Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: nqeVBKHOhyZnPiZimC2JVsU1mv0zhKohViVKbe8kSa8=
Subject key identifier: 50:5E:4A:22:CF:82:0D:97:6C:03:6E:84:38:BA:07:5A:69:01:D7:DA
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 01993839B02A1EA68F8E6A0D83B996911F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 042C
Signing time: Thu 11 Sep 2025 10:02:08 +0000
Manifest this update: Thu 11 Sep 2025 10:02:08 +0000
Manifest next update: Fri 12 Sep 2025 10:02:08 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: 6BglL8Z3nNo9lwfG8pi09NYh0sHnXUHmbRWH1ZvzOSg=)
2: tuLehSOy-qAFQeskzDC9g5qQP28.roa (hash: PI1JhY3WzMR4z9FpYAEO5831pX148zh5gBmaERfINeo=)
3: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (hash: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:39:b0:2a:1e:a6:8f:8e:6a:0d:83:b9:96:91:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Sep 11 10:02:08 2025 GMT
Not After : Sep 12 10:02:08 2025 GMT
Subject: CN=505e4a22cf820d976c036e8438ba075a6901d7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:7b:44:fd:f5:a2:c8:35:e2:a3:1d:87:0f:
3d:63:bb:79:e7:48:93:7b:43:48:95:7e:53:06:e7:
67:39:6c:2c:f7:8e:5a:95:d2:21:01:19:e6:0d:c4:
88:f4:f0:07:0d:1f:5e:8d:66:ec:b1:1c:34:b3:7f:
fa:6e:26:d0:3e:5f:3a:f1:c7:39:c5:0f:2d:99:30:
3c:95:b1:82:d5:0e:40:65:b4:07:3b:55:a7:64:45:
2f:82:f3:9d:52:ac:3d:e8:7f:5d:3e:31:7c:bd:16:
cd:e2:03:d0:ed:17:a4:da:0f:71:c1:0f:f5:5b:5a:
0c:7e:66:63:dc:6e:de:cd:24:03:08:0f:72:6a:7b:
66:cc:5a:44:b4:3c:87:23:60:4f:b3:0c:f2:be:2e:
dc:f0:ca:f9:c3:08:4e:0f:1c:50:52:31:fc:bf:9b:
40:94:8e:3f:49:f7:97:05:f1:eb:56:18:59:44:3b:
d5:be:37:61:f0:63:46:b9:a9:5c:36:28:c3:d8:73:
f7:1d:32:ba:a4:14:0c:5d:52:5f:a4:5f:e8:9e:9d:
02:19:e6:63:e2:1a:f2:cb:fa:fb:19:21:27:d7:d5:
3b:45:d6:e2:6a:91:c3:39:f4:f3:ea:9d:3f:55:0e:
19:f3:64:e7:bb:53:47:e6:fb:de:f9:5d:79:aa:dc:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5E:4A:22:CF:82:0D:97:6C:03:6E:84:38:BA:07:5A:69:01:D7:DA
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:38:d6:c2:c9:25:9e:b5:b1:b8:9d:0b:dc:4e:09:8b:bb:a0:
49:f8:f3:c7:07:ab:07:6e:4e:15:a6:03:a3:6e:9d:27:9c:fc:
62:d7:61:c9:b7:03:a0:1b:61:26:51:9f:5d:a6:a1:83:10:1e:
3a:a5:d7:e7:e9:16:96:75:76:15:8c:96:b8:3b:c5:11:84:36:
d8:15:55:71:bb:09:d2:fc:24:56:45:68:39:ff:56:ba:11:9e:
78:5d:4e:41:20:e0:5c:94:88:c2:66:b9:21:1c:24:fd:48:8b:
c4:28:59:11:8b:79:4a:f9:ff:67:c2:00:fa:54:19:11:e7:d8:
ee:33:52:e5:30:77:a3:2b:b0:01:b9:56:ab:e6:55:8f:f0:f9:
81:34:e9:8d:f8:fc:ae:aa:92:1d:2d:ba:fd:56:b8:f9:f6:f3:
01:96:f7:50:de:1f:49:e0:3b:9c:2f:35:11:5b:72:ec:94:45:
a5:ae:a9:8e:51:41:51:eb:83:19:11:61:1d:10:c7:92:11:6e:
56:65:1d:1b:5f:10:1d:f9:66:9e:75:08:eb:a4:94:2b:a5:01:
95:82:88:be:2c:e6:30:62:20:2d:83:74:69:d0:05:0e:7c:03:
7e:cf:ad:0c:dc:ca:f7:8e:b9:e3:3e:d3:5f:d6:25:17:fa:8c:
66:48:be:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 17:39:51 2025 by rpki-client