Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
File: u_pCfUICOv2oiOhBX07c97ffGwU.mft (raw, json)
Hash identifier: GFtwkmM30XAldz/TzQz1WU3PZxY55Q4bv65Wh2ANJZ4=
Subject key identifier: 6A:F0:7A:88:EF:72:FA:73:0C:8A:A7:85:6D:6E:A4:5C:3F:E1:67:A2
Authority key identifier: BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
Certificate issuer: /CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Certificate serial: 01984AE5FEBB2A3C9951C14A786CF62275C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
Manifest number: 0854
Signing time: Sun 27 Jul 2025 08:00:43 +0000
Manifest this update: Sun 27 Jul 2025 08:00:43 +0000
Manifest next update: Mon 28 Jul 2025 08:00:43 +0000
Files and hashes: 1: K2GMWCCFEI_TRfahmMRjDe9YKEI.roa (hash: vdZSYQjeBwZE35DhIdNU+zQ/gO9XDbHhs5nRKTUQzYc=)
2: u_pCfUICOv2oiOhBX07c97ffGwU.crl (hash: pLgvF1FuNLOrxQz5ERfjWakx4Jhn9dP/ehtk5qCvdNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:fe:bb:2a:3c:99:51:c1:4a:78:6c:f6:22:75:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Validity
Not Before: Jul 27 08:00:43 2025 GMT
Not After : Jul 28 08:00:43 2025 GMT
Subject: CN=6af07a88ef72fa730c8aa7856d6ea45c3fe167a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:19:ba:d6:f3:d1:dd:3b:5d:a6:56:41:99:
cb:41:09:47:ff:df:0f:4c:5f:94:c5:45:58:0a:0b:
cc:75:e1:ab:6b:06:04:86:c7:18:55:bb:3d:b8:55:
8a:95:71:c7:0a:4f:c6:e6:b7:85:e4:82:44:06:47:
37:ee:cc:12:bb:20:84:8c:ee:e8:aa:49:3d:81:b4:
ed:af:25:77:3c:3d:6d:fd:8e:a0:74:d2:d9:4b:f3:
93:20:8b:03:33:2a:ff:8e:df:fd:a3:d4:cf:70:50:
c8:9e:11:d1:37:83:40:9b:f9:30:7c:be:d7:87:d8:
8d:38:a7:5b:aa:25:1c:12:35:5a:08:c0:20:71:9b:
b2:0b:01:50:e2:6d:4a:51:21:1f:2b:7a:e8:11:80:
9d:86:33:45:44:38:28:00:8b:6d:76:53:f6:cc:ac:
07:71:3a:1d:87:81:90:53:f5:ce:9d:ba:4c:c9:fb:
84:99:67:28:70:86:0b:ff:f9:64:ba:d0:21:2e:fa:
d1:47:86:12:37:74:3b:82:f0:e3:97:0a:bb:f7:26:
dc:27:4d:89:4c:14:25:20:07:b2:4c:43:79:68:8f:
70:93:35:a2:9e:15:e4:d9:c9:e5:66:f8:32:98:f7:
7e:5b:40:b8:54:94:35:60:27:d5:6b:16:c3:48:ee:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F0:7A:88:EF:72:FA:73:0C:8A:A7:85:6D:6E:A4:5C:3F:E1:67:A2
X509v3 Authority Key Identifier:
keyid:BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a7:e1:01:cd:0a:91:91:2c:e8:3b:30:75:e7:a7:7d:66:9a:
c8:a0:11:fe:e5:07:8f:08:9c:b1:83:e3:23:f8:7f:8e:42:c5:
c6:c7:36:de:f1:2d:99:2f:4f:f7:23:36:91:ae:7c:2b:4a:d9:
dd:de:1c:c6:d1:3f:a5:63:6e:28:73:61:86:1e:9b:e4:d6:ad:
cc:1f:a9:d0:b0:4c:64:f7:aa:86:f2:00:a1:43:0e:69:81:53:
d8:91:f8:b3:e5:ce:74:aa:f5:c4:58:67:ea:02:a1:b8:e0:c8:
58:6b:f0:1c:48:4d:f7:2d:ee:46:49:80:23:1b:58:f5:02:ae:
70:a3:ff:90:23:f7:c0:40:6a:9f:0a:53:4e:9b:97:dd:38:ef:
d0:e9:97:f5:b0:a9:51:66:f8:a2:33:08:6c:ce:1b:01:bb:83:
75:30:d1:ea:c2:0e:ae:22:eb:14:f0:54:a0:cc:ff:06:e1:f8:
94:b2:3a:1e:c3:3b:fa:de:fe:49:75:c3:a1:d4:71:8c:18:29:
00:3a:b6:85:6b:50:bb:1d:f0:06:35:aa:45:b9:76:91:a8:ec:
84:c9:5d:02:32:01:95:c2:f4:03:9b:dc:ba:d7:6b:c5:92:5a:
75:a3:b3:83:87:0a:22:5d:f9:58:7e:5f:71:88:28:6e:50:1c:
3f:87:f3:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5f67KjyZUcFKeGz2InXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmE0MjdkNDIwMjNhZmRhODg4ZTg0MTVmNGVkY2Y3Yjdk
ZjFiMDUwHhcNMjUwNzI3MDgwMDQzWhcNMjUwNzI4MDgwMDQzWjAzMTEwLwYDVQQD
Eyg2YWYwN2E4OGVmNzJmYTczMGM4YWE3ODU2ZDZlYTQ1YzNmZTE2N2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6QZutbz0d07XaZWQZnLQQlH/98P
TF+UxUVYCgvMdeGrawYEhscYVbs9uFWKlXHHCk/G5reF5IJEBkc37swSuyCEjO7o
qkk9gbTtryV3PD1t/Y6gdNLZS/OTIIsDMyr/jt/9o9TPcFDInhHRN4NAm/kwfL7X
h9iNOKdbqiUcEjVaCMAgcZuyCwFQ4m1KUSEfK3roEYCdhjNFRDgoAIttdlP2zKwH
cTodh4GQU/XOnbpMyfuEmWcocIYL//lkutAhLvrRR4YSN3Q7gvDjlwq79ybcJ02J
TBQlIAeyTEN5aI9wkzWinhXk2cnlZvgymPd+W0C4VJQ1YCfVaxbDSO7AlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrweojvcvpzDIqnhW1upFw/4WeiMB8GA1UdIwQY
MBaAFLv6Qn1CAjr9qIjoQV9O3Pe33xsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YTc5YTEtM2QxOS00ZGU0LWJlODkt
OGEyMDA2OTFmNzI0LzEvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80YTc5YTEtM2QxOS00ZGU0LWJlODktOGEyMDA2OTFmNzI0
LzEvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApafhAc0K
kZEs6DswdeenfWaayKAR/uUHjwicsYPjI/h/jkLFxsc23vEtmS9P9yM2ka58K0rZ
3d4cxtE/pWNuKHNhhh6b5NatzB+p0LBMZPeqhvIAoUMOaYFT2JH4s+XOdKr1xFhn
6gKhuODIWGvwHEhN9y3uRkmAIxtY9QKucKP/kCP3wEBqnwpTTpuX3Tjv0OmX9bCp
UWb4ojMIbM4bAbuDdTDR6sIOriLrFPBUoMz/BuH4lLI6HsM7+t7+SXXDodRxjBgp
ADq2hWtQux3wBjWqRbl2kajshMldAjIBlcL0A5vcutdrxZJadaOzg4cKIl35WH5f
cYgoblAcP4fz2Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:25:08 2025 by rpki-client