Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: gT6HL4IdkW9sROmL+pB6SgPZ2JUGPcTzWFaQSHqrjvo=
Subject key identifier: 8A:E4:97:AD:78:E3:26:3B:1B:07:AA:07:0B:E1:0E:DA:A7:80:6A:70
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 0197481E4558BAD0DF17316E6EA77673A927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 140C
Signing time: Sat 07 Jun 2025 02:00:32 +0000
Manifest this update: Sat 07 Jun 2025 02:00:32 +0000
Manifest next update: Sun 08 Jun 2025 02:00:32 +0000
Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: g+8NdmA2TK/srpaO8Esw0LjdqF6NUXoLDPZuW/vgrnU=)
2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:45:58:ba:d0:df:17:31:6e:6e:a7:76:73:a9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Jun 7 02:00:32 2025 GMT
Not After : Jun 8 02:00:32 2025 GMT
Subject: CN=8ae497ad78e3263b1b07aa070be10edaa7806a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:1c:ec:bb:23:bb:f3:6c:b8:2b:01:e1:a6:
6b:a6:56:59:60:6b:77:98:8d:9e:64:cf:0c:49:8f:
3b:7d:32:e5:e8:c9:57:0f:2e:31:cd:6c:78:d4:2c:
c8:96:af:87:d3:7c:f1:35:6f:36:3c:26:6a:13:9b:
05:23:ae:25:1b:83:b9:e4:1f:5c:d2:75:56:8b:ed:
9c:b2:98:12:e8:14:12:92:b7:13:6f:0c:28:fe:12:
43:9c:8b:28:44:fa:9e:a4:fc:4a:cd:8c:a3:b4:66:
0f:60:da:ff:af:22:85:81:0c:04:18:f8:f8:ae:00:
31:f0:16:27:94:13:31:47:a7:1f:7b:83:c9:fb:b4:
34:8f:ea:57:d0:1b:4f:d9:a6:f7:7f:01:4a:c6:db:
b4:2b:55:e4:7e:38:27:80:90:51:c7:4a:cc:31:cf:
6a:f8:e0:76:7b:0d:b5:c0:d7:09:17:b6:80:74:8c:
3b:e2:fa:09:4c:11:d4:4e:9d:5d:1b:99:25:38:a6:
4d:4b:dd:17:06:a8:56:8d:bb:62:61:82:06:2f:ea:
20:e4:43:d1:64:91:0c:79:9f:9e:d5:97:0e:65:d7:
73:63:0e:37:17:89:69:ff:c0:b8:8d:16:1d:2c:3e:
9e:f2:06:6f:ea:e2:4a:96:7f:d6:5a:50:47:da:c9:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E4:97:AD:78:E3:26:3B:1B:07:AA:07:0B:E1:0E:DA:A7:80:6A:70
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ae:80:44:4c:22:7d:7b:14:21:86:aa:1e:d4:9e:22:0f:9e:
1f:85:0c:ba:25:af:5d:4b:2e:bc:b5:d6:f2:bf:4b:3b:fb:ee:
cc:4a:62:23:c5:fe:2c:06:9d:fa:53:96:16:8b:d8:f3:49:ad:
e4:de:6c:b7:70:b2:a8:83:cf:cc:0c:a3:84:99:c1:14:39:78:
54:62:c0:a7:70:f5:47:01:23:f6:de:b7:46:4a:84:ef:1c:95:
a2:26:1e:7d:e8:30:06:60:7f:a0:46:29:74:a5:e9:1e:5e:81:
5f:8a:1f:b1:82:a5:94:07:c7:b2:e8:f3:0f:6e:75:05:d3:88:
df:9d:18:96:58:52:1e:d1:c7:41:1f:9b:fa:2d:34:9d:89:e4:
57:db:dd:00:63:b1:66:5d:1c:93:a0:4e:59:00:07:4a:4b:22:
f8:34:4a:f1:29:9e:54:3f:3b:5c:30:1a:b6:a1:c7:97:27:80:
4e:14:64:c4:74:57:de:75:5c:9c:92:6d:7f:40:54:c6:22:44:
6c:34:fa:a2:21:70:4b:29:a5:5e:76:1c:84:99:ea:42:de:15:
ad:e7:88:d3:27:c4:d8:18:34:88:8f:66:f2:79:42:45:43:89:
62:0b:09:60:f4:69:56:2d:f5:a6:60:e8:40:49:3a:a8:ce:16:
3b:bb:19:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:33 2025 by rpki-client