Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
File: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft (raw, json)
Hash identifier: N8AV+Lq53xkymOhvGq//xFlzOB9mRv9VvYErw2fG5ds=
Subject key identifier: 31:0D:64:52:A3:63:64:B8:E2:1F:30:A8:F9:33:A5:FC:CD:FA:81:BA
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial: 01974CD6F93AD597F33021CE1ED15DD75423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
Manifest number: 1573
Signing time: Sun 08 Jun 2025 00:00:46 +0000
Manifest this update: Sun 08 Jun 2025 00:00:46 +0000
Manifest next update: Mon 09 Jun 2025 00:00:46 +0000
Files and hashes: 1: 1-qC_h0BMH68nwZM--m9RrJPfUSU.roa (hash: dGjZPTTJM5HpRM58D6GZPV5SzYmb4kq7Kyp7lE449Zo=)
2: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl (hash: Sb4kNlfdZ0OkYUjIn+M9HbCceUFsZzkXAcOjeBkZgwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:f9:3a:d5:97:f3:30:21:ce:1e:d1:5d:d7:54:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
Validity
Not Before: Jun 8 00:00:46 2025 GMT
Not After : Jun 9 00:00:46 2025 GMT
Subject: CN=310d6452a36364b8e21f30a8f933a5fccdfa81ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:3c:78:96:b1:63:03:b2:19:d2:ab:87:9e:
f5:85:4a:94:01:88:d6:11:c8:5d:15:8c:48:31:87:
b8:e0:28:4a:b0:06:34:5d:d3:e4:6b:52:c7:3d:f7:
c5:34:bb:5e:50:1c:80:bd:21:3e:51:96:dc:91:3d:
d8:c9:02:8f:63:43:69:da:7b:00:ff:ee:e8:f8:a2:
c7:84:9f:e9:af:36:08:cd:11:00:54:24:e8:08:d3:
4d:a0:ce:38:e6:cd:0e:77:26:19:6a:1e:3f:ad:75:
e3:51:9d:54:15:eb:12:50:26:7a:12:33:05:77:1f:
79:24:ae:60:f9:60:88:88:e6:8a:74:df:f5:e4:24:
83:ff:74:a0:fb:c3:1c:9a:bc:c7:18:2c:ef:a0:bb:
17:ba:6f:d2:97:ea:49:05:9c:f5:61:59:d7:f9:a9:
ad:70:88:ec:81:86:fb:2f:fb:3f:8e:ce:b6:fc:1f:
d4:2a:c8:d7:75:11:cb:91:f2:ad:5a:ac:47:a3:6d:
e4:e7:27:88:80:c4:ef:c4:b2:3d:38:e7:65:02:e9:
16:f3:6c:c4:d4:56:41:42:96:a5:45:92:9c:54:92:
de:8a:22:07:2b:9c:60:f7:e4:57:8d:ca:06:d4:ba:
5a:87:95:b5:f6:7f:6a:cf:15:ae:b3:3f:3c:e6:5e:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0D:64:52:A3:63:64:B8:E2:1F:30:A8:F9:33:A5:FC:CD:FA:81:BA
X509v3 Authority Key Identifier:
keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ab:c9:75:42:8b:b0:c0:1a:25:86:37:fe:e7:99:86:54:8e:
03:26:14:31:2a:7a:96:ff:d7:7a:12:2d:09:fc:7b:0d:36:5b:
89:c7:1e:3b:15:29:1b:3d:82:33:42:65:d8:e5:58:2d:69:a0:
3e:61:eb:8e:5a:f7:d7:44:f2:2b:b8:ab:83:2a:7e:a1:82:6e:
cc:fd:e5:9d:ee:95:f1:13:e6:3d:05:57:78:10:b5:e9:2a:8a:
63:57:b4:aa:fc:5f:d7:1b:3e:a9:99:ec:14:45:50:47:e7:60:
4d:a2:47:db:9a:d8:4b:41:82:8d:f9:96:27:57:63:99:bb:fc:
29:f9:e4:ee:6e:92:7b:d5:69:8b:44:e4:09:83:81:14:37:1b:
3c:2d:89:28:4e:48:26:35:d0:57:87:dc:4b:c0:d9:3d:d6:bf:
d5:78:9b:4b:22:09:99:eb:ed:b0:f5:38:53:c3:55:01:b0:e7:
42:4c:83:df:cb:1b:99:e0:19:99:71:fc:93:04:db:ec:cb:de:
93:a7:1d:08:55:fc:ec:20:c3:d0:20:78:2d:b7:ac:76:ed:41:
c7:c8:82:b9:c6:da:6b:b2:79:40:02:3e:fe:84:57:15:43:12:
69:81:05:25:f0:12:6f:e2:02:e9:cd:d4:d6:e6:01:07:13:b3:
5e:fb:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:18:44 2025 by rpki-client