Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
File: unnFAIApfLnMDMk07jifUMPnPUo.mft (raw, json)
Hash identifier: +BXizQKe+0Ny4t3Gtv+AkUevliXbF5thJW6i+TGtEOw=
Subject key identifier: 55:B2:B4:4B:E8:81:55:34:5F:01:20:5B:2C:19:F8:16:4A:4A:1A:20
Authority key identifier: BA:79:C5:00:80:29:7C:B9:CC:0C:C9:34:EE:38:9F:50:C3:E7:3D:4A
Certificate issuer: /CN=ba79c50080297cb9cc0cc934ee389f50c3e73d4a
Certificate serial: 01984776EE6CF6ED1BE8BAB60923F657E590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
Manifest number: 04CE
Signing time: Sat 26 Jul 2025 16:00:33 +0000
Manifest this update: Sat 26 Jul 2025 16:00:33 +0000
Manifest next update: Sun 27 Jul 2025 16:00:33 +0000
Files and hashes: 1: CpPRk_TNW4CH4jbImpFoaI2OcL4.roa (hash: eYYsy6V5aRdmdwv40uWtw/bgoED55t23eDlp8kMf818=)
2: unnFAIApfLnMDMk07jifUMPnPUo.crl (hash: k63w/UwIt2JyqCT7nPtJGCv8h5CT+jNDepchSoOKXCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:ee:6c:f6:ed:1b:e8:ba:b6:09:23:f6:57:e5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba79c50080297cb9cc0cc934ee389f50c3e73d4a
Validity
Not Before: Jul 26 16:00:33 2025 GMT
Not After : Jul 27 16:00:33 2025 GMT
Subject: CN=55b2b44be88155345f01205b2c19f8164a4a1a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:ff:7f:49:f4:39:d5:52:a8:dd:a8:1b:e7:
88:f2:d2:a3:ae:9e:9a:f5:83:63:19:55:af:a1:38:
72:19:49:86:58:75:93:80:ec:ec:e4:33:1a:83:e6:
ec:36:fb:9b:79:87:ae:66:c5:9e:49:8b:8e:ed:61:
fb:21:3f:ed:c4:55:01:a9:ed:54:26:2a:8d:03:83:
85:d0:64:e3:e3:0e:ae:f0:af:8c:55:e3:ce:59:01:
f0:7f:da:bc:dd:53:f4:3b:e9:79:dd:96:ed:42:58:
9e:28:59:c3:87:4f:e3:21:aa:81:af:79:34:a9:ed:
06:79:f3:f2:ef:e1:46:86:2b:d9:6f:3b:16:e1:7f:
39:73:8e:80:2e:9a:96:27:53:3c:9f:34:d2:22:ec:
2b:0b:f7:15:72:1d:3f:1e:90:17:c5:6d:6d:a5:26:
08:48:b3:7c:41:07:d1:4b:04:66:4e:91:fe:be:28:
2e:7e:fc:7b:9c:44:d2:fd:6a:c1:df:7e:c4:62:45:
e2:2d:be:6c:42:b9:e1:bb:09:dd:47:02:7a:92:a7:
e3:de:de:d1:ae:08:87:3f:10:18:44:1c:0b:67:ff:
29:58:04:e7:2f:52:6a:2f:a7:30:a3:bf:26:cc:b5:
ab:b0:0a:00:bd:1e:40:11:33:43:c2:56:7c:61:4d:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B2:B4:4B:E8:81:55:34:5F:01:20:5B:2C:19:F8:16:4A:4A:1A:20
X509v3 Authority Key Identifier:
keyid:BA:79:C5:00:80:29:7C:B9:CC:0C:C9:34:EE:38:9F:50:C3:E7:3D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f2:a9:dc:78:81:2a:a1:86:d5:7c:d5:f8:b2:b7:58:7f:b5:
12:7f:71:c4:8f:0a:60:81:59:77:9b:bc:b0:aa:e3:d1:d0:14:
4a:c0:32:93:41:d5:a2:7b:2e:d7:0a:7c:83:59:62:91:18:33:
d0:98:e9:97:32:92:ad:5f:3b:03:88:57:95:9f:2f:0a:b0:6c:
9e:57:b0:5d:29:06:35:34:a0:ee:35:42:34:fb:2d:6d:8a:6e:
e2:42:0d:18:29:d7:62:24:8e:e2:04:4d:37:4b:da:f3:4f:70:
54:d3:7c:05:8b:72:29:d6:9f:f5:46:d0:49:6d:13:a0:39:df:
47:8c:8b:7d:b8:a1:b0:93:85:95:5e:d5:6f:55:c3:10:a2:c0:
e3:a6:62:21:14:1c:c8:d2:8e:e4:f7:1b:45:68:8b:c3:70:7d:
44:41:44:c5:79:78:50:62:e8:ab:a3:39:4a:f7:23:98:a4:27:
ec:12:df:26:45:b4:92:58:30:a0:55:c9:df:2b:c6:fb:45:2f:
ca:05:a1:99:b1:f0:98:42:6c:13:69:19:8d:7a:6a:9d:fc:e5:
eb:fa:a9:be:6d:b6:4e:df:f6:98:c7:f8:d5:d5:82:18:c0:69:
6d:92:22:d4:e8:df:88:77:29:d1:66:4a:36:14:1c:b8:13:f7:
3d:ee:f1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:50:00 2025 by rpki-client