Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: fP1SqYzYNP64cNhNuRBOWuSqbfrF9m5id7Z93O3BibY=
Subject key identifier: 3A:FD:87:28:E0:A2:B6:5B:77:4C:2A:95:56:9C:BC:88:69:06:76:89
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 019873E21734862F174D9DC6B605570F32C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 0F3C
Signing time: Mon 04 Aug 2025 07:00:53 +0000
Manifest this update: Mon 04 Aug 2025 07:00:53 +0000
Manifest next update: Tue 05 Aug 2025 07:00:53 +0000
Files and hashes: 1: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: kWA0yJPY4lFR4QnI95+ME2qvBkU0yDHGD1jfLBvr6BM=)
2: bo7KO9XdD_Urskdk1n4Bj-fW4fs.roa (hash: ubQY2gOF+3dPO6O676JWntfiT2uJ103t4smlNmiKGh4=)
3: w9MEWUoUc8xZKY1er3NSZNyKi7U.roa (hash: POwTU/L0ZyJ5NYemVS0exc18aJZvc21A0g3ouxix4G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:17:34:86:2f:17:4d:9d:c6:b6:05:57:0f:32:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Aug 4 07:00:53 2025 GMT
Not After : Aug 5 07:00:53 2025 GMT
Subject: CN=3afd8728e0a2b65b774c2a95569cbc8869067689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:20:c3:02:48:c3:2f:e9:ee:06:c8:ab:7f:
bb:3c:84:08:b4:90:cc:0e:8e:42:0d:09:e6:2c:21:
00:a9:33:ac:fa:27:82:c4:08:a6:40:41:15:d2:fc:
78:c4:f7:17:6e:2f:cd:6e:d3:85:79:e3:ef:5f:60:
20:22:d8:ae:2a:5a:8a:bb:d9:37:ea:57:31:93:a7:
28:c6:1f:72:6b:04:9f:3f:3c:61:1c:46:8d:33:54:
97:4a:ac:38:30:69:5b:33:72:d6:3b:0d:b9:f3:92:
1e:23:55:58:32:48:f9:e7:15:1c:9c:99:bf:be:33:
27:6e:93:60:95:94:fe:ae:2b:b5:8e:bb:1c:a4:ec:
5b:7b:89:bc:83:6a:dd:4c:8a:b2:ba:40:c5:6e:a3:
84:e4:08:b4:3d:61:df:b2:87:10:03:7f:d6:7e:f5:
ef:b9:8e:91:2f:d8:ab:89:70:8e:cc:1e:d1:1b:ca:
d6:e6:ae:2b:13:6b:86:8f:53:8f:8f:fe:1b:50:db:
e1:53:e1:3b:97:6c:be:41:4c:4b:53:eb:62:66:ac:
e0:0d:f9:d5:75:82:00:56:7b:ae:5c:c5:d4:97:d8:
53:49:fb:81:8f:c2:75:32:40:e6:07:0d:fb:e6:0d:
8d:cf:8a:98:80:cc:54:4f:d7:e6:e2:b2:56:69:7b:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FD:87:28:E0:A2:B6:5B:77:4C:2A:95:56:9C:BC:88:69:06:76:89
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:61:2e:aa:16:88:f2:da:a6:c9:2b:3f:42:8f:dd:2b:05:22:
28:91:03:7c:92:b1:d3:03:d2:95:d1:02:3e:20:2a:5e:0a:96:
83:86:aa:de:51:8a:2a:85:03:2d:88:cf:20:77:d7:df:f0:d9:
4c:c7:99:4d:06:19:6d:c8:f5:2f:5e:30:23:fc:50:e7:3f:02:
b1:77:1f:a0:51:60:96:58:8d:6b:9e:e5:3e:50:2f:df:50:d0:
14:e8:07:3a:bc:b7:b0:5c:14:96:eb:37:a0:2f:63:fe:43:d8:
28:18:7d:29:6e:61:64:26:11:e2:ed:dd:1c:fa:5d:06:e4:9a:
64:f7:f5:e8:d0:3b:83:b6:54:5d:cb:8d:18:3c:dd:34:f1:a0:
2c:3e:4e:22:d8:d9:e3:07:c7:70:7b:30:83:7c:57:72:ae:a8:
1e:f4:19:05:b5:99:8f:b2:82:93:fd:ab:5e:0b:21:8f:9f:98:
86:14:fa:44:69:31:68:e3:f6:3c:f1:e2:ba:ed:75:45:d9:64:
87:08:f5:e8:a7:db:63:44:e5:41:0b:5a:27:83:ff:e0:4c:e3:
bb:96:4f:f8:93:34:3c:e6:9f:59:04:48:8d:43:d6:39:fa:f9:
97:10:94:99:7a:4f:ca:97:cb:88:9b:5a:c6:74:e4:1d:6e:68:
33:cc:b3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:04 2025 by rpki-client