Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: cXBR360deqQOK40SXMbfFGPZShDIwZdumedqIUjzvI0=
Subject key identifier: 40:CE:35:C8:ED:23:56:AE:0D:23:F0:51:79:D7:A0:E2:42:23:3A:B7
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 0198511E9AD8ABE60077FA535D9DFE3D0687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 160B
Signing time: Mon 28 Jul 2025 13:00:16 +0000
Manifest this update: Mon 28 Jul 2025 13:00:16 +0000
Manifest next update: Tue 29 Jul 2025 13:00:16 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: udIdOBw/Dy5INbMafhX0PChkhJ1AU3DShQesKW2T4io=)
2: aGUQW-NVaHMBg-4QWkhklY8KGK0.roa (hash: bPMaS2I+pHesJBg7bFG+Rdvd7OKl0tnIQrQv2QCj1ts=)
3: fwxt0QHyh3ttD260VFCya7TU-1s.roa (hash: 9i1HvobHCHHVWkd92tpYtwhAF4c8uqpeWhFp9/w1WdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:1e:9a:d8:ab:e6:00:77:fa:53:5d:9d:fe:3d:06:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Jul 28 13:00:16 2025 GMT
Not After : Jul 29 13:00:16 2025 GMT
Subject: CN=40ce35c8ed2356ae0d23f05179d7a0e242233ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:18:e0:cb:ae:3a:32:34:0b:09:ee:fb:b8:
1f:60:bd:6b:b9:cb:07:51:c4:98:3e:b5:7d:62:1c:
7a:a4:1e:f2:40:5e:32:3c:a0:d8:b4:87:f0:3f:5f:
14:fa:82:0d:e5:a2:e9:73:a5:2e:2b:53:30:01:09:
63:ed:ef:96:a3:71:36:21:f1:a2:cf:a4:5a:0c:48:
5e:c9:27:08:76:cf:77:c4:8a:15:1f:3e:82:9d:9a:
ba:d3:fc:12:19:b7:c7:85:d8:ba:70:c5:13:70:ba:
43:fc:48:99:23:3e:c8:03:70:62:b4:cd:b1:ea:0a:
e5:49:7e:af:f3:4b:c9:60:16:34:63:90:14:fa:ae:
e8:60:62:88:84:ea:a9:4e:95:f1:e3:74:4e:ff:1e:
7f:b0:76:11:40:7a:fe:53:13:e2:89:e1:59:c4:ac:
45:3e:72:ed:d3:dc:3d:f2:95:d5:a9:af:db:9b:43:
83:40:22:63:6c:ba:27:10:7f:b2:3b:05:69:36:8e:
8d:aa:2a:e3:75:a4:ad:93:86:bd:c7:01:e5:e5:eb:
01:52:a9:72:c7:e6:d1:14:02:4f:b4:89:5c:e2:20:
9f:d2:b8:bb:bd:66:e2:52:c3:11:36:ca:d8:84:c4:
b8:6c:95:49:78:f1:55:4f:f4:f9:f7:c8:e6:95:a7:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CE:35:C8:ED:23:56:AE:0D:23:F0:51:79:D7:A0:E2:42:23:3A:B7
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d7:d2:69:e8:1b:79:f9:94:77:00:45:90:d9:e9:8f:a9:b3:
46:c4:6d:4e:6f:a1:80:34:04:16:2b:4e:9a:d8:17:28:2c:66:
35:98:98:2b:9e:7f:ff:4d:5b:df:57:d8:3b:f1:54:24:84:53:
12:3e:c4:67:29:8f:86:25:b9:a6:62:50:d0:21:0d:3a:10:f0:
93:49:ed:95:e6:0b:b7:ce:ea:9a:ee:6c:06:6f:0f:86:22:ee:
bb:95:c8:4c:88:cb:6c:21:52:18:3e:fa:89:85:35:68:c2:3d:
0b:e6:d0:b4:46:b6:d3:a6:9a:1e:ff:97:54:98:44:1f:d2:73:
6c:81:0b:7c:55:be:03:b7:98:b7:e4:d7:0c:aa:7f:33:45:e9:
31:b9:50:b4:f0:7e:a7:dd:0a:e3:96:ca:f9:d8:e5:8a:85:20:
d2:90:4a:81:72:bf:81:b3:38:a1:b4:3c:6f:c3:a6:6d:63:bf:
00:64:01:f4:fa:a5:6c:fa:fb:81:99:25:82:1a:fb:2e:31:cd:
76:8c:4f:dc:5c:47:df:6c:03:e7:7d:7a:75:ef:65:11:50:cd:
24:a0:3e:f4:eb:fd:22:36:60:86:58:3e:93:fe:2b:2e:04:79:
50:bb:4a:89:4c:8e:f2:18:93:8b:25:00:fb:6f:68:00:1f:52:
6f:71:74:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:23:07 2025 by rpki-client