Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: XLu9hDmdS+nZSximReS9CXtRXrLLUL+q1V11DE+OEgA=
Subject key identifier: 25:86:3B:CF:84:67:B1:AF:51:73:32:51:D5:0B:88:DA:A8:CD:7E:F2
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 019872984B66FAF117F0D087612535F902E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 138F
Signing time: Mon 04 Aug 2025 01:00:39 +0000
Manifest this update: Mon 04 Aug 2025 01:00:39 +0000
Manifest next update: Tue 05 Aug 2025 01:00:39 +0000
Files and hashes: 1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: KJ1BIfxyTLD4nS4zsN71b0YqmX3FSzaztQgX9R+/SuI=)
3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:4b:66:fa:f1:17:f0:d0:87:61:25:35:f9:02:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Aug 4 01:00:39 2025 GMT
Not After : Aug 5 01:00:39 2025 GMT
Subject: CN=25863bcf8467b1af51733251d50b88daa8cd7ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:96:ef:4c:e3:f6:ed:21:23:f3:4d:76:20:
6d:7a:aa:fc:5b:40:18:44:87:15:4b:04:30:70:5d:
b9:1a:a4:55:cf:e1:b3:54:c0:d9:f5:a4:63:ef:f7:
d6:0f:de:94:2c:70:23:47:db:1e:99:53:66:bc:14:
9c:8f:37:ea:2d:1a:8c:2d:7b:b5:14:56:39:40:00:
66:ca:21:3a:f2:8f:07:21:b9:60:eb:9e:f7:4c:4e:
90:ad:2c:e8:fa:b2:bd:d4:94:7a:36:47:d7:21:1e:
78:1b:56:2e:1b:2c:49:1c:6b:23:31:ae:98:3f:51:
23:35:0e:2a:0b:76:ea:49:75:50:bc:e8:4a:d3:53:
bd:3e:79:03:4f:c0:8c:99:38:09:29:cf:c1:ad:54:
d8:27:62:fa:a7:4e:dc:67:56:1a:06:1f:95:4d:bb:
32:5f:92:1f:45:4b:f2:1f:4e:85:54:f2:98:6d:b7:
9d:e1:01:46:fa:da:58:e1:94:fc:f7:86:2e:70:03:
81:0c:4c:9d:0e:90:f0:2b:57:ae:1f:82:4e:16:0b:
ae:4f:15:5c:f8:fc:1e:ff:52:54:4a:0f:dd:d9:07:
46:3e:ae:b3:81:76:66:87:26:04:00:09:e3:88:ff:
1a:ee:e8:9b:cb:66:be:f7:93:c0:cd:75:5f:18:f3:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:86:3B:CF:84:67:B1:AF:51:73:32:51:D5:0B:88:DA:A8:CD:7E:F2
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:77:bd:25:cd:93:d1:e7:65:ae:67:a1:96:96:eb:ae:53:33:
6b:ff:d6:6c:1e:cc:9e:e1:27:de:18:07:b9:77:64:a8:1f:ef:
6c:63:b6:0a:dc:8d:f3:f7:e0:6a:63:90:56:27:73:f7:55:70:
12:eb:ef:d4:1b:b4:f8:95:52:09:3d:cf:de:6b:ae:d6:fa:a0:
47:b7:ee:86:56:b8:58:e8:98:9d:81:aa:dd:b5:4b:af:e5:4b:
82:db:fe:42:f8:f0:40:f6:ab:c6:8e:99:d1:27:ea:1d:a9:3f:
6b:cf:1a:67:67:50:46:b7:a3:56:c1:b6:b1:12:fa:80:33:0f:
99:39:28:6a:08:d1:65:95:ea:68:d1:4a:6c:ec:a9:74:47:58:
6a:da:5c:94:8e:09:49:ab:14:cc:55:91:23:83:e5:e2:1e:57:
e1:34:1b:7e:53:31:85:a1:71:3e:48:7c:5e:e7:fd:c5:b7:0b:
b8:64:e9:7f:7c:73:ed:c6:07:ad:37:ec:03:5b:4d:9d:67:5e:
2a:f3:60:08:2e:c4:fe:8b:15:a3:01:63:31:5c:6f:0d:3e:53:
89:6d:b6:b9:ed:2e:6a:6c:68:e5:9c:ee:c6:c1:d6:b9:11:f2:
5e:c7:04:b0:77:9d:4f:ec:77:1c:7a:53:fb:c9:96:5a:08:97:
96:77:8d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:50 2025 by rpki-client