Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: jhxqNlUrymnx1x5o7huubjCVgJozCcN254qX7x2m1lo=
Subject key identifier: 9F:D4:BF:FA:5F:82:E3:B9:39:EA:B1:4A:52:29:8B:56:76:BF:12:FD
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 0197B74551629547DD7F52620389FB51121A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 132E
Signing time: Sat 28 Jun 2025 16:01:02 +0000
Manifest this update: Sat 28 Jun 2025 16:01:02 +0000
Manifest next update: Sun 29 Jun 2025 16:01:02 +0000
Files and hashes: 1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: RVfVmA8Z3qwIkw80oD285JACUOiyTJ6XfzP2Qdft+3o=)
3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:51:62:95:47:dd:7f:52:62:03:89:fb:51:12:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Jun 28 16:01:02 2025 GMT
Not After : Jun 29 16:01:02 2025 GMT
Subject: CN=9fd4bffa5f82e3b939eab14a52298b5676bf12fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:75:9a:36:cb:e7:9f:88:d4:d4:c5:2a:53:
ef:c6:60:47:bc:cf:41:c8:a8:14:08:2f:a2:a4:cd:
7d:3f:57:42:37:18:ad:08:ac:6d:36:8c:a9:50:01:
0e:e2:35:f9:f1:dc:d5:9a:cb:65:33:c3:1d:cf:cc:
f2:8b:a7:2a:df:27:7c:2f:67:76:f0:c2:bf:a5:56:
c7:8e:e7:29:ab:1b:3c:3c:b6:6f:79:d9:4a:a4:5c:
da:ed:5a:44:62:6f:b7:34:11:22:2a:25:31:7b:0c:
48:a1:b5:e3:0b:91:3d:5a:54:d2:2f:3d:1d:c8:54:
62:17:e1:f0:1c:22:9b:14:cd:dc:9f:a0:cb:ab:1e:
94:42:f1:de:98:12:c2:c6:05:aa:7e:e6:cf:19:57:
f7:c0:40:9e:a7:f8:d1:26:1d:5f:ef:fa:5b:e0:86:
8c:01:9a:79:6a:07:7c:0d:74:4f:8c:b9:49:d8:74:
f4:ed:fc:f0:8f:dc:b2:d9:11:1b:c8:3b:b8:aa:5b:
59:a8:b5:ae:1b:3c:d6:e5:40:57:ce:7d:8c:b0:ba:
27:2d:30:27:af:f6:db:b2:1a:08:15:08:f5:1d:99:
a2:c4:01:55:6d:61:f0:d7:3a:26:c9:2e:7d:1a:68:
40:bb:19:26:2e:8f:9e:df:5a:2a:c8:22:af:2b:a9:
d8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D4:BF:FA:5F:82:E3:B9:39:EA:B1:4A:52:29:8B:56:76:BF:12:FD
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5a:0e:ca:50:2d:03:37:65:ac:d0:0a:e6:c2:9e:88:23:0a:
1a:58:0c:0f:b8:7a:4a:f6:28:7b:94:8e:05:09:ac:32:e5:4a:
8c:ad:5c:3c:f3:81:28:26:c3:07:98:b5:af:ac:9d:30:48:6c:
ff:43:5f:94:74:5d:e5:61:ef:02:e5:d0:ea:7a:a3:ce:99:63:
6c:b9:d7:a0:49:bf:a1:a0:f6:cf:8a:6d:86:62:5f:34:fe:80:
aa:a1:41:d1:97:83:95:68:ba:0a:7f:f9:ce:d6:e0:91:2a:e6:
3b:29:e3:0e:29:56:c8:ba:9c:7e:a7:51:83:da:de:b1:3c:b3:
1d:c0:45:a8:a0:14:f7:fc:a0:d3:50:b1:0e:41:fb:3c:c3:46:
12:2c:48:5c:c3:87:26:8a:ba:ae:33:fc:a0:11:1c:3b:62:8a:
c6:87:50:48:b1:e0:26:7c:73:0a:e9:50:99:d4:57:7d:cd:29:
95:ca:83:67:49:90:81:d2:4a:b8:c4:3e:bb:2c:58:f7:a1:38:
b1:dd:5f:7e:a4:1e:3b:e3:8f:28:72:c2:45:88:fb:ff:36:ee:
a0:99:1c:ed:6a:5d:3f:8b:e0:74:3b:f9:44:99:7c:e9:2d:b9:
7f:2a:a4:9c:20:b5:78:3d:34:23:76:32:f2:b5:a7:80:4c:df:
ac:ce:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:51 2025 by rpki-client