Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
File: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft (raw, json)
Hash identifier: jtxOoTYSzdnZBQhVnHDmbvr+8QSons4njNguyJ2wrhM=
Subject key identifier: 89:9D:68:C8:CD:7D:7E:D2:8C:F4:D3:E7:6C:FB:75:91:CA:66:8B:31
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial: 019847E4E3F3CB1D60D8BCFDE86C3AE435D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
Manifest number: 15F5
Signing time: Sat 26 Jul 2025 18:00:39 +0000
Manifest this update: Sat 26 Jul 2025 18:00:39 +0000
Manifest next update: Sun 27 Jul 2025 18:00:39 +0000
Files and hashes: 1: 1-qC_h0BMH68nwZM--m9RrJPfUSU.roa (hash: dGjZPTTJM5HpRM58D6GZPV5SzYmb4kq7Kyp7lE449Zo=)
2: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl (hash: X12pGZhiJu5HUhZgHbflUB+VEdX18PZI9u7cjVSqFGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:e3:f3:cb:1d:60:d8:bc:fd:e8:6c:3a:e4:35:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
Validity
Not Before: Jul 26 18:00:39 2025 GMT
Not After : Jul 27 18:00:39 2025 GMT
Subject: CN=899d68c8cd7d7ed28cf4d3e76cfb7591ca668b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:a3:1f:f2:ff:81:7b:2d:2f:eb:3f:98:be:
86:d7:c1:50:61:5c:0c:2b:61:12:bd:6a:01:33:8a:
72:31:c8:27:02:c3:16:a6:88:13:5c:04:ad:cc:f6:
66:69:4a:7f:77:b1:cb:7a:05:ff:5c:22:84:70:10:
2e:57:47:6b:19:12:62:08:dc:a9:41:25:19:f2:80:
b2:43:06:4b:43:8a:59:07:4c:e6:b3:d0:12:21:6f:
79:d1:8f:8c:6d:2a:5d:95:f8:f3:4f:71:14:92:b3:
af:c6:64:d0:ec:f1:6f:f8:5d:f3:e6:ba:0f:9c:d7:
e5:9c:cf:e5:d3:ff:cb:1c:ba:0b:ce:00:b3:0a:59:
48:6d:36:c2:6f:45:f7:1b:e2:fe:8d:5b:e9:1b:11:
af:7f:45:3b:a6:71:54:e2:b5:a1:f5:e3:6f:bc:0e:
76:bd:d6:48:50:4f:a1:0b:4b:08:8c:ac:74:ec:8b:
fc:40:17:70:98:80:8d:b5:a0:be:3c:a5:b1:64:e6:
f6:92:1c:ef:27:2d:46:f0:f9:a4:35:a2:ab:b4:fc:
4a:97:c9:db:35:cf:04:5b:ec:49:24:02:17:47:69:
b5:a0:4b:35:ca:2a:96:93:36:4d:ad:a0:86:3a:4f:
c0:72:21:34:6c:62:45:d1:86:b9:fd:91:7a:c0:4e:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9D:68:C8:CD:7D:7E:D2:8C:F4:D3:E7:6C:FB:75:91:CA:66:8B:31
X509v3 Authority Key Identifier:
keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:39:aa:d8:c9:72:ff:70:0e:ca:a4:c6:4f:e6:a5:c2:30:be:
a5:50:ca:ca:d7:56:23:77:ac:31:a0:f1:40:eb:cd:55:f5:72:
c4:e8:d2:f4:16:66:24:b0:d0:19:e7:6f:30:f8:96:75:07:01:
a1:5d:87:56:df:fd:65:73:e6:7e:57:81:44:90:ee:cf:e7:45:
eb:10:60:81:68:19:a8:66:b7:6a:d1:4b:4d:0d:86:ba:b4:36:
2b:08:9f:51:0d:df:1d:ef:59:26:b2:e8:10:51:6a:4d:71:e1:
28:a1:d9:fe:7f:82:68:15:e8:c7:24:ff:15:77:ea:88:b0:fd:
03:a2:2a:0e:d6:7c:03:2c:1d:67:30:ee:88:ba:b6:10:72:c4:
9b:c9:87:16:cb:76:7e:f9:f5:e8:ab:cf:be:7d:f0:91:d3:7e:
34:e8:c3:70:d4:0c:be:7b:71:9b:8d:6a:21:69:4d:de:b9:f2:
b6:b9:11:59:b7:a2:56:61:19:4e:97:cd:7b:43:35:86:c5:c3:
e5:14:9e:3a:a3:07:55:d7:ad:a5:c6:5f:9a:07:33:76:35:f8:
46:be:01:8b:b6:54:e0:5f:54:fb:cb:e5:b5:21:92:93:31:de:
8a:50:be:9a:e9:7e:a2:3c:4a:02:e0:3c:e2:92:14:d5:7c:65:
29:68:85:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:54:27 2025 by rpki-client