Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft
File: ufurlhxKPhbNdhvC_tuaKBd8tHM.mft (raw, json)
Hash identifier: cGETMh8cUJI4upjEhJ0kB11z0ckgRzooAoQkcnLjWk4=
Subject key identifier: 69:AD:DB:2F:4C:80:2D:F9:89:FB:9C:3F:80:CC:41:3F:1A:A0:86:B6
Authority key identifier: B9:FB:AB:96:1C:4A:3E:16:CD:76:1B:C2:FE:DB:9A:28:17:7C:B4:73
Certificate issuer: /CN=b9fbab961c4a3e16cd761bc2fedb9a28177cb473
Certificate serial: 019848F717921EACAE385C16E2C7866A92CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft
Manifest number: 86
Signing time: Sat 26 Jul 2025 23:00:09 +0000
Manifest this update: Sat 26 Jul 2025 23:00:09 +0000
Manifest next update: Sun 27 Jul 2025 23:00:09 +0000
Files and hashes: 1: h4uw6ufwFOQi4mDrtcZ6XaqmPV0.roa (hash: h3p/LWTg/DWcs8xgDXGpmbcqHQbGvNr+C69wyUtdibA=)
2: ufurlhxKPhbNdhvC_tuaKBd8tHM.crl (hash: aMJSPX5WoO7JQqkdpzMVmp8svfgR17Kh4Rd+pQBAzhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:17:92:1e:ac:ae:38:5c:16:e2:c7:86:6a:92:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9fbab961c4a3e16cd761bc2fedb9a28177cb473
Validity
Not Before: Jul 26 23:00:09 2025 GMT
Not After : Jul 27 23:00:09 2025 GMT
Subject: CN=69addb2f4c802df989fb9c3f80cc413f1aa086b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:2a:c7:46:65:d5:55:11:3c:04:c7:f2:3f:
af:48:73:23:ee:81:44:0d:1d:c4:a7:b6:4f:bb:da:
15:72:24:db:0b:9d:34:b6:31:e3:31:bf:16:a6:5a:
00:bc:67:d1:26:2a:ad:20:4a:ed:14:51:5d:c6:2d:
29:87:ca:ad:ce:62:d2:e6:81:57:bd:8a:be:4a:e1:
50:61:50:69:8d:bf:a8:b7:bd:dc:ce:ac:e2:e6:8f:
90:5c:ec:2f:e5:5b:88:c7:c3:95:36:93:b1:d5:42:
31:df:38:88:c3:a8:73:e6:fe:33:f7:7a:6e:58:36:
4f:74:36:82:95:d2:3a:45:e5:b3:2d:fb:2d:28:22:
3a:b4:d3:5a:42:87:f7:e0:68:82:00:04:bc:39:3c:
f7:65:84:8f:5b:83:d7:47:5a:00:05:d7:15:f3:42:
d2:8f:92:dc:5d:c5:f7:71:d8:2e:e0:a6:2d:06:15:
98:b6:77:70:3e:46:b2:8f:7b:43:80:24:44:92:77:
d8:3f:a6:3a:8e:c9:64:5a:7a:5d:75:9a:8a:c2:93:
2d:02:dc:df:5d:d7:af:8e:51:f9:8e:3d:af:6d:7f:
9f:1f:82:56:1d:71:b8:90:57:d5:02:f6:47:73:e3:
2a:6c:b4:97:9e:5b:9b:86:e1:78:fb:00:32:a1:61:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AD:DB:2F:4C:80:2D:F9:89:FB:9C:3F:80:CC:41:3F:1A:A0:86:B6
X509v3 Authority Key Identifier:
keyid:B9:FB:AB:96:1C:4A:3E:16:CD:76:1B:C2:FE:DB:9A:28:17:7C:B4:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:09:76:99:68:df:b4:9d:68:4a:7c:ac:60:dc:2f:49:b9:18:
bb:77:76:a7:41:cd:c3:a4:b7:62:ea:f7:c1:02:63:6f:4c:10:
28:07:6a:c9:91:88:b0:45:3b:b1:84:ef:ba:80:d5:24:b6:16:
b7:9f:70:f8:f1:68:1b:3b:e9:08:2e:2e:ff:98:e9:41:32:76:
8c:31:c2:32:da:25:c3:18:4e:1f:77:e7:b3:0e:07:e0:fd:df:
4f:17:9e:d6:37:7a:c1:42:f6:80:1f:89:dc:42:b1:19:63:e3:
7c:56:90:4e:16:dd:a3:8f:cd:ee:22:5d:65:c8:47:4a:bd:61:
3c:e3:d9:78:59:1d:70:32:26:6b:a1:43:03:c8:03:52:7a:8b:
19:bc:72:9e:73:97:b4:ab:d3:5e:6b:5d:85:59:6d:bc:a5:28:
e3:4c:9f:6b:46:85:41:98:44:05:3d:de:1e:37:fb:b7:fe:19:
42:2e:19:ea:ba:9e:41:2f:b1:92:9c:64:0c:db:a2:c9:a7:dd:
43:f1:4d:a5:5c:79:85:95:2a:6b:90:db:01:bc:90:f3:7d:4c:
c2:b1:f8:27:c4:b5:18:30:a1:5d:3e:b2:ca:f6:8b:f3:6d:8d:
30:fd:e3:f5:78:72:87:d2:47:6b:9a:86:ef:ea:a0:ce:96:2d:
38:8a:5f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:15:16 2025 by rpki-client