Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: /hQNxSQNU/cRT8or7LE9uPgYI+ukGQGg2QxHZXH/Uv0=
Subject key identifier: A4:FE:2F:67:FA:80:6F:24:04:94:20:80:7F:1E:B3:8F:2F:A7:82:B1
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 0198D54E8A79452DE3A5725A92D910653AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:02:30 +0000
Manifest this update: Sat 23 Aug 2025 05:02:30 +0000
Manifest next update: Sun 24 Aug 2025 05:02:30 +0000
Files and hashes: 1: 0JNfBNzU72OAoNIfj1jhygVeYQU.roa (hash: oGcfqT/JJ8LL0qB7k2QsQSpg+/RTt2AO65zLWXlHWAA=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: mFieqbYXm4y07436LQSpEjha+53PWf6jwwvwuCzjC+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8a:79:45:2d:e3:a5:72:5a:92:d9:10:65:3a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Aug 23 05:02:30 2025 GMT
Not After : Aug 24 05:02:30 2025 GMT
Subject: CN=a4fe2f67fa806f24049420807f1eb38f2fa782b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:3e:3a:47:53:30:7b:2c:59:25:e8:31:2a:
79:bb:c5:ac:aa:7e:96:2d:a3:f6:c2:88:6f:29:ed:
34:4b:e9:da:6d:01:d7:8a:31:27:1a:b9:08:37:c4:
b1:bb:9c:bc:15:c5:33:80:6b:7b:b1:7a:a3:3f:43:
1c:5a:2c:5a:ff:4c:5a:54:3d:2b:54:bd:98:1b:f8:
03:0b:02:1a:80:4f:65:39:09:21:4d:70:ec:67:c2:
33:e5:7f:fa:41:07:6d:7d:c1:d2:1c:60:16:52:0f:
10:df:5f:91:de:c2:64:c5:09:9b:98:b4:55:64:3d:
13:a4:bd:24:df:ec:23:9e:95:d1:a5:67:a9:22:a5:
96:7b:cc:ea:d4:48:28:56:db:98:52:e9:63:32:ba:
66:e7:85:ca:d2:a2:8b:61:8f:6b:82:f4:21:57:67:
57:19:82:a6:c0:e7:19:5b:8e:b3:91:c0:d8:c4:d2:
b3:db:34:a5:7a:77:24:39:2d:f7:bb:14:2b:fa:2d:
10:5b:58:54:9e:a5:cc:9e:40:09:58:ed:87:a5:33:
a7:23:85:5e:8d:3f:b4:2b:ff:b7:39:61:20:a6:16:
4b:e5:2c:7e:e6:1b:ca:14:68:d0:3f:d3:8d:78:dd:
53:6d:b7:1f:9c:d9:4d:f6:25:e4:4d:62:64:8d:69:
73:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FE:2F:67:FA:80:6F:24:04:94:20:80:7F:1E:B3:8F:2F:A7:82:B1
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d0:0f:ed:a0:ee:bf:14:e2:70:94:da:d2:96:22:d0:ec:99:
0d:82:f3:07:c6:9a:dd:65:1b:74:c0:1a:1a:5a:68:1d:1b:92:
5d:2c:28:b4:95:a5:a9:d3:5b:1e:3b:92:ec:e6:56:4a:6b:43:
11:ff:5c:bf:ec:f3:e6:97:d0:89:ed:59:32:16:d0:8d:f8:85:
18:f7:63:44:0a:c2:0f:39:01:82:23:a1:b6:f1:a6:89:36:db:
a7:bd:88:13:64:10:ea:6b:4f:bd:d3:03:36:b3:03:d9:94:ba:
75:b9:79:c0:8b:d0:32:80:58:cf:e1:99:c8:95:89:52:d4:5a:
9e:bf:4a:aa:b7:c3:a7:2d:81:9a:f6:56:64:40:bb:70:17:65:
4d:74:14:14:4e:67:40:1e:ae:77:26:a0:44:59:17:8b:eb:80:
b9:b7:b7:a8:46:fd:1c:a5:f3:81:3b:38:c2:8b:e1:7f:25:51:
0d:a1:01:d0:e9:d5:ca:5d:ea:f1:81:f7:2f:5e:6c:8c:e2:34:
8c:7f:ce:e0:ce:be:78:98:ea:09:de:d2:37:48:ad:89:d8:76:
ab:ff:db:b9:16:72:16:e8:57:70:37:33:46:17:21:19:9d:dc:
6c:d0:36:22:1c:e1:46:ad:74:3e:37:8d:49:47:0a:dd:99:2d:
f4:d4:74:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTop5RS3jpXJaktkQZTrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Zjc2OWQ0NDMzYjc3MDRkZjcwM2QxNjQ1YjdmZWE4ZWZi
ZjkyNmUwHhcNMjUwODIzMDUwMjMwWhcNMjUwODI0MDUwMjMwWjAzMTEwLwYDVQQD
EyhhNGZlMmY2N2ZhODA2ZjI0MDQ5NDIwODA3ZjFlYjM4ZjJmYTc4MmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhc+OkdTMHssWSXoMSp5u8Wsqn6W
LaP2wohvKe00S+nabQHXijEnGrkIN8Sxu5y8FcUzgGt7sXqjP0McWixa/0xaVD0r
VL2YG/gDCwIagE9lOQkhTXDsZ8Iz5X/6QQdtfcHSHGAWUg8Q31+R3sJkxQmbmLRV
ZD0TpL0k3+wjnpXRpWepIqWWe8zq1EgoVtuYUuljMrpm54XK0qKLYY9rgvQhV2dX
GYKmwOcZW46zkcDYxNKz2zSlenckOS33uxQr+i0QW1hUnqXMnkAJWO2HpTOnI4Ve
jT+0K/+3OWEgphZL5Sx+5hvKFGjQP9ONeN1TbbcfnNlN9iXkTWJkjWlzQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKT+L2f6gG8kBJQggH8es48vp4KxMB8GA1UdIwQY
MBaAFLn3adRDO3cE33A9FkW3/qjvv5JuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80ZGZiZDQtOGVkNy00NWYyLTk1MGQt
M2FlYjdjZGUwMzZjLzEvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS80ZGZiZDQtOGVkNy00NWYyLTk1MGQtM2FlYjdjZGUwMzZj
LzEvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzNAP7aDu
vxTicJTa0pYi0OyZDYLzB8aa3WUbdMAaGlpoHRuSXSwotJWlqdNbHjuS7OZWSmtD
Ef9cv+zz5pfQie1ZMhbQjfiFGPdjRArCDzkBgiOhtvGmiTbbp72IE2QQ6mtPvdMD
NrMD2ZS6dbl5wIvQMoBYz+GZyJWJUtRanr9KqrfDpy2BmvZWZEC7cBdlTXQUFE5n
QB6udyagRFkXi+uAube3qEb9HKXzgTs4wovhfyVRDaEB0OnVyl3q8YH3L15sjOI0
jH/O4M6+eJjqCd7SN0itidh2q//buRZyFuhXcDczRhchGZ3cbNA2IhzhRq10PjeN
SUcK3Zkt9NR0nQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:37 2025 by rpki-client