Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: 88aCnZeEaWjYZynv4pKwEUuA+W12y8IYHdCTYMRW6lY=
Subject key identifier: 71:74:F5:07:51:4D:DB:8F:BE:AE:30:BA:BC:67:98:29:DF:E8:7B:25
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 01984B53C57B98A6052E065F67915489C0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 10:00:37 +0000
Manifest this update: Sun 27 Jul 2025 10:00:37 +0000
Manifest next update: Mon 28 Jul 2025 10:00:37 +0000
Files and hashes: 1: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (hash: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=)
2: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: cSGSLkUk+kkl4hy9GCrLyPeKtQ6xzVK4ceAExn67SHI=)
3: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (hash: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:c5:7b:98:a6:05:2e:06:5f:67:91:54:89:c0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Jul 27 10:00:37 2025 GMT
Not After : Jul 28 10:00:37 2025 GMT
Subject: CN=7174f507514ddb8fbeae30babc679829dfe87b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:5c:a7:28:06:f4:f2:54:ed:71:1e:28:67:
3d:7d:95:71:c4:2e:6e:fe:65:c3:2a:2c:45:a6:d4:
94:98:21:1b:8b:bc:23:2a:87:80:9e:dc:ba:84:eb:
5f:a2:42:88:4b:54:85:f5:4d:28:60:cf:3d:d9:8a:
91:f4:8b:3f:6f:f4:d1:97:9c:a3:33:62:76:bd:d6:
aa:00:90:c9:91:40:14:34:a8:e6:7e:e6:84:50:63:
71:d9:f8:96:60:6e:96:e3:d7:d3:f7:40:4e:c6:76:
93:f9:fd:7f:5d:3f:5f:37:5e:78:45:22:a3:25:3d:
f4:ee:cb:f3:31:cb:68:4c:e1:be:27:b7:d1:12:34:
f2:92:22:11:6d:8b:0f:ab:df:57:22:b7:2f:a4:a4:
f1:37:0b:30:8d:ec:46:34:53:b4:f5:00:05:61:3e:
77:06:a1:76:dd:0c:67:ed:8a:49:d7:f9:7b:cc:15:
02:7a:d5:fd:38:d8:df:97:9f:6a:4d:20:02:ac:cd:
75:09:cb:a0:66:2c:44:76:37:fa:6d:c3:ed:bc:98:
8d:74:eb:b9:4e:98:0c:9c:f2:ef:ba:59:a7:86:34:
d8:b6:ca:1e:74:2c:15:bf:cd:20:df:6a:f6:c9:a1:
11:69:05:25:7c:96:a3:94:76:bf:40:05:5d:a4:81:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:74:F5:07:51:4D:DB:8F:BE:AE:30:BA:BC:67:98:29:DF:E8:7B:25
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:70:43:ad:15:6d:e0:ed:4e:a7:31:92:d0:d1:06:6f:de:2f:
66:95:e8:61:d8:dd:b2:80:e6:18:8f:00:8b:0c:91:c2:c5:7a:
1c:72:bc:c1:54:92:36:66:3f:e3:cb:22:27:3c:62:ac:e2:24:
c0:8e:97:2b:ae:58:46:aa:b6:08:c2:2a:62:19:d4:61:93:22:
25:94:0d:cb:8c:18:88:d2:a5:8b:ce:82:2b:b1:17:92:5a:b0:
02:1f:11:3c:f4:df:c2:d1:66:58:73:55:7f:d2:ed:c3:0a:16:
7e:31:6a:b7:90:d7:46:e6:c1:b4:0f:d2:dc:f6:22:a0:b0:af:
dc:e6:02:4f:72:cd:1e:35:66:b6:f9:9d:2c:e6:9e:69:4d:9b:
bc:04:14:1f:26:4d:a7:3f:d6:f9:d6:b7:19:78:32:f3:7f:7e:
2c:ea:fd:10:6f:e1:45:20:fd:97:64:26:ec:af:44:7a:de:ab:
3d:9b:e5:82:3d:58:ed:86:61:db:e5:05:6c:8b:1c:0a:33:7a:
58:5e:3c:32:9b:5f:92:cb:92:00:10:48:f0:5f:a9:b9:70:dc:
7a:43:e8:20:cd:c1:41:2d:fa:67:bb:75:16:66:bc:49:16:a0:
25:20:b8:30:95:5f:7b:dd:c0:91:01:5e:73:6b:25:81:f9:b5:
a2:9e:16:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:38:17 2025 by rpki-client