Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
File: UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft (raw, json)
Hash identifier: /077jZCPWHtR7tk/PGq4Ni0SfvA1GdlLvCf04vMgWuA=
Subject key identifier: A0:7B:A3:4B:70:FF:41:61:64:A4:1E:2C:B4:F4:73:41:CD:DB:84:86
Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
Certificate issuer: /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Certificate serial: 0198526890AF1AD69FD5A6951B3FFA0547ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
Manifest number: 04D6
Signing time: Mon 28 Jul 2025 19:00:41 +0000
Manifest this update: Mon 28 Jul 2025 19:00:41 +0000
Manifest next update: Tue 29 Jul 2025 19:00:41 +0000
Files and hashes: 1: IrjMrbpwOJWHpcu-zGXQDhHPwlI.roa (hash: iPtJIKNsXTuFfreJtzzF7nkT3NPZDY2s1b/5234g/2Y=)
2: UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl (hash: dTCRsxxj2OmfBzK60gdJBM/AFB4bl06WzX4OaRhA/Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:90:af:1a:d6:9f:d5:a6:95:1b:3f:fa:05:47:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Validity
Not Before: Jul 28 19:00:41 2025 GMT
Not After : Jul 29 19:00:41 2025 GMT
Subject: CN=a07ba34b70ff416164a41e2cb4f47341cddb8486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:28:48:bd:4d:68:6f:bc:e9:1c:95:61:c0:
90:13:76:89:ae:8a:14:c1:44:18:ef:0c:7b:b2:28:
15:1b:ed:16:48:ab:98:6e:e4:be:88:d2:2e:45:50:
d2:72:7b:fc:cf:5a:c0:34:85:b2:be:72:13:01:87:
69:d0:b4:af:90:4e:6d:05:66:07:f9:1b:de:22:f7:
a5:1a:83:56:67:57:d8:c0:b7:95:b7:c1:5c:60:11:
85:a5:66:1c:51:e4:66:fc:e8:e7:e9:20:3a:c2:b5:
59:97:bf:0e:d3:e1:5b:ec:96:af:4f:00:e7:10:c0:
4d:2e:ed:e5:53:ea:41:6f:0c:c3:78:46:89:5f:4b:
eb:4f:b8:ba:2f:19:20:3f:c9:2c:2f:15:38:32:a9:
14:ba:0e:25:55:4b:37:e4:a9:81:af:d9:f9:bc:dc:
b6:b3:6e:4a:7b:83:5d:ca:b1:5a:34:0e:f2:ef:01:
bd:c8:d7:f9:86:54:ef:49:2d:33:93:62:02:e9:53:
fe:62:37:36:f0:1e:58:be:4b:93:18:f5:e4:4e:e8:
07:e7:19:f0:0c:9a:33:78:6c:e5:9c:38:1d:19:fb:
8e:9e:03:7c:ce:e7:37:36:21:c3:99:5d:eb:7f:57:
8c:83:f1:a3:a5:69:3f:40:54:d6:a2:70:e0:c7:5e:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:A3:4B:70:FF:41:61:64:A4:1E:2C:B4:F4:73:41:CD:DB:84:86
X509v3 Authority Key Identifier:
keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fb:b5:76:41:57:1a:bf:e4:26:a8:7d:32:83:e1:ab:62:16:
67:f6:b8:bf:c1:b0:61:67:76:05:ed:d0:d1:fa:5e:f5:a7:3a:
9f:39:b5:ab:5d:ea:3e:5b:2c:3c:ae:5f:71:7a:3d:80:7a:18:
49:96:dc:af:f9:4e:13:12:5a:34:4d:57:d0:b9:3a:a8:07:7f:
33:35:d7:3a:9e:c6:70:9f:67:5e:75:0a:c7:7b:7d:35:4d:7e:
a6:9a:57:c5:d5:03:55:ed:61:71:05:32:af:9b:15:61:da:91:
40:4c:5f:c7:9f:bb:aa:3d:3c:82:4b:a4:dd:60:cb:89:e7:d7:
48:a3:f3:5a:9d:ba:8c:84:00:e6:2f:9e:f4:40:66:f4:25:f4:
2b:ec:2c:5c:9d:04:87:c8:58:bf:23:b0:44:cb:5b:fc:e7:e0:
5b:6b:32:09:52:5e:2d:f7:ad:00:67:d5:df:ed:23:66:d8:37:
2a:26:8a:ac:5c:10:35:b6:d3:8f:88:6e:a3:9f:76:a0:fd:6a:
a5:f0:bb:15:61:21:96:90:6a:71:35:bd:38:f1:70:7f:d3:b5:
01:97:47:e2:fc:34:ac:c0:8a:c1:b0:3f:84:9a:42:68:ad:3b:
cd:e6:4d:a3:6d:82:93:de:7c:e5:5b:a3:b7:95:08:90:7f:c8:
f2:b9:56:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:27:10 2025 by rpki-client