Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: y5ej2vXreWY+00qtu4WeIgdHWz3IkvYhSwgbZLavmeY=
Subject key identifier: 32:C4:B1:60:41:B0:B0:1D:FA:8B:61:7B:76:7E:A0:8D:9C:39:8F:69
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 019847AD81AFB9C253535A4C6D4AEAA0BE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 17:00:09 +0000
Manifest this update: Sat 26 Jul 2025 17:00:09 +0000
Manifest next update: Sun 27 Jul 2025 17:00:09 +0000
Files and hashes: 1: 0iqw0_DRAXXz4sreW3NPTcIykK8.roa (hash: upy176yocnlw3ZFcrVK6vEr280ZPGUhzh/TpTxnYSg8=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: U4lFu8GgojDpRdZ+pLlhpTHqQBU6kwrOg4c7C0gbJA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:81:af:b9:c2:53:53:5a:4c:6d:4a:ea:a0:be:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Jul 26 17:00:09 2025 GMT
Not After : Jul 27 17:00:09 2025 GMT
Subject: CN=32c4b16041b0b01dfa8b617b767ea08d9c398f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:3a:73:e4:d9:c3:8c:e7:03:7b:0c:f9:bb:
f3:2d:5f:e6:b9:c9:20:73:c6:a5:25:1b:4a:29:2f:
ad:0e:b2:d6:ab:84:89:a2:2b:76:f0:78:06:6e:41:
62:ad:7b:4e:53:87:a7:ec:22:a6:7b:e0:98:c9:e1:
2c:a9:fb:23:6d:88:55:7c:d3:80:d8:fa:17:54:94:
b1:7c:87:53:7a:f5:b8:65:b7:b4:0c:4f:89:81:cf:
15:d8:31:5d:83:77:f0:6e:e4:92:b0:d5:69:36:9b:
8b:b2:fa:7c:22:1a:44:ae:18:c0:c1:aa:ab:7b:25:
68:86:d7:ac:8b:fb:4a:63:40:4d:01:78:4c:45:0c:
2f:e7:1f:38:5d:f1:36:65:de:e0:ed:50:a3:81:55:
01:89:74:15:a9:66:79:ca:6f:ff:55:19:30:d5:7b:
95:ab:83:a0:12:d6:4c:2a:18:27:31:4d:0b:d9:3b:
a2:9b:45:f0:6a:f4:d6:65:49:39:6e:6d:3e:70:ab:
23:c3:d9:3c:63:fe:ce:e8:f7:9f:13:7e:40:a4:e9:
dd:b4:d0:9e:39:04:2f:b2:8f:4c:37:48:04:49:26:
07:1c:99:7a:6f:26:28:32:6b:a3:9c:c8:97:2e:c4:
bd:bb:08:b9:fb:d1:2f:ba:f6:64:26:86:bb:19:16:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C4:B1:60:41:B0:B0:1D:FA:8B:61:7B:76:7E:A0:8D:9C:39:8F:69
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5a:b5:7e:dd:ec:ff:88:1e:b9:ee:8b:d6:ea:aa:1d:26:a0:
1d:bd:88:ff:48:49:76:84:a6:69:0c:62:b0:6d:e5:0c:3a:ee:
d3:48:67:60:a7:11:8a:31:b0:30:ec:99:c1:79:8e:fa:9e:e8:
77:10:c3:b1:d1:61:ed:36:27:52:54:0d:f4:0c:9c:cd:ff:aa:
e9:bd:b5:b1:90:f5:2c:69:b1:c4:34:50:b2:f5:88:a4:cf:38:
4c:95:cb:c6:d5:32:57:e8:af:24:74:f8:18:04:d2:bb:9b:59:
54:f5:1e:a8:36:76:17:e5:3e:ac:06:c4:94:51:2b:78:86:b8:
f7:82:98:d2:ad:59:f9:76:09:13:2c:92:b3:f6:6d:8e:22:01:
ec:8d:e2:84:a7:b5:2c:58:49:d5:eb:da:c7:a5:78:95:fc:de:
0b:4c:42:ec:7b:8c:5c:79:f1:48:2e:2a:d2:b8:95:8f:39:73:
b4:96:d3:73:86:d3:e8:12:93:8a:24:fa:6c:c6:a9:2e:be:7a:
13:63:24:4e:6c:14:49:8f:de:28:ba:61:11:88:4d:d0:90:0c:
b8:60:c0:73:e9:f9:02:26:3a:60:4f:72:8a:03:65:17:c2:0c:
84:62:82:20:5d:1b:9e:cd:c2:f3:cf:4f:64:51:ef:57:b1:7b:
06:6b:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:29:32 2025 by rpki-client