Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: 22N2ehi/V8vQXe8nWEHgVkOYKbRdF6WITasLw2OAqaQ=
Subject key identifier: 8D:3D:1A:B9:AD:91:68:41:9E:63:31:CC:7E:25:CE:C5:1F:C7:2C:BA
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 019846648B0FCCA7A121CC6420EEE05E3407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 11:00:51 +0000
Manifest this update: Sat 26 Jul 2025 11:00:51 +0000
Manifest next update: Sun 27 Jul 2025 11:00:51 +0000
Files and hashes: 1: 0JNfBNzU72OAoNIfj1jhygVeYQU.roa (hash: oGcfqT/JJ8LL0qB7k2QsQSpg+/RTt2AO65zLWXlHWAA=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: YrWQz80Tj0Ewy80WCKBs5L2704j8wIMvmE2z3Gtz1MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:8b:0f:cc:a7:a1:21:cc:64:20:ee:e0:5e:34:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Jul 26 11:00:51 2025 GMT
Not After : Jul 27 11:00:51 2025 GMT
Subject: CN=8d3d1ab9ad9168419e6331cc7e25cec51fc72cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:15:2a:83:36:c8:0f:f3:20:6b:7a:f9:17:cf:
88:45:17:7a:74:6f:5a:49:9d:07:a4:3f:32:27:15:
bd:52:db:e1:73:1e:68:3b:4e:09:b1:e5:3e:68:fd:
f0:51:67:70:69:c8:50:39:14:7d:53:db:3e:87:78:
9a:d4:4e:74:50:78:43:96:6e:3a:2f:07:67:ee:63:
fa:c9:7b:fc:c8:da:c1:88:f6:b1:59:0b:cd:a4:50:
d6:01:9f:48:16:bb:d4:d4:60:a0:6a:06:c9:21:b8:
05:05:4c:f3:62:fa:ea:88:52:35:4b:89:b0:7c:85:
e8:5c:09:e6:a8:58:07:e7:59:1f:b1:5c:95:5e:c4:
06:dd:05:4a:70:5e:05:bb:64:d7:cc:af:28:c6:1b:
84:c3:4f:04:eb:75:f3:b3:86:7f:5f:17:29:4b:b9:
01:9b:8d:d6:43:79:f7:e9:87:c5:41:ef:53:88:96:
6d:6f:8c:26:3b:de:13:a0:39:a6:98:2f:ce:5f:5d:
97:16:5e:af:66:d5:59:9e:5c:7b:9c:15:f8:9e:9c:
50:dc:c7:67:29:e1:e7:92:a4:2d:97:41:e2:76:2b:
1d:33:25:28:f3:6b:aa:e2:9d:93:fd:88:64:85:70:
33:b5:4c:f2:dd:b0:7c:e1:6a:01:e2:14:a3:cd:87:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3D:1A:B9:AD:91:68:41:9E:63:31:CC:7E:25:CE:C5:1F:C7:2C:BA
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ca:e8:04:b5:6f:d1:b6:40:bb:90:97:e8:3c:75:c1:e0:06:
fe:32:40:3c:f1:cd:7c:c0:b1:91:7e:7f:67:46:30:55:25:3e:
d0:d1:8e:0c:7c:3f:61:2a:0c:bb:f5:9c:a8:61:b6:e4:66:50:
a5:b1:66:dd:12:4f:23:84:7d:a5:8c:09:d9:9f:76:6d:1b:98:
27:83:05:08:e4:02:d2:4c:1e:87:d6:b6:58:d9:e3:fc:b1:0d:
d8:b4:ea:27:a1:4b:a7:0a:20:43:c6:2b:72:ea:57:ae:14:82:
a6:81:11:47:a8:28:c3:91:a8:83:6c:bf:64:3f:5e:bc:76:23:
06:5e:1f:5f:d3:47:b0:e6:03:18:b7:ff:82:81:30:05:4b:eb:
0e:23:bc:8f:aa:6e:27:af:2d:15:e7:f2:04:66:70:da:4a:a7:
7f:e8:81:9d:3a:a7:ac:7d:d8:89:8e:b5:41:66:d3:ff:a9:69:
6a:20:ef:44:80:e0:d3:da:2f:e5:93:0e:74:59:af:15:28:27:
df:69:23:f6:48:4b:b9:8d:f5:5c:72:6b:b6:2d:cc:2a:43:87:
7b:ad:13:17:83:10:ad:38:73:6f:de:b2:4f:48:fc:c2:0d:93:
4e:e6:c7:53:5d:15:ad:2a:f7:07:6e:70:ee:78:e2:0b:b0:2a:
2e:68:cb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:27:25 2025 by rpki-client