Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: HXD4bd4zIhS5c05NAvZzN3HIo2W59tujQvrwbe6ZhrY=
Subject key identifier: 2A:96:68:0E:9A:DE:AC:F4:5E:04:86:AD:69:D2:20:FB:EC:D0:A8:44
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 019A0290CD39DDA043CD0D25B6C89368AA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 17:00:35 +0000
Manifest this update: Mon 20 Oct 2025 17:00:35 +0000
Manifest next update: Tue 21 Oct 2025 17:00:35 +0000
Files and hashes: 1: 0JNfBNzU72OAoNIfj1jhygVeYQU.roa (hash: oGcfqT/JJ8LL0qB7k2QsQSpg+/RTt2AO65zLWXlHWAA=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: xlhqUaC932CVBRIjAjndLaDYohh8Y/vSbmVgI+CDTkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:cd:39:dd:a0:43:cd:0d:25:b6:c8:93:68:aa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Oct 20 17:00:35 2025 GMT
Not After : Oct 21 17:00:35 2025 GMT
Subject: CN=2a96680e9adeacf45e0486ad69d220fbecd0a844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:b9:c1:5b:d2:04:34:e0:08:06:78:f5:b1:
5f:6b:ee:0a:85:8c:b5:90:67:e4:68:15:d4:d6:3a:
70:6f:9c:b5:8b:b6:be:e3:7f:1e:69:5f:58:fc:e4:
d4:15:fd:94:53:70:1b:f8:22:67:a1:13:15:78:a2:
18:d8:ab:c6:4d:e8:36:ae:8a:a7:ca:eb:3d:09:55:
93:a7:7c:2c:e5:b1:fb:f7:7b:aa:d9:db:6f:72:01:
f6:58:5c:ac:d3:38:b6:d7:7a:21:6e:24:98:f5:62:
7b:d0:c3:c3:22:69:cf:9a:a3:c7:68:50:e4:66:94:
3f:0f:51:3c:5c:e9:41:ea:45:88:22:bf:7d:8d:c5:
c2:bb:74:e1:b5:09:72:67:4f:34:80:9e:9e:e0:50:
ac:1b:27:e3:d2:12:c5:6e:38:64:be:18:75:3a:63:
11:09:ea:62:e8:2c:17:ea:bb:07:4f:c2:e4:32:2f:
f1:d2:ab:3e:ab:9d:8f:21:b1:19:fe:40:90:74:87:
44:60:d0:59:0d:d1:79:25:ab:ef:a4:8a:af:b9:43:
af:82:8b:1a:eb:e7:cb:fa:95:f2:43:71:4e:61:f9:
f6:87:31:10:46:a8:91:1e:04:18:e7:c2:63:26:51:
28:18:51:c8:10:b7:74:9e:c7:dc:a4:16:1a:11:21:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:96:68:0E:9A:DE:AC:F4:5E:04:86:AD:69:D2:20:FB:EC:D0:A8:44
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:88:10:6a:5e:38:39:64:29:08:0b:14:16:e8:10:f4:f8:5e:
7b:34:30:41:46:98:6f:32:45:bb:5d:2b:47:d1:57:b6:ab:b0:
9c:e2:ea:67:d7:2f:d8:bc:6a:7d:18:ba:c0:82:09:6f:e9:92:
0e:7e:e8:4d:93:6d:e0:2f:e3:86:6e:d4:b4:38:a6:63:46:09:
cd:75:39:0a:3f:04:23:c6:de:8e:9c:37:e2:c7:02:45:3c:bd:
91:04:e0:80:21:3f:e2:08:51:9f:62:98:59:5d:a3:43:be:c3:
84:38:98:e9:d1:7c:42:6d:cb:35:c6:09:0a:b2:3e:13:33:bc:
da:3b:d1:01:78:d0:d5:c5:62:81:4e:06:6a:88:d6:7c:86:29:
42:5c:2b:12:64:72:2e:26:5e:ef:70:a1:83:38:47:21:19:ea:
de:f3:5b:61:c4:be:f0:90:f6:4c:62:54:4a:e1:3f:be:8a:79:
58:27:0b:08:73:cd:f2:b1:76:43:f5:d4:1e:0b:5e:e8:b7:d9:
62:99:ae:1b:5e:d6:52:65:f0:05:c6:aa:88:51:03:fa:c2:d6:
77:59:bb:c1:12:90:88:15:23:f7:ce:a2:50:5d:6c:70:38:92:
e4:10:d9:e2:af:03:2b:82:30:0e:a7:95:56:22:76:c0:55:a2:
8e:70:49:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:20:00 2025 by rpki-client