Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: f3+p66QE+fmRcx6UyQMlY0HQAjOaj5lA8OQBqWu/xkQ=
Subject key identifier: 38:F3:F4:2F:5D:26:90:91:84:49:3E:A6:C1:B6:A3:B5:A8:7D:D7:A9
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 0198D4A790F0E39389EA64C72E505AA80D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:07 +0000
Manifest this update: Sat 23 Aug 2025 02:00:07 +0000
Manifest next update: Sun 24 Aug 2025 02:00:07 +0000
Files and hashes: 1: 0iqw0_DRAXXz4sreW3NPTcIykK8.roa (hash: upy176yocnlw3ZFcrVK6vEr280ZPGUhzh/TpTxnYSg8=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: /ZH2XoB2sc3nFJF4krAAX+LjvIlC03IFjLgUGbVbUGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:90:f0:e3:93:89:ea:64:c7:2e:50:5a:a8:0d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Aug 23 02:00:07 2025 GMT
Not After : Aug 24 02:00:07 2025 GMT
Subject: CN=38f3f42f5d26909184493ea6c1b6a3b5a87dd7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:d4:08:e0:b7:4b:b9:cd:a2:5d:8b:fa:bf:
83:be:6b:41:d5:3e:ca:85:8c:4f:f2:0e:3f:c8:bc:
3a:43:e1:63:44:38:94:b6:a2:3a:fd:48:c6:55:69:
b7:e4:ab:00:19:a5:80:c4:39:2f:93:16:fa:17:d0:
c9:3a:ef:75:a4:33:07:1d:95:8a:0f:fb:74:31:4b:
c8:1c:5d:62:50:93:76:c5:f7:63:c0:77:15:3b:3e:
51:49:75:fc:d3:0f:33:66:bb:ca:c9:70:9b:98:1b:
50:13:1c:2d:9c:71:94:b0:19:bc:f6:2e:91:8d:1e:
23:9a:6c:e8:8b:1a:b1:fd:3a:f9:60:99:d4:3a:e2:
4a:8e:8a:03:b0:b7:99:dd:4e:39:92:d5:00:d4:35:
55:57:2a:8d:81:66:ca:ba:00:5e:f8:2a:e8:0d:65:
c5:ae:95:9c:f7:db:44:5d:be:93:81:1a:af:65:e6:
2f:91:5e:ec:d6:2c:9b:36:b4:03:4b:3e:af:2f:64:
85:8b:1c:3f:2f:02:33:e6:bc:a5:be:09:52:2e:70:
e9:fa:06:f6:90:7c:19:6a:ae:4d:87:db:61:0c:a1:
bd:b0:ba:ed:4f:c2:63:8d:10:59:b3:6e:dd:2f:13:
10:3a:e1:77:95:74:5e:b9:f8:f6:ef:7c:34:0f:72:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F3:F4:2F:5D:26:90:91:84:49:3E:A6:C1:B6:A3:B5:A8:7D:D7:A9
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c0:07:33:86:56:f5:14:32:f8:35:94:94:c4:09:ce:f4:dc:
57:39:e5:d6:ff:33:f2:d0:12:db:4b:0e:a7:36:0b:15:6b:1f:
4b:88:49:ea:26:59:fd:4d:2f:f2:b2:64:3e:39:7b:49:8c:33:
11:42:99:77:da:3e:8e:13:68:7c:36:48:b0:98:08:aa:31:57:
fd:0e:f1:ac:07:c1:04:2a:24:29:04:86:c8:bf:a3:2b:e3:0d:
c8:55:88:43:48:8e:bf:fb:64:02:a6:35:b5:26:69:cd:d4:33:
9f:6c:34:17:03:91:03:41:33:ea:e4:60:54:10:a1:2b:a8:f0:
6e:a8:53:e5:67:d3:3b:a5:53:7c:70:7a:5b:c6:92:ba:52:c0:
92:1f:01:1a:00:51:a9:c3:f8:bb:cc:1f:02:80:17:bc:8e:74:
c1:6d:6a:70:8f:56:d9:bc:8d:ec:5f:33:bd:ea:64:a6:d2:ac:
1e:89:4e:56:df:2a:3d:14:a3:f6:79:45:8d:d2:e2:69:50:2e:
40:eb:fd:8c:22:5c:f4:03:d4:70:0c:41:3b:e2:61:15:c0:e3:
a9:21:ec:29:42:7b:d8:e5:6b:80:b4:f3:8c:16:d5:80:97:fb:
0a:42:36:85:58:31:ad:23:de:27:51:fd:53:36:ad:02:10:53:
6a:4b:2e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:35 2025 by rpki-client