Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: sdCSEmtnNu2IT42OL7sLfRagRKqz1LZ1kjxmSi7M65E=
Subject key identifier: AA:C1:B4:FC:01:6E:62:31:1D:7C:6C:E4:30:AF:76:42:D7:64:DE:C3
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 019A4E4F6E262C6EA6F98039D04A43EB10F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 04BC
Signing time: Tue 04 Nov 2025 10:00:19 +0000
Manifest this update: Tue 04 Nov 2025 10:00:19 +0000
Manifest next update: Wed 05 Nov 2025 10:00:19 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: NvjGBiOD7S4oTXfRh6r0y2JR3scalC1pqGXNt/2f6Ek=)
2: tuLehSOy-qAFQeskzDC9g5qQP28.roa (hash: PI1JhY3WzMR4z9FpYAEO5831pX148zh5gBmaERfINeo=)
3: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (hash: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:6e:26:2c:6e:a6:f9:80:39:d0:4a:43:eb:10:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Nov 4 10:00:19 2025 GMT
Not After : Nov 5 10:00:19 2025 GMT
Subject: CN=aac1b4fc016e62311d7c6ce430af7642d764dec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:29:c8:59:42:af:9e:bf:60:b4:4e:a0:27:
09:b6:0a:5c:54:06:4f:12:a9:94:4b:e2:72:b2:ab:
96:59:69:b3:7d:01:bb:99:dc:98:fd:c5:84:2e:2c:
9c:c8:9e:91:81:55:7c:ba:d7:15:39:2a:05:23:c1:
2d:8d:9c:76:0b:87:a4:51:59:a9:b4:09:78:52:4c:
aa:53:66:6e:82:68:94:2c:60:cd:3c:2c:33:de:b5:
35:a3:6a:a3:d7:87:f6:9b:e2:6c:27:5d:2b:c5:2e:
2c:03:33:d9:42:ba:b4:fa:93:35:5a:0f:80:82:83:
37:09:39:e3:8e:3a:39:82:dd:8d:d1:39:73:33:8c:
d5:75:a8:56:f5:cf:e3:cd:25:fa:76:ca:06:1d:62:
e0:70:e1:7b:f9:a0:8b:f0:fd:3d:0c:0b:f6:ce:0f:
7a:ab:1e:5d:17:35:57:80:32:ae:86:3e:64:b4:63:
da:18:aa:2b:95:42:38:53:14:fd:bb:ac:d9:4b:61:
a2:c3:06:5b:c1:d8:84:05:22:f9:5d:4f:c2:97:69:
b7:a3:73:c9:57:8d:0d:3a:bf:01:46:f8:b6:4f:c1:
3c:be:86:99:8a:85:09:18:a6:c7:2b:eb:91:fb:f3:
44:79:ff:b6:dd:e5:85:92:15:ff:d3:6b:06:f5:bd:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C1:B4:FC:01:6E:62:31:1D:7C:6C:E4:30:AF:76:42:D7:64:DE:C3
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:41:8d:d9:c7:0c:8f:30:18:82:34:00:4c:bc:20:cb:6f:67:
53:5e:c0:11:2b:cc:16:e7:b5:dd:39:df:2f:b3:99:8f:92:f1:
e6:0a:fe:af:24:7a:69:b0:fd:04:28:c6:12:fc:ae:0b:82:44:
ab:0a:aa:30:47:98:db:52:3d:54:cc:dc:3b:f0:b5:b7:0f:98:
44:4a:b9:d5:52:f5:d5:76:bb:14:c0:69:05:8b:2b:2e:59:d0:
23:34:4d:eb:05:2c:e1:8e:be:c2:b4:09:f5:97:e7:66:de:f0:
dd:7d:49:f6:c4:df:dc:66:86:5f:87:c3:e3:97:fb:ba:99:7f:
79:1b:04:cb:6f:cf:54:2c:47:c5:0f:1a:a3:a5:bd:94:09:6f:
a3:43:cd:c5:38:35:a7:b2:f8:08:fe:4a:08:47:d0:69:33:da:
f8:81:55:27:91:66:a7:70:70:27:97:44:0b:df:38:a3:93:74:
89:f4:d0:47:c2:f8:63:5e:dd:16:b8:a9:ef:00:92:f8:58:14:
cd:92:04:a4:26:70:8d:1c:93:c7:65:26:93:71:7c:27:37:b7:
fa:59:d4:3b:91:e5:ea:87:90:ba:48:9d:dd:a0:e8:87:0c:4f:
90:5f:34:cc:c1:e0:e7:5a:a2:47:a9:77:a5:61:82:b4:2a:cd:
e2:df:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:08 2025 by rpki-client