Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: yNhU1C5SmavIDnRN8H5QjZDyXvNUh78JMjQC21tBV28=
Subject key identifier: 33:2D:E7:6D:CA:8B:6B:62:A1:34:C5:47:68:35:4B:E8:7E:98:A4:2A
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 01993123A2E5ACEC44D128F70563DD7A460D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 0F9E
Signing time: Wed 10 Sep 2025 01:00:43 +0000
Manifest this update: Wed 10 Sep 2025 01:00:43 +0000
Manifest next update: Thu 11 Sep 2025 01:00:43 +0000
Files and hashes: 1: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: YqRz/DXwgzxwSEr6I4Rc5tzF5j1zBP2s48WB0C8sri0=)
2: bo7KO9XdD_Urskdk1n4Bj-fW4fs.roa (hash: ubQY2gOF+3dPO6O676JWntfiT2uJ103t4smlNmiKGh4=)
3: w9MEWUoUc8xZKY1er3NSZNyKi7U.roa (hash: POwTU/L0ZyJ5NYemVS0exc18aJZvc21A0g3ouxix4G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:a2:e5:ac:ec:44:d1:28:f7:05:63:dd:7a:46:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Sep 10 01:00:43 2025 GMT
Not After : Sep 11 01:00:43 2025 GMT
Subject: CN=332de76dca8b6b62a134c54768354be87e98a42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:37:8f:b5:83:71:2e:57:bb:6d:da:6a:fe:
5b:0d:80:bd:84:13:75:75:1d:e1:99:8e:cf:50:f4:
56:f7:e9:88:a8:14:b1:f1:8e:66:38:d1:db:1f:2a:
c0:9f:8c:bc:dd:e7:f5:43:36:77:41:7a:fb:49:8d:
34:f1:b3:86:b9:8e:42:e8:1f:f1:a6:8b:00:3a:a5:
fb:c7:c7:07:85:85:6a:e2:65:88:a2:ba:7b:2d:7f:
6e:37:26:51:b8:3d:28:dd:ee:b5:a7:1f:84:c6:87:
8a:51:a6:ec:a9:5f:f0:41:10:bf:e3:4e:3b:2e:19:
4d:14:96:ab:cc:ea:f9:52:10:11:8b:3b:3c:55:6e:
a2:42:c8:32:19:3c:91:4c:b5:f7:50:ae:5e:de:46:
67:62:b5:83:20:3e:fa:17:65:b9:19:a0:47:cb:20:
97:28:61:67:89:4e:f8:b0:3d:f7:3e:b3:1e:83:43:
d1:22:33:3d:32:a5:33:13:db:0f:0c:49:eb:33:b3:
c4:2b:0c:2c:43:67:c2:64:06:2c:57:3a:c7:6e:61:
25:49:c6:d0:b5:f3:32:4e:b3:24:f9:02:8c:9a:43:
91:20:c3:19:1f:75:12:3f:14:7d:06:e0:0b:80:bb:
c2:e7:28:45:4c:e5:ff:d8:29:b8:5e:06:b6:6d:c0:
dc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2D:E7:6D:CA:8B:6B:62:A1:34:C5:47:68:35:4B:E8:7E:98:A4:2A
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d8:97:6d:4c:04:2a:91:7f:dd:db:5b:c8:4a:3b:d3:f7:4b:
0c:4f:87:c1:26:94:e6:5d:ac:30:3d:1e:ee:aa:2e:a2:20:16:
b1:d4:a8:c5:99:01:c0:79:10:5c:b3:75:a2:79:7e:a4:f5:08:
4d:a1:cf:63:4a:63:51:08:94:85:c9:bf:ef:be:c8:47:8b:b9:
d7:cc:a7:a5:42:2f:de:42:81:ec:54:5c:f7:59:a3:ec:4e:c3:
00:35:38:bd:63:be:b7:59:e5:11:d1:33:07:6f:8a:a0:5b:4b:
a3:3e:b8:86:82:17:59:a6:7c:9f:32:f8:49:b4:54:d4:11:d9:
7b:0d:09:c1:db:54:14:e5:a1:c6:fc:13:67:89:a4:63:5c:53:
db:10:32:3e:d4:37:47:f8:d6:bd:79:26:4d:97:de:5c:1e:53:
98:c0:81:47:18:64:5b:ac:bc:55:1e:eb:fd:a1:62:4d:8e:5d:
40:a3:49:70:55:31:df:78:08:41:30:4b:3c:68:d7:2d:7a:e6:
e5:6e:49:d2:9e:38:27:dd:6b:71:7a:ac:fc:d5:aa:9d:5e:d0:
12:1f:a4:03:36:f2:a2:3d:2f:fb:57:61:e0:e6:e1:8c:86:03:
4d:43:b4:94:20:01:15:3a:b2:4f:aa:cb:9c:bb:76:60:4e:25:
e3:d7:f7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:03:42 2025 by rpki-client