Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
File: UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft (raw, json)
Hash identifier: bDAu49pb2ipBSibEQHudoI3CFaG3fciDTOlJ9LFcZhE=
Subject key identifier: 2F:3B:32:BF:81:18:C8:4B:85:7E:0B:C1:9A:6B:92:EB:8B:B2:A8:E8
Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Certificate issuer: /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Certificate serial: 019849D30C940037AE61007E22C6C6398D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:24 +0000
Manifest this update: Sun 27 Jul 2025 03:00:24 +0000
Manifest next update: Mon 28 Jul 2025 03:00:24 +0000
Files and hashes: 1: JL64IYR_TQ5Xa-d3oTnZf7vCvf0.roa (hash: c5BJIDGV82v4laDV3iiKoaLBLmXbJfkmjmJFVhYfRik=)
2: UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl (hash: AS5Zlj6h+rMCRsi+Qn/ADSqyCDD+exl5T+uIQVQlT1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:0c:94:00:37:ae:61:00:7e:22:c6:c6:39:8d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Validity
Not Before: Jul 27 03:00:24 2025 GMT
Not After : Jul 28 03:00:24 2025 GMT
Subject: CN=2f3b32bf8118c84b857e0bc19a6b92eb8bb2a8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:03:31:99:3c:49:68:09:89:33:ea:47:32:
21:30:89:ec:64:97:42:9c:4a:f8:79:dc:61:34:d1:
c1:68:e1:48:81:b8:28:a0:da:34:88:e3:d0:75:2a:
ba:f5:38:ff:37:c0:0f:ac:ae:95:03:13:3f:b9:89:
74:c7:8c:87:55:86:1b:50:b2:b1:4b:45:84:97:4c:
ea:06:99:a6:3c:f9:58:1a:67:54:e0:be:6d:17:26:
1a:d2:d7:b6:d5:cc:3d:95:3a:23:f8:fc:4f:2d:98:
8f:4d:63:15:fd:c3:5f:44:5a:ca:37:fc:e0:83:5c:
d3:7e:f2:2c:3e:41:8f:a6:33:a0:61:45:90:44:c5:
5b:d3:83:84:03:0f:cb:62:d8:73:a7:a5:0a:55:74:
6e:69:06:51:e9:9d:82:5a:b9:70:9d:fe:98:ce:39:
52:67:d0:ab:63:3f:c2:12:29:6f:fa:8e:a2:0a:5c:
f9:b0:a0:52:59:39:28:0d:f0:ed:c9:b7:8c:61:2b:
f7:53:f1:f3:3d:fd:ab:73:45:aa:25:09:27:51:59:
bd:eb:16:ee:3c:aa:12:a9:eb:3e:7b:c8:1a:2e:3b:
e0:c4:44:fe:69:8b:cf:75:87:8b:03:0c:26:d0:5c:
0b:11:7a:41:c9:de:88:be:35:44:7b:36:87:00:cb:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3B:32:BF:81:18:C8:4B:85:7E:0B:C1:9A:6B:92:EB:8B:B2:A8:E8
X509v3 Authority Key Identifier:
keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bb:c7:fb:96:2f:50:d3:28:93:28:bc:14:f6:8e:1b:42:3a:
af:90:85:3e:a4:5f:b2:b0:b1:78:a5:18:bc:38:1f:f6:bc:91:
9b:69:4c:51:b5:60:98:25:04:a6:c3:88:bc:96:eb:b3:0a:a3:
ea:98:a5:14:85:20:20:b8:16:07:d6:f8:69:af:3b:63:47:57:
80:97:fc:2f:7a:46:9f:ee:7a:a2:ca:16:97:d5:9c:13:fb:b2:
15:33:6c:3a:19:a6:83:80:55:f5:05:a5:86:52:f4:7d:c6:dc:
b5:6e:cc:e4:b6:df:ce:bc:b9:7c:f1:10:e6:4d:55:22:51:19:
98:d0:ad:e2:fc:3b:00:f0:c4:54:6e:e9:53:c9:e2:bd:2e:3b:
7a:1f:02:e7:14:47:76:fa:77:48:98:b8:2d:fd:33:4e:35:8b:
92:f0:2b:ac:e1:23:8c:50:c9:d9:31:e7:b5:67:f4:e2:18:6d:
1b:83:62:a9:96:c3:87:e7:40:02:79:75:a3:ca:24:e4:73:75:
13:03:8a:b1:ec:77:10:65:19:63:22:a2:3a:3b:be:b4:a2:21:
be:84:40:ce:c5:75:5f:c7:b0:da:1e:5c:01:bd:e6:a5:23:a4:
22:eb:d8:fb:f0:a6:d0:e8:dd:e2:59:02:b1:eb:d7:98:21:98:
c2:ee:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:35:09 2025 by rpki-client