Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
File: ufdKR6bRoL9MIW5fq02R-xKd89Y.mft (raw, json)
Hash identifier: 3V73twG2iwsfJUNkdEsl7KwB00xE/3R+1BDMbkO9gMk=
Subject key identifier: F2:AB:C4:D5:C2:D5:5A:7B:B7:DF:E6:92:F7:31:EF:FA:AE:44:A4:6C
Authority key identifier: B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
Certificate issuer: /CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Certificate serial: 019845882751D0E817C5D5D4C229ACE5F5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
Manifest number: 0B35
Signing time: Sat 26 Jul 2025 07:00:07 +0000
Manifest this update: Sat 26 Jul 2025 07:00:07 +0000
Manifest next update: Sun 27 Jul 2025 07:00:07 +0000
Files and hashes: 1: 5AZ3tR0kmtggSX8GQL0nk_9vkNM.roa (hash: o7jn9b/bWLBA/ntIWwkYzFbMhpkdc8Mhco9rAn9gsO0=)
2: ufdKR6bRoL9MIW5fq02R-xKd89Y.crl (hash: GxwKUjZFXAU9t4p9aVPFOVhqUK7mWJeLGksnz0m0N5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:27:51:d0:e8:17:c5:d5:d4:c2:29:ac:e5:f5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Validity
Not Before: Jul 26 07:00:07 2025 GMT
Not After : Jul 27 07:00:07 2025 GMT
Subject: CN=f2abc4d5c2d55a7bb7dfe692f731effaae44a46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:ac:95:41:dc:e8:ec:83:b5:67:29:3f:f9:
93:28:b0:ff:02:bb:e4:11:be:97:ea:c7:84:73:f2:
57:a9:f7:c3:1e:46:cf:c6:65:90:38:8a:3f:b3:41:
04:a4:f8:b5:1a:3f:83:64:1b:87:4d:ba:8d:31:25:
61:9b:e7:c1:1b:1b:47:84:08:5d:17:43:e2:54:a3:
3a:81:42:95:24:39:ae:03:8b:9d:5f:4c:50:04:3c:
91:14:35:fc:c3:13:79:14:4b:2d:42:83:01:3d:fe:
9d:b6:58:06:82:7b:d8:7e:d3:fe:b0:33:71:66:15:
75:20:9b:f4:4a:96:03:12:31:76:58:9a:b6:56:06:
90:1b:2f:51:e3:24:bc:1b:e5:f8:ce:b7:92:00:b2:
8c:be:43:e2:cf:45:73:37:39:a0:f1:a7:b5:f0:5b:
98:78:50:59:0d:96:c2:fd:06:33:64:05:ed:fb:f2:
64:94:75:1a:bc:7b:13:3b:e3:39:55:38:a1:e3:61:
17:03:7c:c8:a7:a5:77:ec:c6:45:00:35:41:ad:22:
20:b2:33:3b:b3:5f:c0:0a:c8:21:29:b5:1d:b2:ce:
b2:f0:b4:40:40:42:11:a0:06:d2:31:8a:4b:18:5f:
1f:83:81:34:d4:7d:0e:ae:4d:eb:70:ba:7a:af:f7:
9a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AB:C4:D5:C2:D5:5A:7B:B7:DF:E6:92:F7:31:EF:FA:AE:44:A4:6C
X509v3 Authority Key Identifier:
keyid:B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1c:df:47:72:fa:1d:dd:56:22:d9:b4:bb:af:27:b0:7c:b8:
9d:31:02:e3:24:ea:19:f8:cf:40:28:26:0b:ce:db:3b:d2:7a:
d4:81:cf:75:6a:b1:23:e0:e5:aa:fa:52:57:2f:d1:9f:8c:df:
6a:40:4b:09:01:9f:fb:cf:96:1a:42:b9:9c:c2:38:11:b1:40:
fb:86:21:6e:28:93:70:ce:7c:0e:10:f2:84:ab:46:04:02:32:
61:cd:cd:bb:1b:dc:d4:9e:6c:ca:a7:01:54:e4:84:fa:59:22:
90:4a:66:54:02:f8:85:a2:7c:07:f9:76:6f:3f:27:93:e4:65:
75:94:ec:b4:79:a2:13:16:19:6c:b4:f4:c7:f8:f0:88:ac:3b:
6e:21:dc:7a:3c:34:b2:aa:ea:ef:38:24:dc:18:87:4c:1f:d4:
8d:f8:60:7f:21:41:4c:ce:dd:1f:7e:35:43:5d:f3:49:b2:5f:
3b:45:d8:9d:d3:fd:21:81:36:55:4c:76:eb:84:28:00:62:6d:
62:c7:d1:23:a6:ea:40:11:4f:7f:de:ca:8a:fb:d2:74:78:df:
23:12:a1:55:f4:5c:7b:a7:9c:43:c2:be:a5:ad:1a:ae:42:8e:
23:1c:50:00:63:15:d6:33:fe:f0:89:0b:cd:6b:1f:c9:b1:71:
dc:7e:07:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:58:16 2025 by rpki-client