Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
File: UFrRf0xiDVjUU9X218kjP84SZJk.mft (raw, json)
Hash identifier: BmcjcOVKD/dU539CclY2fgewwwJq9P0jpZTaAFbh1XM=
Subject key identifier: 5F:9C:2D:0F:0D:C5:BE:82:08:22:88:0F:8E:88:C6:10:2A:42:1E:19
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 0198D4A7E4E1FB470B34F5C6CB29C129ED93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
Manifest number: 06D3
Signing time: Sat 23 Aug 2025 02:00:29 +0000
Manifest this update: Sat 23 Aug 2025 02:00:29 +0000
Manifest next update: Sun 24 Aug 2025 02:00:29 +0000
Files and hashes: 1: UFrRf0xiDVjUU9X218kjP84SZJk.crl (hash: FcPk2QYNfSRw2B32rDX9hL21Vn3KMSk177VoZC6qV5c=)
2: z0gK7j1eTNv7dmhYM5fYU83PlcI.roa (hash: F9PSIbqhKjRh7i/sDNMQoDtTGb+P8gRfs9+wZwKnUuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e4:e1:fb:47:0b:34:f5:c6:cb:29:c1:29:ed:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: Aug 23 02:00:29 2025 GMT
Not After : Aug 24 02:00:29 2025 GMT
Subject: CN=5f9c2d0f0dc5be820822880f8e88c6102a421e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:32:68:e9:14:b2:7f:d4:55:7c:b0:eb:e9:9d:
a7:92:c4:5f:4d:f2:9f:5a:a0:4b:47:2d:9c:78:5e:
29:16:c8:38:f9:38:b6:2f:53:d5:a5:f4:87:4a:67:
81:f0:c7:2c:6d:5e:22:7b:d5:99:c2:15:ce:bf:22:
62:1e:ff:89:16:26:96:0e:aa:4c:50:c1:18:d1:b8:
d0:fd:95:a7:4d:ad:07:09:94:4c:cb:56:6c:90:3c:
36:f6:03:b7:a6:2f:dd:28:a4:58:ae:de:d1:bb:46:
ac:d5:e6:fa:ba:96:fd:c8:1c:24:7f:c8:22:98:30:
f1:51:da:21:1a:da:59:a4:43:e5:ba:87:6f:87:d5:
ae:22:2e:92:09:3e:5f:01:4c:f4:69:da:6a:0d:27:
25:b7:39:94:c6:3b:cd:3f:2e:0e:e5:6e:c0:f8:28:
1d:c6:49:00:c6:50:a1:da:4b:c7:ba:12:da:72:7f:
d8:bd:86:3f:44:96:a4:6e:5c:cb:7f:76:55:07:2a:
5f:d7:2a:4c:1a:98:51:1a:bc:b4:89:2a:f1:27:2b:
e2:c3:bf:9d:2d:e6:13:3a:b8:38:ee:13:55:33:ff:
f9:6f:62:eb:44:65:bb:73:0b:37:93:ff:e2:b4:81:
09:80:e4:4c:73:b1:a8:43:0b:fe:14:5a:ea:b3:5e:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9C:2D:0F:0D:C5:BE:82:08:22:88:0F:8E:88:C6:10:2A:42:1E:19
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:84:56:b8:61:f2:0b:c0:06:71:d2:97:68:d6:ef:56:46:b8:
8c:4e:44:e3:31:5c:46:0c:5e:61:cb:2e:f1:2c:ec:df:71:4a:
d0:df:1a:d3:bc:17:fb:01:af:4c:08:1c:20:90:ab:3e:0b:93:
83:00:39:85:58:be:9c:b4:fa:18:3d:a3:39:e2:99:0b:16:51:
a7:07:13:b2:fe:9f:9d:fd:b9:df:c0:14:33:0b:46:94:66:32:
48:5f:be:fc:47:f6:2a:8e:f8:aa:23:d9:c8:82:b0:02:94:53:
a1:d7:5a:f6:e9:d4:82:15:25:c0:b4:23:ea:c9:c1:f7:b9:7e:
6e:57:96:fd:57:1e:a7:e9:20:d0:a4:cf:96:24:b3:2d:11:69:
16:bf:27:92:04:8e:74:b4:a5:b5:1b:7d:1d:02:ff:dc:b9:56:
8d:ea:e2:3f:e2:a9:e6:41:7c:00:15:f2:8c:06:8a:b5:b5:15:
3c:b8:87:de:98:5d:c3:21:46:49:5e:6a:be:62:70:bd:42:2f:
ef:fe:ae:6f:4f:42:1b:a0:1f:9f:6b:39:a7:97:7b:0c:14:60:
0e:39:c1:57:db:3e:36:75:95:cf:31:0a:97:07:68:9c:37:f2:
2c:30:74:f4:77:d4:0e:22:eb:be:21:de:f5:8c:ac:f4:ce:19:
1a:41:21:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:39 2025 by rpki-client