Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
File: UqqgphiMl6p0LMeG47cLyQnKxEw.mft (raw, json)
Hash identifier: I/2dQEqb89IvkU8duRfpxpP9z3qPzv0tfsiiGQ6g5Fg=
Subject key identifier: 50:6F:DE:0D:30:77:F1:DC:8D:15:E9:45:10:29:C5:A1:B0:79:3D:21
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Certificate issuer: /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial: 01974D7C0BE7F1FCDABD0FCED20BD7DB31CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 03:01:04 +0000
Manifest this update: Sun 08 Jun 2025 03:01:04 +0000
Manifest next update: Mon 09 Jun 2025 03:01:04 +0000
Files and hashes: 1: FUcDBcdERXDvpSpVVtQ0MRZq0uA.roa (hash: YuEo9I5eTH3VTcnkb3/qbWIdudFx1NiVz8otO9o9G9w=)
2: UqqgphiMl6p0LMeG47cLyQnKxEw.crl (hash: +2dJE6MrJKZoOjK2zTDjD3H515y68uPwaclo0rbzu+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:0b:e7:f1:fc:da:bd:0f:ce:d2:0b:d7:db:31:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Validity
Not Before: Jun 8 03:01:04 2025 GMT
Not After : Jun 9 03:01:04 2025 GMT
Subject: CN=506fde0d3077f1dc8d15e9451029c5a1b0793d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:7d:1a:81:5e:e1:7d:eb:f3:01:3b:98:e6:
b7:71:4c:05:81:86:33:18:ce:a5:cb:86:3d:2c:19:
2b:9b:de:cb:12:7c:81:fd:26:b1:d4:f6:43:4a:04:
1b:f4:89:37:86:49:7c:7b:4e:b0:e9:05:b9:a2:ad:
33:0c:b2:92:c8:6b:21:05:da:06:2b:56:98:f7:41:
8b:44:7e:e2:a8:b2:92:0e:b5:29:00:e7:ba:b7:d7:
00:4d:7a:81:4d:fb:24:fd:e9:21:c1:52:5a:29:47:
f2:85:9a:ba:03:59:aa:30:18:18:35:df:97:d3:71:
d2:fc:f0:c9:fb:1b:6b:5f:34:1b:a2:00:bc:ac:73:
64:b2:7a:aa:ea:14:65:1b:8a:8f:36:1a:ae:d2:59:
70:68:a6:9a:39:3a:97:7f:54:9b:0e:d7:cf:c6:fd:
71:43:6e:77:14:2a:9e:30:45:75:2d:6a:cf:ea:69:
13:84:49:d7:42:94:a6:b6:85:7f:82:9d:e1:13:29:
f1:b2:02:52:7c:26:3a:39:f0:51:b8:86:9c:b0:3a:
b4:12:72:01:28:bd:94:c0:4b:58:e5:88:50:f3:94:
91:e7:1a:ab:0f:9f:f3:50:22:4e:c3:87:fc:ad:4b:
6e:e7:14:3b:99:54:a2:ef:3f:5f:f0:bd:94:90:2d:
d0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6F:DE:0D:30:77:F1:DC:8D:15:E9:45:10:29:C5:A1:B0:79:3D:21
X509v3 Authority Key Identifier:
keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:09:ce:be:d9:11:0f:22:02:4d:88:15:2f:9e:b4:bd:93:1c:
8e:b0:92:13:47:ba:94:31:f5:ac:a0:61:1d:3f:09:fb:92:34:
09:47:ee:46:41:33:88:17:88:26:00:ec:5a:0b:11:b1:02:4a:
99:fe:db:ca:3f:db:3b:22:92:ef:7a:80:67:a9:3c:2c:2b:ec:
99:8a:cf:b5:56:65:b5:aa:b3:ce:55:be:4c:02:bb:90:b4:9f:
ad:37:6e:aa:99:bf:c2:a1:bb:1b:a8:84:50:4f:4b:20:d0:b2:
4c:00:d7:6e:19:e8:c6:eb:58:cd:c1:90:ab:6a:18:26:6b:b8:
3b:b7:9d:03:b9:92:20:fd:4c:87:95:51:65:32:25:3a:c9:e1:
a4:1c:03:80:eb:6b:1d:a3:b1:af:e8:58:0c:46:22:39:42:8f:
ad:09:08:43:f6:89:73:1e:3c:c2:ee:e1:1b:69:6e:79:f1:49:
b6:7b:54:90:1f:f7:ed:36:79:56:72:c0:07:08:01:f6:eb:74:
fb:30:e9:4c:46:f3:ba:d6:1b:d3:2a:9d:9d:8d:4a:4a:a7:d6:
3a:ce:70:ff:63:5b:4b:75:01:97:dd:a4:c1:6d:22:d0:23:43:
23:65:5d:4e:9e:d0:41:03:d9:90:bb:9d:d5:79:58:23:9a:96:
e9:ca:28:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:32 2025 by rpki-client