0:4b:fd:78:6b:c6:23:ed:6b:0a:
e8:eb:71:49:f1:3c:c6:7f:00:b6:7a:65:49:25:8b:
62:f0:eb:17:d2:3e:f6:b6:f3:fe:dd:44:da:0b:87:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DC:D1:FB:CF:6B:9E:09:D9:1C:CA:5C:C7:47:1E:98:0D:EE:72:6C
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b9:83:ec:ea:5c:21:f9:ef:eb:68:48:b9:e7:1b:c2:46:35:
82:15:00:97:e9:0e:9a:e9:05:db:b1:3e:f2:e9:a8:3c:61:3a:
f9:4f:4a:ca:17:62:a6:66:7d:ae:c6:64:92:4c:f6:04:c3:cd:
75:12:b1:e2:15:9c:66:b1:8c:31:5b:b0:aa:63:32:00:83:c0:
2d:4c:8b:06:1d:1e:8a:91:8d:14:fd:df:74:22:4c:17:b7:63:
e7:40:b9:2e:d3:0d:c4:9a:f3:92:5f:3f:28:94:34:5e:a8:69:
79:30:6b:db:c8:8c:16:5e:c4:e2:f8:d0:4b:60:93:c3:54:39:
a3:5e:46:ef:52:09:0e:28:10:f0:69:f9:46:f0:da:b6:db:03:
0a:a3:97:3f:c0:22:c8:5e:15:1f:df:db:de:be:d1:15:75:7e:
3b:21:f0:1c:aa:fe:f1:72:e1:43:4a:73:10:c9:fb:a1:02:9b:
76:de:1c:e1:4d:3b:b5:f3:75:df:0e:e1:da:d2:d8:16:26:53:
ed:ce:44:da:2a:ba:df:f7:2d:38:26:fb:48:11:94:0c:62:a6:
5d:eb:60:73:73:97:79:d9:f1:09:c0:df:e6:38:bb:6e:6e:67:
ba:a2:8d:dd:e1:32:f1:a6:e6:8c:56:7a:84:74:22:33:5d:be:
c8:6c:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:28 2025 by rpki-client