Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: 0tSvpFHfqnO2PMZD41h4vT6ku17HpWh8IxyxNQmWK7Q=
Subject key identifier: 92:0C:66:A6:8B:FB:11:FF:69:C2:95:11:83:B5:2B:CF:87:8D:0D:BE
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 019923312BCE459DCFAB1713912F0C97C214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 1502
Signing time: Sun 07 Sep 2025 08:00:49 +0000
Manifest this update: Sun 07 Sep 2025 08:00:49 +0000
Manifest next update: Mon 08 Sep 2025 08:00:49 +0000
Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: 1HFmyDUgrEAQsPcHjlHfk6LKRYn/1OiKUgMOxDYoEyU=)
2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:2b:ce:45:9d:cf:ab:17:13:91:2f:0c:97:c2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Sep 7 08:00:49 2025 GMT
Not After : Sep 8 08:00:49 2025 GMT
Subject: CN=920c66a68bfb11ff69c2951183b52bcf878d0dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:df:2c:2f:46:f5:3f:92:67:1f:01:79:1a:
5f:5b:20:96:2d:4f:ef:58:01:82:fc:46:70:c4:dc:
74:02:b3:bc:58:51:51:db:af:46:97:29:c0:56:43:
75:b7:8d:20:1c:ab:74:49:fb:15:c1:40:e5:40:06:
df:ff:d3:08:0a:cb:f8:c8:5c:04:bb:cf:9b:4c:98:
76:77:3f:07:c1:cc:cf:a0:8a:28:49:e6:4c:b4:c9:
fa:f6:6d:19:02:a7:9b:38:23:17:c4:2c:c3:59:43:
0c:e7:1c:cd:e8:92:03:92:bc:6e:fe:d1:0e:f6:2e:
34:11:4f:44:ae:59:9c:0d:86:bb:22:54:0d:ef:b7:
4a:0c:2c:73:67:7c:fa:21:c5:8a:94:a6:21:ab:2e:
27:d5:32:bf:03:84:dc:61:6d:d0:b1:06:ab:6c:0d:
69:bb:5d:3a:0a:b1:df:4a:75:96:ea:82:8a:79:68:
40:51:5c:7a:93:17:d7:8b:b3:14:d2:ec:42:2c:69:
f2:1c:7b:a7:70:ae:50:85:74:9e:18:52:ae:af:eb:
1d:33:ac:02:d8:35:d6:7f:4d:4e:8b:1e:26:3c:41:
df:a9:a7:cb:ad:fd:26:ba:13:f0:4a:16:90:71:aa:
e1:ad:41:e8:ed:2e:ab:2e:18:a2:34:31:bd:5f:d2:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0C:66:A6:8B:FB:11:FF:69:C2:95:11:83:B5:2B:CF:87:8D:0D:BE
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:24:f8:5b:71:83:86:1e:5f:3b:aa:6c:86:c6:00:02:fb:3d:
ab:91:4c:b7:e9:2d:b4:be:b6:86:46:f4:40:a6:26:61:97:06:
78:25:4a:95:f4:e5:dd:39:03:17:87:a1:3a:74:50:c7:48:31:
be:9e:38:14:6a:48:e4:19:5e:a5:79:6b:c1:b0:f4:17:e1:92:
fb:96:41:9c:da:72:8a:3c:87:ff:40:52:e9:51:af:35:00:d8:
3f:8e:41:56:e8:5d:9c:56:e5:0b:a5:88:f1:8a:af:5e:75:2b:
cd:da:62:e8:f2:61:b0:13:6c:9e:cb:eb:26:75:e4:17:a6:62:
67:5f:d9:c5:1f:83:38:c1:a7:fb:1a:92:09:57:c5:d1:9e:f0:
05:1e:f6:63:44:d6:65:01:51:30:3f:7a:6a:0a:12:eb:b8:fc:
f0:49:fa:c2:3f:36:7a:5c:35:16:3d:e8:b4:0b:09:9e:48:95:
df:8a:b2:52:55:48:33:cf:18:00:10:bf:94:d0:9c:da:85:e4:
ba:a1:5f:4a:a3:fa:c0:0b:ad:ca:5d:c8:5a:17:92:f2:31:a1:
d2:75:db:7c:3a:be:0e:3d:0d:63:8e:22:89:b7:7d:13:5a:e0:
17:e4:b4:97:d7:3a:65:b7:c5:0f:e4:90:ad:81:0c:4c:b9:10:
b8:bc:04:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:48 2025 by rpki-client