Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: OYFm53qoeKHP7xQXGmPcZFkcr+PcKqhjh/hHi6OuU1A=
Subject key identifier: 00:2E:34:95:62:8C:A8:C9:54:2E:F6:ED:E3:43:95:DA:5F:5C:53:09
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 0197B77CD8B3E56F235FB9D47DF7C2F6CD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:41 +0000
Manifest this update: Sat 28 Jun 2025 17:01:41 +0000
Manifest next update: Sun 29 Jun 2025 17:01:41 +0000
Files and hashes: 1: 0JNfBNzU72OAoNIfj1jhygVeYQU.roa (hash: oGcfqT/JJ8LL0qB7k2QsQSpg+/RTt2AO65zLWXlHWAA=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: hcdwUpRdh440haGjJBqdDQJiIanjpO6SzTMGjaBugQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d8:b3:e5:6f:23:5f:b9:d4:7d:f7:c2:f6:cd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Jun 28 17:01:41 2025 GMT
Not After : Jun 29 17:01:41 2025 GMT
Subject: CN=002e3495628ca8c9542ef6ede34395da5f5c5309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:74:c7:74:5a:33:ed:ec:25:c2:a8:4f:95:
60:d8:ec:47:39:f9:60:c5:56:09:41:ea:b7:9a:16:
42:89:1a:1d:a0:f3:90:9c:ae:55:90:2b:b8:7d:34:
a5:3a:8c:4f:4b:d2:d8:38:18:6f:23:c5:a6:20:0b:
77:6a:39:90:cc:da:c2:5c:25:85:f6:4e:c9:53:a3:
39:53:0c:1d:28:32:cd:6e:55:e0:49:27:64:93:34:
55:f7:11:b0:54:bd:6b:06:c8:b8:2d:69:36:96:26:
0f:d1:8a:1d:fb:bd:25:9e:7c:e4:ad:f6:d1:c2:4d:
55:25:c3:16:78:41:1c:cf:9d:7c:ca:e2:1d:94:8f:
ea:5b:1f:f7:0a:5e:39:7b:48:e0:52:80:a3:37:0c:
6b:66:9b:5b:34:99:63:87:48:fb:30:6c:af:05:e0:
5c:e8:90:5a:1b:b9:ab:af:e4:a0:75:3f:e0:89:8e:
cc:91:9a:7c:ee:15:c6:21:06:db:2e:17:2b:a1:9b:
a4:91:48:8b:e6:22:d0:54:4e:11:e4:1b:ed:21:3c:
96:93:ff:17:6b:0f:69:d9:c9:e9:22:bf:0c:0c:9f:
fd:77:92:34:04:0f:b4:b1:81:fc:5d:3c:84:68:18:
d0:ab:d3:7c:b0:06:89:c4:67:7c:4a:f1:ac:62:e5:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2E:34:95:62:8C:A8:C9:54:2E:F6:ED:E3:43:95:DA:5F:5C:53:09
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e5:0f:8e:d0:88:93:bb:60:fc:dc:df:26:ab:cd:9a:b6:4c:
7f:27:9e:06:72:31:db:8a:18:b8:df:43:2e:db:36:f9:9a:62:
e6:fb:f9:2b:9c:27:88:6b:7a:0a:0b:04:2e:39:c5:ba:e0:b4:
a3:05:33:2a:10:8b:ed:dd:65:1c:64:83:70:16:58:cf:ba:77:
80:ad:0b:67:58:6f:e4:60:86:87:b5:16:54:ad:5c:fa:2e:bf:
c5:3b:db:b7:5d:28:91:c4:a5:71:3f:46:b9:66:e3:ae:a3:d6:
f4:32:00:fd:b0:bc:8d:f8:d3:62:de:34:4d:ea:24:d6:d0:c9:
74:cc:67:2f:dd:b0:59:aa:78:fa:b9:b9:da:b2:5d:cc:96:4c:
e7:65:76:f5:e5:ca:6b:04:64:2d:57:49:5b:c4:52:0b:73:bc:
b8:48:f6:fd:06:2e:ed:34:57:6b:b0:70:91:ce:a9:88:13:5e:
78:a2:2e:61:0d:0d:c5:98:8c:f9:dd:dc:f1:89:a5:25:c4:67:
b6:ac:bb:79:21:75:32:1b:88:b2:5b:c5:71:42:23:4d:b3:8f:
1a:8b:75:7d:aa:73:78:2b:49:9d:ad:e4:8b:a8:36:64:96:6e:
2e:49:f5:fa:8e:83:b7:83:9c:b9:6b:20:48:ea:a9:08:05:fc:
a7:d4:28:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:17:08 2025 by rpki-client