Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: KycqnB+EhNIHwRsCbLNyTLcvqHzQjYG1H7waYevoZxg=
Subject key identifier: BE:F4:1A:B7:09:A8:48:39:E2:4C:D2:D9:EB:37:EF:35:00:2A:95:29
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 019921E785B245EF8686686062D923F5F1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 02:00:45 +0000
Manifest this update: Sun 07 Sep 2025 02:00:45 +0000
Manifest next update: Mon 08 Sep 2025 02:00:45 +0000
Files and hashes: 1: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (hash: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=)
2: PbHlg7ScZeHhyNVnOAfVfDkj0UQ.roa (hash: cTb4Y7y4+1yzCxetjTY01rGPBaGcJj2ddHFrkZyJApU=)
3: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: XyU2awmR18yOjyRwPX92pEramYqanU9zD3ff4fZJpDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:85:b2:45:ef:86:86:68:60:62:d9:23:f5:f1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Sep 7 02:00:45 2025 GMT
Not After : Sep 8 02:00:45 2025 GMT
Subject: CN=bef41ab709a84839e24cd2d9eb37ef35002a9529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:f2:38:e4:ac:03:5d:4d:31:e6:48:79:52:
de:71:79:6a:52:43:e9:c2:1e:c6:13:30:56:c4:dc:
c7:28:64:54:9e:9e:7b:9a:79:f3:34:ad:f8:26:6f:
24:0e:6e:d4:99:8a:8e:95:c3:48:e9:3f:08:76:cd:
07:f2:9c:ec:5d:62:e7:a1:5f:3e:49:57:07:ea:e0:
54:6c:d9:b9:0d:a5:c3:fd:f4:92:ff:af:5b:7a:47:
f4:18:62:57:5c:76:99:57:18:ae:11:b2:16:ce:bc:
0d:c5:42:c8:a4:d4:61:37:d4:22:a9:cd:5a:11:c8:
50:14:df:c3:af:c3:19:45:ef:f9:48:60:ab:3f:a3:
b5:69:17:f6:bb:9c:75:9e:67:e3:a7:ff:f6:03:3e:
cd:87:d5:86:8f:8a:b7:43:be:8d:f7:0f:44:e1:d9:
34:12:fc:d5:be:25:7c:5b:b7:39:87:41:76:06:9b:
a0:a0:a8:2a:ff:06:b7:82:e2:00:ad:be:f3:f0:27:
0d:db:a6:81:f3:c7:6f:ae:c3:1e:80:a8:02:63:e7:
98:38:b3:71:c0:70:2f:3f:e6:fe:7b:70:fc:75:3c:
44:2f:3f:59:1e:da:70:00:13:5e:46:72:fc:83:db:
18:5b:ac:9d:34:94:c6:f4:fa:fa:fc:dc:12:e2:0b:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F4:1A:B7:09:A8:48:39:E2:4C:D2:D9:EB:37:EF:35:00:2A:95:29
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:15:fa:f4:1e:8d:b3:0d:4a:a3:10:25:b1:a4:00:13:0a:54:
72:ad:92:92:ff:84:23:20:d6:25:62:cc:56:a9:b2:84:34:c3:
c7:86:78:aa:a2:f1:b3:31:70:d2:21:f6:23:3a:93:b4:8c:4e:
25:52:12:12:c7:86:c0:ba:f0:43:7a:7c:0c:43:96:69:0d:e2:
6f:28:68:68:a3:ff:83:ea:0a:80:74:2b:f2:b9:ca:63:b0:5f:
61:8d:35:a9:b5:4e:8e:cd:16:d0:e0:0d:9c:10:d2:ea:5f:78:
31:e9:0d:c2:76:d4:b2:6f:ab:2f:ad:c6:0c:2d:94:03:13:8b:
5b:ee:29:4c:79:f8:49:49:79:85:d0:a8:48:6c:05:94:d5:c7:
bf:68:a1:d8:23:04:0a:e6:fb:52:12:3d:07:d2:b4:0d:6e:c7:
59:50:8c:fb:a0:c9:e9:fd:64:a0:3a:1f:20:a2:c8:98:13:3c:
ba:3b:67:49:e3:34:92:d9:a0:13:bd:a5:92:02:cd:d1:a0:0c:
05:71:88:67:14:7a:60:5b:e4:e5:5a:f2:8b:96:49:65:ba:e0:
23:ae:75:2b:de:e0:33:0f:2f:41:f9:63:d7:f8:bc:a5:90:ee:
fa:59:f9:1a:e2:b5:4e:b6:18:02:ef:db:3a:c5:20:56:c6:c7:
be:c0:a3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:16 2025 by rpki-client