Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: 6GkXG7tGE8gau1e6uR7i9mdvXo2Q37xHdDfcbQRH3Zo=
Subject key identifier: F1:7E:B6:9E:31:AF:3E:F7:CF:40:A9:FB:F9:07:40:D7:52:8A:F7:AE
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 019848C0D772794A6D6E4F86134E641C7303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 03B0
Signing time: Sat 26 Jul 2025 22:00:54 +0000
Manifest this update: Sat 26 Jul 2025 22:00:54 +0000
Manifest next update: Sun 27 Jul 2025 22:00:54 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: bwzFI7pQCsClUxvYhj9fYGycnOUk3hTkMV5PP/gjfsQ=)
2: tuLehSOy-qAFQeskzDC9g5qQP28.roa (hash: PI1JhY3WzMR4z9FpYAEO5831pX148zh5gBmaERfINeo=)
3: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (hash: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:d7:72:79:4a:6d:6e:4f:86:13:4e:64:1c:73:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Jul 26 22:00:54 2025 GMT
Not After : Jul 27 22:00:54 2025 GMT
Subject: CN=f17eb69e31af3ef7cf40a9fbf90740d7528af7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:5e:c2:fa:06:38:6b:f5:a4:1e:bf:12:96:
02:ea:bd:91:ca:e7:c3:5b:1f:b8:84:ad:c7:de:91:
4c:14:61:c1:81:ed:3e:be:ee:f0:3e:71:f5:f5:18:
d9:a2:48:15:65:13:35:1d:5f:6a:c3:c2:81:d5:24:
3f:a4:13:3b:0d:78:ee:b0:d1:f7:a2:d5:ba:6d:8f:
ce:44:45:47:0b:db:36:1c:2e:4e:ee:ba:dd:61:4e:
a4:7a:b3:ee:29:77:f3:b6:5b:05:dc:84:b8:7d:b5:
45:6d:95:d1:86:d3:44:89:92:02:e7:92:e7:5e:32:
b8:6c:fc:cf:92:99:b5:24:3a:33:18:aa:14:6c:2d:
f8:f0:f0:30:75:a2:6c:a3:f1:3a:e7:c7:d6:9d:dd:
5e:62:13:96:f7:ca:05:e6:f6:a4:a6:dc:c3:3a:74:
53:fc:1e:0c:79:f8:d2:52:6f:aa:1c:b1:bc:cb:1b:
88:86:d5:11:dc:18:cf:73:bd:a5:3c:94:8a:fc:ee:
4f:fc:52:ef:3e:4f:66:32:ad:75:00:fc:8e:aa:41:
eb:c9:0a:6d:53:86:47:67:40:19:d6:21:f5:64:c7:
15:0e:70:00:5f:f6:2e:7b:4c:36:46:53:43:b8:69:
b0:17:c1:a4:44:a9:85:ce:db:34:73:91:75:97:69:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7E:B6:9E:31:AF:3E:F7:CF:40:A9:FB:F9:07:40:D7:52:8A:F7:AE
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4d:ba:7e:75:65:98:c7:4b:b9:1e:47:c7:90:b3:f7:66:62:
f9:2e:82:c7:ed:9e:17:c5:8c:77:04:6d:33:fa:e8:fd:0d:c8:
96:bd:7c:5f:eb:4a:58:09:ee:c6:07:f3:96:48:44:f0:db:4b:
ba:52:4a:d9:a2:f8:bb:3a:49:b6:51:0a:a5:42:c4:82:ac:72:
18:7f:88:8f:ad:35:d5:95:fc:3a:91:c0:46:67:e7:e2:60:f6:
c6:48:8a:fd:87:e3:63:27:3e:c1:46:55:cb:e2:73:ac:0e:d0:
a7:bd:e6:84:73:34:4a:21:3d:38:e7:d7:42:7d:75:ba:ca:9d:
1e:af:00:b2:0d:56:6b:61:b8:e6:de:a6:14:5e:67:af:d2:a4:
80:ee:04:29:8b:5f:ab:1b:16:0f:c2:00:12:0d:5c:ae:1f:80:
67:71:a5:a3:18:af:8a:f9:85:1a:c7:af:7c:2b:36:64:d4:c8:
27:a5:2a:db:8d:51:d8:f2:7c:b0:53:17:2d:7c:71:0b:22:86:
90:9d:bc:38:4e:22:8e:54:b8:50:4e:0b:b6:cb:fd:b2:b3:77:
f3:b9:ba:53:0f:d3:63:a7:6d:31:48:0d:40:09:d0:4e:8e:45:
0b:03:c2:eb:6d:97:a3:fe:d8:d5:39:94:55:91:17:e0:79:2b:
60:b6:de:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:53:26 2025 by rpki-client