Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
File: UKiPmoNBAa34dwN6UcgdEzqpRuw.mft (raw, json)
Hash identifier: Wz9jEA1NCyfi+/Dhk5dHAmEzN4OS0itXeGYSTqnmubE=
Subject key identifier: 29:21:94:DB:D1:6F:7D:25:C6:1B:FE:60:7C:B8:CB:05:93:39:62:AD
Authority key identifier: 50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
Certificate issuer: /CN=50a88f9a834101adf877037a51c81d133aa946ec
Certificate serial: 01984B542C9699F5BF3C554B31DB45460343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
Manifest number: 0D8D
Signing time: Sun 27 Jul 2025 10:01:04 +0000
Manifest this update: Sun 27 Jul 2025 10:01:04 +0000
Manifest next update: Mon 28 Jul 2025 10:01:04 +0000
Files and hashes: 1: UKiPmoNBAa34dwN6UcgdEzqpRuw.crl (hash: mCGs0DjHnyRqUF7qN7Eth83QALrtJ2tE7haMJt/hXOo=)
2: kc-RSMe4Oew5F8NEK8PnK5Ztook.roa (hash: RrPN8D12kwMiREonpEUwGrZPp2WKXYrir6fymPU5Gvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:2c:96:99:f5:bf:3c:55:4b:31:db:45:46:03:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a88f9a834101adf877037a51c81d133aa946ec
Validity
Not Before: Jul 27 10:01:04 2025 GMT
Not After : Jul 28 10:01:04 2025 GMT
Subject: CN=292194dbd16f7d25c61bfe607cb8cb05933962ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:41:06:a8:5f:2f:0e:27:f1:ba:15:f7:2b:22:
74:4a:1f:b0:d5:e2:c6:ef:e1:4e:80:cb:2b:a2:fe:
4f:b5:34:ad:f1:69:3c:a2:c4:d0:7b:0b:46:c4:20:
70:3f:51:17:d1:ab:b3:1d:d8:5f:7a:bb:d9:49:8b:
8d:ce:f4:5e:8e:d1:1f:06:7f:3b:56:40:ff:0b:92:
90:dd:c8:b7:db:42:31:80:ee:3d:7d:08:11:3f:16:
3c:35:4c:0d:22:83:06:69:f1:1a:58:99:bc:3f:c7:
c4:44:42:86:fd:cd:f4:45:a2:23:75:6c:c3:16:89:
8e:2c:36:b6:84:28:d2:da:04:80:d1:d9:1f:f6:c4:
58:d0:96:8e:44:d1:d2:45:3c:31:b6:ad:c0:9c:d4:
8e:2e:f7:c8:55:d0:15:04:3c:34:c8:14:f1:14:48:
81:18:dd:b6:03:7b:e5:74:dd:94:93:06:14:30:d4:
10:ee:ce:45:e2:85:f5:27:13:c3:7f:0f:b7:1a:71:
00:52:85:8b:72:f3:09:1d:b3:3b:d9:87:2e:7f:54:
04:b6:ba:a1:b7:4b:17:80:bf:ad:65:b5:e6:14:58:
b4:a2:48:3d:a9:41:67:d5:d4:5a:57:1c:91:c8:e3:
74:3d:74:f8:78:d5:1d:43:77:0e:45:f0:ef:ab:5a:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:21:94:DB:D1:6F:7D:25:C6:1B:FE:60:7C:B8:CB:05:93:39:62:AD
X509v3 Authority Key Identifier:
keyid:50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:23:3e:a8:e3:92:8d:95:8f:2a:f8:62:67:19:86:e3:75:30:
25:ec:8c:3e:47:99:fb:b7:1f:bf:ca:f0:c2:bd:90:5f:29:26:
94:89:f8:a4:ee:80:70:5b:97:f2:2b:3f:17:e4:09:da:47:36:
67:aa:b0:6b:3f:d0:76:b8:35:06:c5:3e:40:a8:c3:63:d8:42:
07:2c:dd:2a:df:f8:21:73:ea:44:61:0d:8a:c9:76:78:c0:76:
c1:ce:c4:3d:c1:12:81:f8:2a:ba:97:bd:d4:01:cc:b3:cd:18:
a1:46:95:09:c5:a6:3e:b0:f7:0b:c6:03:08:13:8c:75:6a:4f:
f7:c7:e7:6e:8d:df:73:0e:05:5a:0b:54:a3:48:c0:af:8d:2e:
11:98:f3:81:6a:53:47:c0:16:6e:b4:f3:2e:4b:91:dc:73:e8:
f2:0f:24:14:fe:7d:e8:3e:40:d7:20:aa:98:21:28:21:7a:23:
0b:f5:68:aa:76:6f:10:02:5d:67:22:c2:1c:ef:2c:99:6a:d4:
af:91:4f:36:46:09:05:fe:e3:3b:5e:98:9c:97:7a:60:b0:61:
86:59:e2:ff:d6:5d:9f:25:86:3a:c8:99:4c:16:61:9e:0c:cd:
4e:24:29:96:69:96:9d:d8:4e:ee:8b:89:1b:87:a2:5c:91:13:
2f:c9:bc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:46:30 2025 by rpki-client