Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
File: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json)
Hash identifier: jsnXOOqqL10vzE9soqxajExnp9asTnVxIQRANox4KYs=
Subject key identifier: F5:AC:DB:16:6A:D6:69:BB:3D:33:1B:1B:D4:AB:3E:4E:7F:90:15:3B
Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
Certificate issuer: /CN=50480549481968d43406127653f780abbf9a117b
Certificate serial: 01984B537474F98E1764761A8693BCB3D00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
Manifest number: 134C
Signing time: Sun 27 Jul 2025 10:00:16 +0000
Manifest this update: Sun 27 Jul 2025 10:00:16 +0000
Manifest next update: Mon 28 Jul 2025 10:00:16 +0000
Files and hashes: 1: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: vq8SdS0uNac45DkVBRB/WOqv1Z/oYnZ2xCIyNO9pmC8=)
2: ieAdYhfL7YWN2SLS2f9hqBVZtZM.roa (hash: hG5CDDVlPm8IgOCRW9955aYuwC+jVZMftA53gP484x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:74:74:f9:8e:17:64:76:1a:86:93:bc:b3:d0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50480549481968d43406127653f780abbf9a117b
Validity
Not Before: Jul 27 10:00:16 2025 GMT
Not After : Jul 28 10:00:16 2025 GMT
Subject: CN=f5acdb166ad669bb3d331b1bd4ab3e4e7f90153b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:63:34:29:71:00:cb:a5:f0:7b:81:64:e1:74:
b9:b6:08:8f:5f:f3:d8:b1:a2:87:07:bb:c4:33:d4:
ef:5b:78:45:54:d5:63:64:22:16:69:36:27:ec:e6:
d2:f6:cf:bc:9d:0a:1c:d8:2a:b6:2a:e8:03:b3:be:
e1:0b:5e:a8:8b:81:fc:83:e4:d5:7a:ed:2e:1f:a8:
b8:c3:c5:ce:1b:08:9e:ef:7c:79:53:1f:ee:2a:83:
d8:e3:07:bc:83:d8:0d:62:81:ec:bd:f4:9c:23:91:
ae:9d:b1:70:82:17:cf:ee:49:1b:15:8a:fe:81:f7:
9c:30:c9:f8:c1:2f:80:cc:78:79:eb:47:62:da:65:
c3:ac:54:29:cf:db:4e:f8:b0:72:c9:ea:67:74:0d:
be:64:db:e0:69:5f:c3:f5:f8:a8:3a:7a:9f:a9:17:
42:be:86:97:ef:25:79:51:d7:33:df:6a:cd:68:2d:
fa:1a:d3:e5:b0:4a:93:a4:2f:a8:3a:09:5e:ef:5a:
68:5e:c1:93:81:cf:76:94:0c:a6:d9:44:85:37:8d:
9f:b9:5a:c9:80:26:43:53:fc:c6:63:1b:b1:b0:17:
48:8b:87:f8:dd:0c:02:6a:ae:32:6e:ed:c5:c6:e9:
9e:ce:88:e0:a8:33:96:7b:3b:d8:43:21:52:2b:06:
aa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AC:DB:16:6A:D6:69:BB:3D:33:1B:1B:D4:AB:3E:4E:7F:90:15:3B
X509v3 Authority Key Identifier:
keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1d:fe:9b:36:0c:06:22:05:b0:ec:7c:f6:2e:89:ea:bc:27:
c4:a3:17:a6:df:0b:f5:39:fb:a0:f3:58:aa:3b:a2:b4:9d:45:
93:cc:a5:7a:49:d3:0b:04:1e:3c:d1:60:86:dd:55:8a:91:ab:
43:b2:c5:0b:26:c0:b5:d6:d6:69:4d:3a:39:2c:1e:e5:d3:9f:
4b:8d:be:e6:00:46:d8:85:28:f3:05:74:36:cf:14:f2:41:9d:
04:96:23:f2:11:1e:97:33:33:23:0c:60:7b:79:96:da:f9:b6:
be:13:bb:88:6c:46:45:35:2f:28:55:9b:4a:88:7d:a5:4f:0c:
25:2f:18:95:0c:9c:16:31:68:7e:4e:c5:f6:57:9c:7c:41:3a:
a2:b4:19:fe:b9:05:46:73:1b:ec:19:4f:16:76:c6:1f:6a:25:
d0:21:29:7a:63:b2:7b:43:12:4d:f4:c1:bb:7b:9c:00:b9:b4:
c0:bc:bb:7c:79:9c:92:a6:1b:5a:26:14:48:dc:7a:4b:d9:0c:
4a:33:bc:3c:aa:69:4a:6d:4b:2b:a3:a3:3e:d6:83:77:ea:ce:
f9:5a:b8:48:70:ed:d0:79:20:e8:a4:be:4f:a7:54:27:d2:37:
1c:24:62:7c:bd:d1:e0:f0:dc:c9:95:19:1e:1f:4b:47:b9:ac:
f3:81:3d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:11:56 2025 by rpki-client