Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
File: UGVstHd9FLXrJkxrAyyLo3VvKuU.mft (raw, json)
Hash identifier: F7JkeZ/tHrZ4Ecd1JNnswS+tBQdFmoT0Xo8zYVso4pk=
Subject key identifier: B4:D5:AF:A2:F5:96:16:F8:22:89:11:AA:0D:30:3D:FF:B7:3B:2D:B1
Authority key identifier: 50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
Certificate issuer: /CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Certificate serial: 0199228CE3279DB0C0CACF5B5D4A0CAB2AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
Manifest number: 0E8E
Signing time: Sun 07 Sep 2025 05:01:22 +0000
Manifest this update: Sun 07 Sep 2025 05:01:22 +0000
Manifest next update: Mon 08 Sep 2025 05:01:22 +0000
Files and hashes: 1: UGVstHd9FLXrJkxrAyyLo3VvKuU.crl (hash: hiWKd/f8RpaTvisDdcScoBa9ikqW1E6t87a752N44LM=)
2: W9IaaIZmyaPXUAJrA0BcuxANo_U.roa (hash: pp8Xxh3yiPgDrFR6WEvs6TFsPiIHgqanQOCFWl/68Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e3:27:9d:b0:c0:ca:cf:5b:5d:4a:0c:ab:2a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Validity
Not Before: Sep 7 05:01:22 2025 GMT
Not After : Sep 8 05:01:22 2025 GMT
Subject: CN=b4d5afa2f59616f8228911aa0d303dffb73b2db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:46:84:4f:e7:e9:9a:23:d9:a5:5e:62:82:
e4:01:1f:0e:04:fd:79:8a:8f:8b:02:e5:e6:85:16:
47:56:a8:8b:0f:c4:d3:d1:20:37:69:f7:b8:b7:50:
ce:9b:57:a2:a9:56:6a:0f:54:06:42:86:19:21:c7:
f3:bf:65:1a:d6:8b:b6:d3:fb:8d:e5:32:18:81:b3:
5a:45:c9:d5:7b:60:9f:e5:9d:b6:d5:cb:3c:59:f4:
11:81:45:2f:0e:d6:7c:40:15:4d:a4:0d:95:2a:9b:
23:0e:aa:73:df:1e:da:ee:36:e8:83:4e:e8:58:38:
1b:b2:42:88:62:b6:1a:bc:77:ac:3e:db:f7:52:d8:
91:f4:ed:48:a6:a6:7f:6d:3f:5b:d5:82:ca:de:cf:
f2:00:1d:32:0f:45:6f:37:7f:97:4d:c4:03:41:ff:
ff:7d:10:a4:49:07:0b:b5:05:41:99:66:92:da:19:
71:80:05:4d:b3:62:97:d5:54:2c:9c:a6:e2:cd:eb:
e1:ab:35:9e:76:e8:34:7c:a8:22:fe:6c:39:19:c7:
50:35:a9:fc:de:75:b4:c5:2b:e7:2e:75:ec:af:db:
f5:2b:97:82:67:b7:d6:c8:aa:b7:f7:46:36:88:14:
3d:99:13:64:f2:3a:d7:2b:2b:dd:72:32:5d:9f:9b:
2a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D5:AF:A2:F5:96:16:F8:22:89:11:AA:0D:30:3D:FF:B7:3B:2D:B1
X509v3 Authority Key Identifier:
keyid:50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:45:d0:9b:61:0a:56:95:8f:c7:d7:06:23:33:30:4d:23:56:
b2:76:fa:b7:74:86:4d:bc:24:e8:dc:94:8a:f0:43:2a:b7:63:
6e:d6:fb:7f:20:f1:1b:18:6c:0a:94:a2:bf:b7:d1:ab:ad:7c:
5d:53:3b:bf:32:16:f1:40:97:ed:44:d9:84:c1:38:7a:50:86:
34:18:b5:8b:44:35:c7:7b:b9:c5:84:06:1a:c9:a2:45:d2:4d:
77:de:cc:e4:60:53:f4:50:95:82:95:65:f1:46:5b:ed:e5:38:
bb:39:8a:14:85:44:9f:6c:3d:5c:1c:d2:22:39:f5:ba:da:68:
66:94:78:5e:0d:c1:e3:5d:65:41:c9:5a:81:75:ee:12:34:96:
83:32:97:b6:4e:b9:a5:7a:9b:d8:cc:0b:bd:75:14:75:d9:d8:
24:f1:e5:dc:76:c8:01:1e:8f:1a:e4:71:23:00:1b:b9:ec:12:
0a:34:8c:79:73:dd:4d:ce:d7:c1:93:b2:dd:cd:0b:8a:25:bb:
46:0f:97:54:1b:93:fd:8d:8f:2f:4d:cc:db:e4:89:74:50:3f:
47:9c:7a:d1:c5:8e:c6:7f:e2:8a:24:10:8e:7d:8d:ca:96:cd:
ee:52:39:0d:84:a1:0b:7c:c4:25:7f:39:5f:a9:35:c0:a1:92:
02:b4:27:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:43 2025 by rpki-client