Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: nUSl0TWBTSvWYdf85bs5iy4e9tD/K7D+QVjCQ+Rx//E=
Subject key identifier: 0D:DF:99:8F:65:D3:3E:3A:65:92:84:F8:A1:A0:2B:3B:DB:8A:22:42
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 0199FF22EDD762684D8541F8C6311FEF0BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 0493
Signing time: Mon 20 Oct 2025 01:01:43 +0000
Manifest this update: Mon 20 Oct 2025 01:01:43 +0000
Manifest next update: Tue 21 Oct 2025 01:01:43 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: VvJ6XKk8FsbIlre+UJW5JZUQzzHPTHMi2A20XO0eRCU=)
2: tuLehSOy-qAFQeskzDC9g5qQP28.roa (hash: PI1JhY3WzMR4z9FpYAEO5831pX148zh5gBmaERfINeo=)
3: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (hash: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:ed:d7:62:68:4d:85:41:f8:c6:31:1f:ef:0b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Oct 20 01:01:43 2025 GMT
Not After : Oct 21 01:01:43 2025 GMT
Subject: CN=0ddf998f65d33e3a659284f8a1a02b3bdb8a2242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:8c:6b:40:de:61:60:68:90:ff:f3:e2:99:
8b:f6:fb:fc:30:21:df:d4:82:8e:07:26:71:71:9a:
bf:a8:44:9c:1a:cc:bf:24:f0:ea:87:50:b6:25:d7:
38:ab:90:26:8f:cf:9c:ba:f2:37:ac:71:7a:94:ba:
c3:fd:8e:3f:98:98:20:c6:51:42:d9:97:4b:7a:76:
ba:52:65:5f:bc:94:86:01:29:f4:43:22:1f:21:d0:
1e:41:99:5e:9e:dc:c1:a6:78:12:60:f9:97:9d:7b:
2d:d5:2d:6a:fc:af:02:25:52:0a:b0:e9:ab:d9:9c:
47:7c:9b:79:b0:4c:7d:8d:58:40:97:e4:30:88:75:
8b:ff:1c:2e:1d:6a:ab:78:be:cb:e4:33:c3:3a:62:
8a:0c:13:79:41:34:e6:07:22:57:8a:81:b2:ab:76:
ed:1a:93:c4:af:c6:99:90:80:86:70:8c:a3:84:30:
de:54:94:4a:ab:0a:b5:1b:15:bc:6c:bd:fc:3c:80:
08:d4:a7:eb:5a:db:c3:a5:72:f6:5d:a8:b8:eb:86:
97:6c:09:dc:bd:20:66:61:50:0c:a9:b6:9d:c6:f4:
db:11:49:7b:c3:a8:18:84:c5:a3:96:0f:24:b2:c8:
9b:ff:64:95:d5:b2:76:01:60:7b:5f:cd:48:a8:63:
b7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DF:99:8F:65:D3:3E:3A:65:92:84:F8:A1:A0:2B:3B:DB:8A:22:42
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f9:a2:5f:79:c4:48:58:06:c2:93:ee:f5:bc:6b:98:88:c8:
03:95:51:94:2d:e7:3c:da:b3:c2:80:4d:ed:5f:b3:08:cf:05:
cb:80:74:16:9b:43:73:e7:bf:d9:da:38:5a:bc:c6:f2:b8:11:
cc:64:8a:82:48:d4:e2:f6:b1:18:49:17:b4:5a:a7:ec:e0:4b:
fe:bb:03:a8:89:9b:c0:7c:33:59:e3:ae:42:3c:2a:b4:aa:34:
cc:4d:bb:42:40:81:9b:5b:71:15:75:36:8d:7e:e8:ce:d0:38:
f1:b0:3a:be:ad:31:c6:69:f3:0d:80:59:33:14:9a:b0:57:ed:
88:8c:07:11:7b:70:8a:56:81:26:64:15:ae:e7:b6:0e:b9:6e:
ae:5a:72:df:82:fe:0e:e6:08:25:fc:cc:c2:d3:c9:0b:0b:4e:
c6:97:61:45:a4:58:4e:49:7d:fd:80:4b:a7:b3:e3:6f:a8:ae:
26:15:26:6e:b4:f7:13:a9:92:2a:5c:96:1c:af:44:52:05:8c:
99:f2:43:01:7d:a6:b2:0e:9d:ee:b2:ed:c3:6f:20:f2:1c:3b:
94:07:c8:c5:fe:c1:12:e3:29:5c:ce:10:12:1e:45:09:c7:70:
9d:df:49:58:97:2f:e2:23:d8:80:96:4d:56:42:64:16:94:e2:
c8:bf:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:52 2025 by rpki-client