Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: vSmVdXTOiQ/5M0KCJ6JmWUkli76L437dcCd256sqLXQ=
Subject key identifier: 53:53:71:4B:F5:B5:65:8C:4A:DB:DB:41:1A:23:B3:3A:71:C3:0E:87
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 01984A09DB9286BA1DC234EE1B853C9435B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 137A
Signing time: Sun 27 Jul 2025 04:00:16 +0000
Manifest this update: Sun 27 Jul 2025 04:00:16 +0000
Manifest next update: Mon 28 Jul 2025 04:00:16 +0000
Files and hashes: 1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: VGbnSHx3DPCP+OfsQ95vvN1IZyT/cGS3zh3cSqMKQY4=)
3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:db:92:86:ba:1d:c2:34:ee:1b:85:3c:94:35:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Jul 27 04:00:16 2025 GMT
Not After : Jul 28 04:00:16 2025 GMT
Subject: CN=5353714bf5b5658c4adbdb411a23b33a71c30e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:e1:e6:c4:f2:ef:11:6d:52:02:2c:f4:4a:
5e:37:64:ea:56:7b:1e:d2:e9:ad:8f:70:56:03:1f:
da:e1:e1:00:59:a1:b9:44:de:23:30:d4:dd:7a:e7:
d7:1e:36:0b:6d:0e:61:f4:6d:8f:6e:1c:32:21:6a:
5a:09:0e:5a:c1:3c:20:cf:3c:1f:29:9c:1c:3c:b1:
05:62:59:d5:2f:4b:6a:54:31:36:ed:01:44:11:e9:
a1:64:4c:d6:de:ff:12:62:ed:6a:9b:33:ca:cc:6d:
09:07:a2:6b:e3:27:97:2c:62:ac:a6:0b:1a:38:7f:
b9:97:96:bb:ab:9e:18:0d:ea:52:10:ff:2c:cd:b3:
4e:86:b3:3a:77:88:36:d6:da:ed:ed:49:c9:01:e2:
97:b7:bf:4c:57:20:0f:c0:d9:0c:a1:89:51:12:d1:
65:10:2e:24:86:08:b8:3a:95:ed:bb:22:8e:d5:fb:
bb:c2:6c:2e:e2:e9:47:25:71:d2:df:e3:98:d5:f0:
6c:6d:67:0e:dc:20:5b:53:9a:69:b8:7f:b1:2b:33:
06:39:43:c2:df:02:04:82:5c:85:2f:49:d4:98:7f:
76:cf:6e:2b:73:6c:03:e3:53:e2:a0:33:e8:ad:26:
ef:d1:75:fd:6b:e6:a1:52:03:09:1b:c8:28:ff:fb:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:53:71:4B:F5:B5:65:8C:4A:DB:DB:41:1A:23:B3:3A:71:C3:0E:87
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:aa:b2:6b:38:29:8f:3b:d6:d9:01:5e:ec:f2:9c:3d:62:83:
8e:d1:b8:6d:af:56:34:15:2f:1d:32:e2:6f:5e:81:ef:4b:03:
be:51:b0:c4:72:f5:3a:2f:11:02:71:3c:5b:bc:9f:ce:53:c8:
a0:be:9d:5d:df:ea:bc:0b:1a:7b:ed:47:11:f9:13:e1:9e:95:
7d:b6:49:bd:f3:04:cc:a2:00:35:66:3c:b3:ba:63:e3:bc:c4:
a5:c8:e5:47:d2:e9:37:f2:73:45:c2:36:76:52:e6:dc:b7:d2:
d6:9b:c2:ca:e1:1d:61:cb:e5:04:50:6a:67:50:05:78:40:55:
ce:af:aa:57:ec:ea:52:61:a0:79:af:4d:0f:f4:2a:86:ec:94:
68:53:5d:53:bc:33:fc:07:99:2e:9e:37:64:3b:2d:0b:f8:aa:
5b:ad:42:f0:4f:f3:78:e3:ce:f6:cc:8d:29:76:d1:13:34:01:
e1:d8:90:6b:eb:18:5c:aa:de:a1:bc:fa:98:37:bc:7a:82:f2:
e1:8f:c7:c3:a2:d9:1d:27:cf:66:69:0a:cd:15:52:85:00:72:
f7:c1:9d:0c:2b:57:f0:b6:f0:3a:d7:99:0c:90:34:0c:42:d9:
3f:aa:22:af:90:86:b8:e8:8f:cb:6e:48:3d:b7:ef:66:4c:9f:
cf:c2:65:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:56:36 2025 by rpki-client