Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: 7GvkqvW9SVV0ZOuFDefIt2qhtV0/6aj668nBmw/mTmc=
Subject key identifier: 40:D6:92:FB:93:A5:25:F1:36:60:E3:45:47:AA:BF:71:AA:F8:36:96
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 01984A41859740031CE438ACC71C42CF2BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 023D
Signing time: Sun 27 Jul 2025 05:01:04 +0000
Manifest this update: Sun 27 Jul 2025 05:01:04 +0000
Manifest next update: Mon 28 Jul 2025 05:01:04 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: Ia+1L3GHijv433CVrgeZZOiSc1My6mt/Q5jFFxg9SdE=)
2: kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa (hash: bpCrbxr/pNjdQZDOcvXUOPJK/8m01DTiWBCnp2w78BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:85:97:40:03:1c:e4:38:ac:c7:1c:42:cf:2b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Jul 27 05:01:04 2025 GMT
Not After : Jul 28 05:01:04 2025 GMT
Subject: CN=40d692fb93a525f13660e34547aabf71aaf83696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:84:d5:68:22:19:7c:9c:e9:6a:6f:37:5a:cd:
8c:33:b9:62:a9:6d:cb:f6:28:58:1b:0b:fd:25:b5:
1d:77:44:fa:af:db:47:8f:5a:f2:8f:88:59:e4:12:
69:8b:60:8f:b3:e1:e4:a0:b5:19:5d:c6:7f:64:77:
b2:dd:6a:15:82:bc:a8:06:99:27:36:6c:9f:49:ed:
8e:1d:d8:f2:49:ab:41:50:15:d8:cc:a5:1d:c3:32:
bf:ff:88:a5:73:56:22:b7:10:66:d2:4c:35:87:b3:
30:14:fd:90:74:fa:7f:64:74:c9:b9:36:f5:d3:b3:
e8:01:8b:c6:cd:d7:ae:1f:38:17:d9:32:03:59:24:
44:a1:35:17:96:6d:e8:20:ee:d0:36:29:fe:c7:86:
df:f0:5f:f6:9b:ea:73:df:2a:e2:53:96:81:d9:df:
1c:5d:93:6e:2e:d6:cf:9c:d9:85:a6:27:58:8b:b1:
ab:6a:2c:47:00:60:3e:20:de:8f:01:49:97:a3:0a:
74:fe:5e:61:e2:41:6a:5e:2c:68:f5:86:2a:f6:a9:
8d:84:74:a6:8f:bf:ad:10:d9:47:4e:f5:ac:d7:e3:
e0:3b:38:c4:64:e3:f1:9d:96:60:db:71:26:3f:87:
92:94:da:b9:d7:4c:c8:d1:38:c7:a9:d9:35:7f:4a:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D6:92:FB:93:A5:25:F1:36:60:E3:45:47:AA:BF:71:AA:F8:36:96
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ec:26:25:c7:ce:39:5e:16:8d:a2:15:5b:cf:49:f1:93:46:
76:e4:28:c8:55:52:8a:40:de:ad:f4:29:b8:a9:35:a8:d0:49:
4f:ea:59:9d:d5:17:49:0a:c0:18:9c:26:5d:9d:3b:61:fd:c0:
c0:5b:5a:ba:40:de:9a:de:d8:0c:84:c8:27:02:de:b7:6c:8c:
db:91:ad:18:ce:d6:48:9e:6e:2e:ad:a3:a7:b8:93:2e:22:bf:
6b:77:c2:1f:92:3c:36:ef:cd:8a:48:d1:20:4c:3e:af:69:67:
75:72:f2:7f:0f:f7:24:c3:de:5d:b0:80:c4:fc:ca:7e:e3:85:
67:d7:b9:7f:0d:5d:ee:ba:a5:1d:7b:70:47:a2:c5:15:e8:70:
ef:9a:53:cf:be:f6:88:3c:54:99:cc:4f:fc:05:92:a4:db:62:
da:8b:b5:e3:68:63:d1:16:28:ae:5e:bd:0c:b2:08:67:95:f3:
d3:8a:34:56:2d:22:9a:be:16:f4:a3:27:c0:5b:f7:23:43:75:
37:f2:7a:0a:07:6d:13:40:23:7e:5f:7e:37:7b:db:6a:e0:8c:
94:a0:8a:a0:2e:53:f6:54:29:14:aa:14:97:77:ab:17:73:c4:
24:79:f3:ed:5a:0e:95:d7:8f:81:d2:3b:3a:27:d6:21:1e:6d:
d6:50:f1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:04:15 2025 by rpki-client