Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
File: UFrRf0xiDVjUU9X218kjP84SZJk.mft (raw, json)
Hash identifier: 4TZ5flfCEIMbP5gA3uxwdZEis44pVKbv0niOAvK/e34=
Subject key identifier: BB:75:D7:BF:C4:BB:D8:46:72:B6:16:3A:D5:5D:FC:35:5A:6C:98:D7
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 0198534494C7C82BB08AEE450743D3349952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
Manifest number: 0690
Signing time: Mon 28 Jul 2025 23:01:00 +0000
Manifest this update: Mon 28 Jul 2025 23:01:00 +0000
Manifest next update: Tue 29 Jul 2025 23:01:00 +0000
Files and hashes: 1: UFrRf0xiDVjUU9X218kjP84SZJk.crl (hash: 098Prjp79IxOZhYKT+OWCdyMF8wuNG0d7l7QWDIxY54=)
2: z0gK7j1eTNv7dmhYM5fYU83PlcI.roa (hash: F9PSIbqhKjRh7i/sDNMQoDtTGb+P8gRfs9+wZwKnUuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:94:c7:c8:2b:b0:8a:ee:45:07:43:d3:34:99:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: Jul 28 23:01:00 2025 GMT
Not After : Jul 29 23:01:00 2025 GMT
Subject: CN=bb75d7bfc4bbd84672b6163ad55dfc355a6c98d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d8:3c:36:a0:22:8d:39:c6:8a:64:32:6d:57:
cf:6a:94:fd:22:08:f9:af:40:4b:b6:55:50:30:95:
7f:4a:7b:a9:19:6b:71:76:bb:2f:1e:a2:a0:55:c9:
b1:b5:ef:f6:ab:a7:ad:df:d2:57:1e:3f:2e:da:9a:
53:54:8f:6b:70:0d:27:be:52:60:c0:a8:e8:98:bb:
77:95:b2:c9:a4:e1:87:12:94:d0:f1:d1:e3:50:e8:
5a:48:a1:94:65:05:d7:5b:92:16:79:60:c4:2d:c7:
dd:4b:d1:b4:34:5d:0e:d6:79:2e:59:02:bf:e8:1d:
35:73:05:80:ef:f2:a0:00:93:14:ec:2d:3e:b2:5b:
40:62:7e:af:5d:20:ed:4b:f1:fe:f0:23:e0:78:b2:
9a:0f:65:3a:5b:88:67:15:8b:f4:87:fa:7c:87:5d:
73:28:5c:de:59:45:72:dc:b4:d1:b8:42:f7:14:76:
25:0b:fd:17:8c:11:f2:74:4e:8e:57:6a:67:b9:a7:
7f:b2:26:c5:b4:88:7e:40:fa:44:e9:3b:12:bc:53:
94:cf:b8:cd:85:23:bc:64:4a:4b:c4:38:05:30:94:
92:2c:43:1c:bb:e4:c6:9a:15:37:da:c6:6e:3e:41:
95:f4:12:37:de:6d:e6:2c:e8:f4:8c:ec:58:84:9d:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:75:D7:BF:C4:BB:D8:46:72:B6:16:3A:D5:5D:FC:35:5A:6C:98:D7
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:db:35:d6:41:d6:6e:2b:29:14:60:9b:da:3b:01:d4:35:af:
0a:37:d8:2b:56:b8:2b:4b:5b:7c:43:fd:7a:fc:bc:f5:9f:a7:
bc:60:d4:54:25:ed:a7:f7:1c:1c:2f:22:7c:f0:e0:93:57:07:
d9:6a:fc:67:8e:d6:78:88:b6:8f:f6:50:33:df:fb:81:df:21:
ce:1b:64:90:ec:d6:c4:1d:55:57:b2:de:da:d2:fc:4f:a8:53:
bf:14:ca:45:a6:12:24:0e:c0:59:ab:8a:c3:a4:e8:e6:ba:6a:
5c:ae:bc:f4:3c:9f:32:a7:8e:66:18:36:f3:68:01:a9:10:d2:
70:29:a8:56:7b:9b:66:0b:d8:9d:f7:3b:79:32:f6:a9:08:f3:
58:e9:62:41:b0:74:b1:e9:45:e1:d4:f5:45:68:f4:c4:b3:0a:
a8:98:3f:b4:a8:67:43:f3:d0:c3:88:de:30:aa:fd:2c:f6:5e:
39:b3:b6:35:be:ea:a1:8d:1d:5e:78:9a:6a:0d:7a:db:c0:80:
67:c1:1f:d1:21:83:19:f0:e8:83:bf:c0:30:c9:0e:0e:63:f3:
93:5f:0d:22:54:21:42:11:56:84:2b:8e:60:19:54:f3:25:aa:
3e:fc:24:56:79:c8:dc:fc:cf:7d:38:1b:e6:0e:20:07:a3:7b:
a5:17:f7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:33:21 2025 by rpki-client