Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: Efu0Q9MfnJOjL6zg9U2V7xUOBCd6uMtkNCFkRIxMyic=
Subject key identifier: FA:B9:2E:A2:F0:07:D0:8C:24:14:2B:F4:3E:85:B2:06:1E:F8:2C:A7
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 0199D24994E6FF0904F7B684A861AE414297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 16CF
Signing time: Sat 11 Oct 2025 08:01:01 +0000
Manifest this update: Sat 11 Oct 2025 08:01:01 +0000
Manifest next update: Sun 12 Oct 2025 08:01:01 +0000
Files and hashes: 1: 0JNfBNzU72OAoNIfj1jhygVeYQU.roa (hash: oGcfqT/JJ8LL0qB7k2QsQSpg+/RTt2AO65zLWXlHWAA=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: iu+Q4/w+iGC/6iTbvMQde7Yg7rcqs3v4zmMJYu10hyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d2:49:94:e6:ff:09:04:f7:b6:84:a8:61:ae:41:42:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Oct 11 08:01:01 2025 GMT
Not After : Oct 12 08:01:01 2025 GMT
Subject: CN=fab92ea2f007d08c24142bf43e85b2061ef82ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:f4:9e:ce:9f:52:3c:18:af:59:e3:16:19:
a2:0d:9a:4c:73:66:46:d3:d2:56:a9:ef:0e:14:66:
2f:68:70:c4:a4:03:98:8e:ec:f4:1c:d6:ed:46:5b:
61:7f:4b:5e:38:89:2c:a0:3d:20:88:cf:66:62:64:
a6:b2:ac:d5:ac:a0:59:5b:e1:71:b3:fa:75:35:e9:
37:fe:20:3f:5a:e8:1f:ca:3b:37:95:56:a0:11:fa:
20:b3:f1:f9:f7:f7:9d:ab:31:05:d2:be:18:d1:54:
9a:b4:56:80:ae:bc:59:59:72:bb:1a:12:62:3c:a9:
4d:49:29:ae:a9:4c:08:11:49:d5:83:eb:af:c8:c1:
9e:e3:00:c5:d3:2a:df:6b:0b:6a:90:ff:6f:59:f0:
7f:1f:b1:8c:91:31:24:d6:b5:40:69:5f:ab:83:91:
23:62:d3:a7:5d:0f:7e:33:aa:e2:1a:cd:41:ae:dc:
c4:ea:9e:99:d0:65:75:a5:8a:ff:19:2e:f3:4a:c3:
1f:66:cd:32:18:5a:97:31:f8:cc:8e:79:01:b7:e9:
6e:00:88:89:b4:32:89:5e:c7:53:c5:f1:b3:1f:b0:
29:cd:7a:ae:31:5a:64:f9:f1:09:61:21:91:04:df:
95:97:e0:42:5b:1f:35:a0:e4:aa:56:f2:28:fc:c0:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:2E:A2:F0:07:D0:8C:24:14:2B:F4:3E:85:B2:06:1E:F8:2C:A7
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:71:39:57:5c:79:4b:74:1f:54:01:0e:44:47:c7:94:60:0f:
5e:41:22:1b:57:23:44:cf:d4:97:f6:5b:ff:fe:fb:b2:94:3b:
83:0e:01:7c:74:7f:63:55:e9:19:8f:6f:4b:b2:73:72:aa:31:
b3:07:3f:90:e8:12:54:09:d6:32:aa:14:e7:13:d9:0c:b9:f4:
61:a0:3d:bd:0c:20:3f:23:3e:52:27:81:c8:39:f6:79:93:e9:
2b:a5:83:b0:77:9d:53:a3:2b:69:fe:e1:9d:ac:93:74:cc:a9:
99:ac:33:6f:95:ea:30:a4:ed:60:f7:75:81:4a:6e:79:a4:7d:
9e:a2:a3:ae:3e:48:db:a8:5e:13:17:91:cd:78:41:78:bf:5f:
21:1e:ce:87:00:31:1d:7f:b5:4c:f4:bf:e6:0e:d3:25:38:60:
04:50:ec:e0:04:8d:9d:a8:4b:cc:95:e8:40:3c:6f:79:38:cc:
47:a5:d5:63:a5:ad:55:f1:0b:ce:db:73:bd:95:1b:11:36:13:
91:8a:ba:0e:05:4d:b1:ad:a9:cb:d0:9e:08:94:fc:4e:44:12:
fd:01:a1:6c:eb:bf:29:f1:7d:b2:ce:15:24:5a:3f:39:0f:77:
42:1a:f9:d9:2c:d3:bf:cf:c2:d1:d6:e3:ba:43:07:9d:56:0a:
68:2f:73:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnSSZTm/wkE97aEqGGuQUKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Zjc2OWQ0NDMzYjc3MDRkZjcwM2QxNjQ1YjdmZWE4ZWZi
ZjkyNmUwHhcNMjUxMDExMDgwMTAxWhcNMjUxMDEyMDgwMTAxWjAzMTEwLwYDVQQD
EyhmYWI5MmVhMmYwMDdkMDhjMjQxNDJiZjQzZTg1YjIwNjFlZjgyY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSj0ns6fUjwYr1njFhmiDZpMc2ZG
09JWqe8OFGYvaHDEpAOYjuz0HNbtRlthf0teOIksoD0giM9mYmSmsqzVrKBZW+Fx
s/p1Nek3/iA/Wugfyjs3lVagEfogs/H59/edqzEF0r4Y0VSatFaArrxZWXK7GhJi
PKlNSSmuqUwIEUnVg+uvyMGe4wDF0yrfawtqkP9vWfB/H7GMkTEk1rVAaV+rg5Ej
YtOnXQ9+M6riGs1BrtzE6p6Z0GV1pYr/GS7zSsMfZs0yGFqXMfjMjnkBt+luAIiJ
tDKJXsdTxfGzH7ApzXquMVpk+fEJYSGRBN+Vl+BCWx81oOSqVvIo/MDY6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPq5LqLwB9CMJBQr9D6FsgYe+CynMB8GA1UdIwQY
MBaAFLn3adRDO3cE33A9FkW3/qjvv5JuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80ZGZiZDQtOGVkNy00NWYyLTk1MGQt
M2FlYjdjZGUwMzZjLzEvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS80ZGZiZDQtOGVkNy00NWYyLTk1MGQtM2FlYjdjZGUwMzZj
LzEvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHE5V1x5
S3QfVAEOREfHlGAPXkEiG1cjRM/Ul/Zb//77spQ7gw4BfHR/Y1XpGY9vS7Jzcqox
swc/kOgSVAnWMqoU5xPZDLn0YaA9vQwgPyM+UieByDn2eZPpK6WDsHedU6Mraf7h
nayTdMypmawzb5XqMKTtYPd1gUpueaR9nqKjrj5I26heExeRzXhBeL9fIR7OhwAx
HX+1TPS/5g7TJThgBFDs4ASNnahLzJXoQDxveTjMR6XVY6WtVfELzttzvZUbETYT
kYq6DgVNsa2py9CeCJT8TkQS/QGhbOu/KfF9ss4VJFo/OQ93Qhr52SzTv8/C0dbj
ukMHnVYKaC9z3Q==
-----END CERTIFICATE-----
Generated at Sat Oct 11 09:24:06 2025 by rpki-client