Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: Thtdq6oo7dG51gxdUdv1oaoH+FtyWERyPcrbV4APTyM=
Subject key identifier: 95:FD:72:A9:33:AD:2A:21:A7:90:80:B8:07:1C:9E:4F:AF:0D:B5:B8
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 01976C98A8D4BDC100B5774AC449F9A0CE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 033E
Signing time: Sat 14 Jun 2025 04:00:33 +0000
Manifest this update: Sat 14 Jun 2025 04:00:33 +0000
Manifest next update: Sun 15 Jun 2025 04:00:33 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: sbCP1xt96EOfyDVvM7Q6lsGyiMcwzhMB3ZG6KJSWXi4=)
2: tuLehSOy-qAFQeskzDC9g5qQP28.roa (hash: PI1JhY3WzMR4z9FpYAEO5831pX148zh5gBmaERfINeo=)
3: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (hash: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a8:d4:bd:c1:00:b5:77:4a:c4:49:f9:a0:ce:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Jun 14 04:00:33 2025 GMT
Not After : Jun 15 04:00:33 2025 GMT
Subject: CN=95fd72a933ad2a21a79080b8071c9e4faf0db5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:c8:ee:b9:ac:43:08:6a:91:0f:78:55:93:
8c:f2:83:e7:d4:c7:89:46:7c:ef:7d:ba:ec:de:c6:
a5:d8:5a:bb:2e:af:b4:8c:d4:b4:b5:a3:14:2d:c7:
da:7a:22:44:28:69:10:d4:9a:f2:26:ab:03:01:01:
ba:bb:3e:45:c6:20:24:74:97:66:51:d8:de:6f:4b:
5d:b4:df:c9:8a:57:1b:f2:3e:61:60:71:de:0f:10:
81:f3:b5:ae:8a:dc:df:56:f3:a0:ba:ca:cd:11:5a:
4b:e2:20:78:a2:05:a9:ca:c3:c4:6f:e9:be:e1:33:
e8:ef:a1:64:a6:cf:f3:5b:3c:6a:15:71:84:0a:b7:
44:ca:6e:82:2d:17:7c:72:25:8d:40:75:0e:57:91:
08:68:6b:64:5a:e3:28:d8:a1:d5:31:bd:d0:ed:ee:
75:44:d2:ea:f8:8e:a2:98:a0:98:5d:1c:bc:0a:7f:
d8:f3:b9:be:9a:1f:e6:9b:a3:5a:9b:6b:2a:b6:7b:
71:78:e6:4f:36:fd:9d:53:cd:06:f0:56:96:ca:d6:
41:dd:93:1d:cb:f7:97:f9:29:eb:90:68:97:ff:42:
9e:10:f7:4c:88:65:97:1b:9b:11:4d:0f:e9:ab:50:
31:17:f6:8c:a0:32:07:c3:36:8a:bd:3a:1c:3d:bc:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FD:72:A9:33:AD:2A:21:A7:90:80:B8:07:1C:9E:4F:AF:0D:B5:B8
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:02:e1:35:60:80:b8:b8:e8:99:12:43:30:a8:8f:7d:4a:57:
1f:26:8f:42:78:98:51:27:3e:3c:06:48:48:05:7c:f1:0c:3d:
fb:ea:17:69:72:ce:d1:b4:fc:56:35:92:dc:63:fb:6d:ed:2e:
70:9e:06:34:86:d0:9e:67:72:20:3b:d8:6a:63:c2:d4:2b:b9:
49:23:56:9d:f1:c3:55:e5:bc:93:a8:af:45:2a:72:89:94:a2:
2b:2e:4b:19:9f:fb:0d:7d:82:17:7a:52:65:65:58:a5:70:64:
a1:54:ce:5c:5b:58:0a:94:c1:ab:98:19:db:db:6e:a2:7d:fd:
4c:fd:d6:04:37:b3:a4:a8:70:30:2b:54:7d:4a:81:c7:9c:58:
2c:88:d2:9e:5c:28:db:61:a2:f6:9c:4c:c6:2d:a2:3c:e4:b4:
d3:07:ba:ae:0b:55:e6:cb:db:69:1a:e1:5d:2d:89:8f:17:d0:
cd:34:ac:a7:22:41:91:33:89:fb:48:6e:a4:d5:92:f5:3c:ff:
a5:da:52:43:d8:db:fe:a6:bc:83:81:d6:0a:f6:17:35:89:ee:
d2:23:38:74:89:19:1c:37:50:a4:9b:d1:81:28:3e:78:7a:5e:
45:cd:ab:a3:87:8e:47:32:55:04:29:69:c1:80:08:87:a9:99:
61:51:24:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmKjUvcEAtXdKxEn5oM6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NDdjZjlmMjc3Njc0NzcxMjBiMWQzYjI2Y2M1N2E2MTA5
OWE3MjQwHhcNMjUwNjE0MDQwMDMzWhcNMjUwNjE1MDQwMDMzWjAzMTEwLwYDVQQD
Eyg5NWZkNzJhOTMzYWQyYTIxYTc5MDgwYjgwNzFjOWU0ZmFmMGRiNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG3I7rmsQwhqkQ94VZOM8oPn1MeJ
Rnzvfbrs3sal2Fq7Lq+0jNS0taMULcfaeiJEKGkQ1JryJqsDAQG6uz5FxiAkdJdm
Udjeb0tdtN/Jilcb8j5hYHHeDxCB87WuitzfVvOgusrNEVpL4iB4ogWpysPEb+m+
4TPo76Fkps/zWzxqFXGECrdEym6CLRd8ciWNQHUOV5EIaGtkWuMo2KHVMb3Q7e51
RNLq+I6imKCYXRy8Cn/Y87m+mh/mm6Nam2sqtntxeOZPNv2dU80G8FaWytZB3ZMd
y/eX+SnrkGiX/0KeEPdMiGWXG5sRTQ/pq1AxF/aMoDIHwzaKvTocPbzpLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJX9cqkzrSohp5CAuAccnk+vDbW4MB8GA1UdIwQY
MBaAFNVHz58ndnR3EgsdOybMV6YQmackMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2Ut
NmY0ZGUwMjBhYWU2LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2UtNmY0ZGUwMjBhYWU2
LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgLhNWCA
uLjomRJDMKiPfUpXHyaPQniYUSc+PAZISAV88Qw9++oXaXLO0bT8VjWS3GP7be0u
cJ4GNIbQnmdyIDvYamPC1Cu5SSNWnfHDVeW8k6ivRSpyiZSiKy5LGZ/7DX2CF3pS
ZWVYpXBkoVTOXFtYCpTBq5gZ29tuon39TP3WBDezpKhwMCtUfUqBx5xYLIjSnlwo
22Gi9pxMxi2iPOS00we6rgtV5svbaRrhXS2JjxfQzTSspyJBkTOJ+0hupNWS9Tz/
pdpSQ9jb/qa8g4HWCvYXNYnu0iM4dIkZHDdQpJvRgSg+eHpeRc2ro4eORzJVBClp
wYAIh6mZYVEk5A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:38:15 2025 by rpki-client