Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: 4SJPfOBEVRyYKWbe9mbN0EoJSz8MJYUW6f0xPvTZukA=
Subject key identifier: 6F:2B:FC:2C:35:01:8C:CE:B7:BE:F0:6F:9A:67:E1:34:F1:CA:A2:C7
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 01994CD31EDB5D0CF2F0CB27AC33F943E36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 1400
Signing time: Mon 15 Sep 2025 10:02:08 +0000
Manifest this update: Mon 15 Sep 2025 10:02:08 +0000
Manifest next update: Tue 16 Sep 2025 10:02:08 +0000
Files and hashes: 1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: xjcsGeYsMJ2bxkohah1my6bN+GubTIxCPzrmlmNYofg=)
3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4c:d3:1e:db:5d:0c:f2:f0:cb:27:ac:33:f9:43:e3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Sep 15 10:02:08 2025 GMT
Not After : Sep 16 10:02:08 2025 GMT
Subject: CN=6f2bfc2c35018cceb7bef06f9a67e134f1caa2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:48:ee:92:5f:ec:a2:20:50:56:f0:27:5b:
fa:c7:90:74:d7:54:be:8a:49:16:cf:47:bf:0c:92:
c4:ee:c6:86:44:49:66:66:8e:36:f0:c3:24:fd:a4:
c8:7a:c4:36:78:df:55:29:79:fb:5c:cc:9b:f0:aa:
93:b5:78:51:fe:da:e3:69:e6:4a:3f:bb:b3:09:81:
e5:9d:42:aa:77:49:be:a2:11:6f:34:ad:fd:41:e2:
a6:78:ec:74:3b:37:d7:2b:35:27:65:8f:86:e3:50:
d8:f6:67:dc:f7:40:62:94:3e:6f:74:6e:ca:23:91:
e1:d8:24:8b:40:b5:ff:dd:90:5f:88:66:a9:db:00:
e7:18:3b:60:79:5d:9a:c5:93:e9:79:25:18:89:c9:
d7:09:dd:df:a1:09:1c:70:55:bd:05:6f:9e:41:9a:
16:d3:5f:d7:26:f9:e1:59:1e:46:81:e0:a8:26:e5:
08:86:ed:fa:45:e5:e5:26:3c:70:66:df:89:2f:45:
a8:16:30:4b:ce:c0:9e:2a:88:f6:b7:06:11:bb:cf:
f2:c4:a8:1d:17:45:f0:63:04:d3:4d:83:ce:30:7b:
e8:97:31:51:c5:5c:d2:c0:9b:4c:dc:18:e0:e9:e0:
f5:1e:11:ae:d6:2f:ea:d2:9e:57:48:a1:b6:38:7f:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2B:FC:2C:35:01:8C:CE:B7:BE:F0:6F:9A:67:E1:34:F1:CA:A2:C7
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a1:e0:70:10:2d:bb:f4:1b:80:c2:d3:a0:4f:84:31:26:2f:
86:cc:5e:8b:6f:b7:83:16:f8:11:96:dd:4b:2f:2d:62:45:3d:
81:86:08:9b:fd:44:2c:6f:21:32:9c:b2:27:f1:c7:da:ff:a0:
1b:4b:46:1a:e9:ca:de:9d:d5:38:75:c4:57:d7:38:11:08:5f:
b5:ca:dc:5b:00:58:1e:d0:82:54:0d:68:65:26:7e:f7:6c:01:
ee:b5:9b:b7:4a:1f:e4:bf:6e:42:2e:69:d8:38:0b:76:49:f0:
46:dd:c1:b7:a3:63:b5:ab:8d:7c:ad:38:18:d3:5b:5c:6b:99:
cb:9c:ab:c7:23:d1:54:ce:7d:81:9c:57:73:89:7b:ac:2f:a3:
e6:05:07:90:cc:63:ac:b2:43:b5:aa:59:5d:8d:97:23:cc:ba:
f5:1c:c9:06:82:78:2d:5e:9a:bc:6d:16:1f:b1:29:36:b6:c9:
3d:99:c1:22:73:9e:23:98:c9:69:ee:cf:4a:5f:e0:01:87:c3:
41:1c:b4:d7:95:f3:4d:92:ad:a1:e2:94:5b:62:5e:bb:bc:cb:
94:32:81:67:44:2d:b1:5f:70:4a:e8:17:8a:c7:9c:d8:fb:57:
db:13:b1:31:0c:31:23:7f:95:2d:a8:50:21:c5:84:46:d3:68:
cc:d2:bf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 11:48:10 2025 by rpki-client