Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
File: UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft (raw, json)
Hash identifier: 21QyXZoSG67IU0GAiOPqk+P1DBFaW2ye0+G7uYOsBYw=
Subject key identifier: 71:6F:FB:5E:C7:0E:2C:AC:C0:D3:B1:A4:BE:81:0C:CF:9A:8A:18:77
Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
Certificate issuer: /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Certificate serial: 019745F97E222447E56BCCAA6A9FE8E76DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
Manifest number: 044B
Signing time: Fri 06 Jun 2025 16:01:08 +0000
Manifest this update: Fri 06 Jun 2025 16:01:08 +0000
Manifest next update: Sat 07 Jun 2025 16:01:08 +0000
Files and hashes: 1: IrjMrbpwOJWHpcu-zGXQDhHPwlI.roa (hash: iPtJIKNsXTuFfreJtzzF7nkT3NPZDY2s1b/5234g/2Y=)
2: UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl (hash: TskBh3WS69sQKOeq3usReT2Bz/4at7r040Jx0KQXxr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:7e:22:24:47:e5:6b:cc:aa:6a:9f:e8:e7:6d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Validity
Not Before: Jun 6 16:01:08 2025 GMT
Not After : Jun 7 16:01:08 2025 GMT
Subject: CN=716ffb5ec70e2cacc0d3b1a4be810ccf9a8a1877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:11:7f:2b:b3:f7:02:0f:f0:26:b7:e7:99:
eb:7e:ad:97:8d:94:79:75:6a:b3:02:5b:49:62:23:
c4:5d:79:98:12:2e:8b:70:b8:d6:ba:17:60:20:25:
0e:04:4b:0b:6a:ed:ce:63:a3:73:c0:ad:ec:7b:12:
0b:5f:30:e1:67:12:f9:e7:59:58:4c:e8:68:6d:40:
b8:fa:ed:c1:26:79:09:16:bf:20:ee:f9:89:06:ef:
c2:4b:24:ff:0a:14:a8:d6:29:20:03:67:07:ce:0b:
ef:b5:be:3b:12:1b:d1:2e:56:78:fc:19:d9:a4:af:
28:60:56:eb:54:85:07:bd:82:9f:d2:69:28:f8:50:
8b:80:49:6f:b2:56:f1:1f:c2:bd:7f:1b:a3:72:d7:
1a:b0:ef:fe:f3:2c:ae:98:40:d0:02:c5:17:95:70:
ca:bf:9a:e9:99:38:8a:b1:d5:79:cb:8a:72:19:25:
19:8d:f3:95:37:7f:bc:03:99:1c:0a:89:33:73:f5:
c7:cb:cc:01:80:0f:ab:11:d6:3c:33:cc:03:98:0d:
7a:c1:5f:6c:ac:40:c3:93:84:ab:95:89:fa:48:37:
a5:94:6a:74:85:43:9e:b3:22:a5:b7:34:e2:04:1f:
71:f8:e0:ad:1a:5d:55:e4:b5:65:90:11:cb:05:35:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6F:FB:5E:C7:0E:2C:AC:C0:D3:B1:A4:BE:81:0C:CF:9A:8A:18:77
X509v3 Authority Key Identifier:
keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a2:bd:a0:b2:19:9b:ac:a8:f8:7d:51:e8:3f:95:b1:8e:be:
47:c9:c7:71:ce:4d:f8:af:00:e4:d2:44:ce:17:dd:bd:79:73:
ae:2f:12:fb:f8:36:b4:28:c3:23:27:61:85:70:7a:d5:c7:32:
0c:12:d2:7c:4d:16:f0:35:29:c3:17:2d:0d:90:33:86:63:50:
34:fe:fc:e7:d8:14:d9:0e:df:53:d3:e0:4f:a7:d5:f1:ec:2a:
e9:04:11:e1:d5:4f:b7:53:5f:d3:58:21:8d:a6:aa:e4:1e:cb:
14:67:a7:f1:24:16:df:fb:91:6b:43:48:ff:8e:02:fe:e9:3e:
46:0a:2c:45:41:33:53:85:47:fd:3e:69:ef:e9:14:66:2a:46:
a7:2e:3e:aa:2f:de:28:d4:97:da:7a:9e:0c:8e:bb:f7:da:e6:
ed:a1:77:de:c1:4b:ee:ac:71:ea:8a:07:5b:ef:95:a1:25:21:
07:15:00:7d:75:55:40:41:52:b5:6e:d4:fc:f0:33:47:81:a5:
c9:75:59:a7:90:fe:71:b0:ce:df:91:b7:34:1e:d7:00:9a:a6:
b4:83:20:1f:6e:7c:88:ed:fc:7e:fc:1f:03:f1:8c:d6:38:45:
ae:d9:96:88:01:0f:5b:3d:87:9e:e1:7d:dc:0c:39:a9:dd:b7:
21:ea:dc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:31 2025 by rpki-client