Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: ug0WheLX93d7I509KbRrsw3zK7T+A54malQDIZlwkCk=
Subject key identifier: 24:3F:9E:97:61:B0:BD:94:F6:55:2B:87:9D:B7:63:71:F0:79:A5:E4
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 0198D5BC53A7FBA3CBD8EBB0E063BCBA1136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 03F9
Signing time: Sat 23 Aug 2025 07:02:25 +0000
Manifest this update: Sat 23 Aug 2025 07:02:25 +0000
Manifest next update: Sun 24 Aug 2025 07:02:25 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: oZOalerNqr+/irYBYOspsehP7kEvMBbcC4yuNAW7VUE=)
2: tuLehSOy-qAFQeskzDC9g5qQP28.roa (hash: PI1JhY3WzMR4z9FpYAEO5831pX148zh5gBmaERfINeo=)
3: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (hash: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:53:a7:fb:a3:cb:d8:eb:b0:e0:63:bc:ba:11:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Aug 23 07:02:25 2025 GMT
Not After : Aug 24 07:02:25 2025 GMT
Subject: CN=243f9e9761b0bd94f6552b879db76371f079a5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:ef:ac:30:09:2f:67:55:38:f2:fa:7f:29:
d5:18:c4:dd:a9:46:9c:a2:44:7d:2d:a5:06:66:b4:
b1:26:0a:8c:dc:1a:70:9a:c8:ce:02:c7:0a:d3:fe:
1c:56:a8:ba:4e:d7:35:23:40:a3:d8:2b:b9:94:b2:
b7:df:19:df:0d:f0:61:14:6c:76:1a:c7:26:40:1a:
7f:05:49:3f:35:4a:e0:57:cb:43:8b:88:fd:62:2c:
a4:95:2c:a4:06:32:62:b1:7e:c2:4a:ba:52:95:63:
08:65:1e:02:7e:da:e2:c1:d2:f6:a1:d8:d4:a7:ae:
68:38:6a:08:4c:cc:81:b2:51:37:1f:24:9c:52:0c:
29:1e:5a:84:51:ab:e4:73:e5:2c:88:be:8f:22:25:
0b:25:56:71:12:0e:bf:9d:1e:85:82:07:26:d4:1e:
ed:dc:3a:1e:b1:91:a9:fd:56:c7:f6:00:c3:27:fd:
53:b8:e9:54:a9:03:d7:21:bc:c0:bf:8b:6b:44:3a:
b2:23:23:f4:32:fb:e2:2d:99:e0:05:f6:ea:c8:79:
13:a8:bd:8f:6b:32:29:31:53:06:c5:22:f6:6a:c7:
86:5b:56:44:6a:15:1c:d2:df:2c:ae:51:19:0f:1f:
96:88:6b:63:53:72:53:ad:64:79:10:6b:7b:e1:a8:
fb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3F:9E:97:61:B0:BD:94:F6:55:2B:87:9D:B7:63:71:F0:79:A5:E4
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6b:fd:ed:ba:34:eb:72:05:bc:57:4e:4d:b0:49:d1:2c:b3:
ca:6a:22:42:9c:3f:71:95:ad:9e:0a:00:a3:55:1f:81:98:dd:
0d:19:33:90:63:ff:2a:2c:4f:14:5a:b9:ff:7a:78:5b:96:6d:
57:4a:c6:71:65:b9:f3:33:55:81:9c:bb:9a:34:7f:8d:56:9c:
2a:c4:bc:e0:53:39:da:0e:f6:6a:14:09:a4:11:07:ef:05:ee:
88:d3:cb:24:34:0e:72:79:27:73:f1:c1:f1:23:99:73:2a:21:
02:18:90:f3:9b:c9:93:a7:56:ae:a9:c0:4d:e0:5b:6b:9d:f7:
26:7c:6d:14:2f:e9:23:dc:18:63:cf:b1:46:96:59:c3:fb:f4:
73:d8:26:5a:51:c3:2d:01:e6:d5:68:06:57:45:e1:08:28:d2:
16:3e:62:2a:68:50:49:9d:d6:35:33:5c:b9:c1:83:a5:e9:4a:
f4:17:b7:63:d6:44:31:b9:36:59:8a:66:57:4e:b6:ad:2a:24:
94:c7:e2:11:d0:a3:38:be:60:9e:3c:36:82:84:5b:41:9f:19:
d4:f1:03:6c:02:ef:67:1d:a2:33:d4:37:d2:e3:6d:c5:81:24:
a9:e2:77:6d:4a:9a:5d:89:41:10:a1:04:3e:8b:b4:fe:0d:89:
7e:dc:62:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:48:46 2025 by rpki-client