
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: zWpDySWNzvd9a4F7jXaV8x12cR0eW0TXYWkRTQ22A3I=
Subject key identifier: 90:CF:BD:D0:5D:1E:C9:52:99:87:D2:F3:0A:CA:E2:76:CD:EB:A5:02
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 01976170D2CB47904D564ABC2062AC6BA890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 00:01:13 +0000
Manifest this update: Thu 12 Jun 2025 00:01:13 +0000
Manifest next update: Fri 13 Jun 2025 00:01:13 +0000
Files and hashes: 1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: W7XCla8uy+rvXk6y9MDqx1fnNWOG+tWPJCmXXbrd1lY=)
2: owqBee_Kxd5YjUschPQUDNZf4Dw.roa (hash: ot8KQMk3wQ6FB25/lH0yWio9yVgR4a2T0TywwiUxMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:70:d2:cb:47:90:4d:56:4a:bc:20:62:ac:6b:a8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Jun 12 00:01:13 2025 GMT
Not After : Jun 13 00:01:13 2025 GMT
Subject: CN=90cfbdd05d1ec9529987d2f30acae276cdeba502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:62:ec:3a:07:69:54:fc:74:31:98:52:97:
82:bf:da:2e:ef:45:0f:6e:22:95:1a:01:0f:88:2b:
9d:dd:78:6b:76:62:eb:b2:b8:a8:9c:40:96:46:16:
05:6a:2e:b9:99:1e:13:34:6e:a4:f7:2d:97:95:7d:
33:f2:88:53:a7:1b:b3:99:97:4c:18:4b:5f:e2:98:
ef:7f:97:ce:cd:09:86:ac:59:bd:c7:30:55:e5:a4:
d7:65:b1:3c:20:c4:bc:0d:8c:78:ee:a0:9e:71:b1:
51:9f:05:ba:f9:95:2f:7f:8d:a4:a7:44:c5:42:7e:
2e:48:60:6b:32:96:c2:c3:ae:e9:07:ff:53:ea:b5:
25:cb:a0:d8:d2:08:2a:1b:f7:0c:6a:77:dc:f1:d4:
7e:d4:3a:99:a1:b5:69:cd:ee:84:f9:2e:3e:75:13:
6f:34:da:27:90:73:fe:cf:b7:b7:ef:11:f7:34:49:
3a:a6:66:2d:d6:e4:1e:14:3e:f3:2f:1c:87:27:d5:
a3:97:7a:02:53:83:b1:67:6c:1b:8f:16:c5:6c:bc:
08:b8:0a:b5:8b:0d:8b:ae:c9:c9:6d:22:fb:e2:f0:
52:a2:fe:af:f9:31:09:65:51:26:99:4b:e4:12:a9:
b1:f0:ac:83:96:49:41:84:c4:29:f9:36:8e:f3:b8:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CF:BD:D0:5D:1E:C9:52:99:87:D2:F3:0A:CA:E2:76:CD:EB:A5:02
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:17:41:6e:a5:42:aa:d8:9b:3e:2d:cd:89:a5:ff:df:c5:58:
3f:96:09:04:f8:d0:e4:ad:44:3f:53:6d:2a:af:dc:6f:fd:be:
67:ec:9b:28:50:0f:e4:b4:40:f1:f0:04:95:e3:a0:d9:03:4c:
b0:7a:3f:2a:83:c0:90:54:e9:16:cd:b0:0d:be:c0:e9:43:60:
ad:f2:c1:c8:5d:dc:ee:75:d1:2b:67:fb:3b:90:03:dd:5b:22:
67:e3:87:e1:19:15:9e:cd:3f:70:e3:92:9f:ad:35:61:3e:ac:
20:20:9b:1a:07:f6:b3:a6:10:fc:61:e1:af:71:cd:f8:ad:e3:
69:0f:90:0d:01:52:57:d6:06:75:ad:e3:21:a1:a1:28:f3:23:
5d:00:16:c1:0a:ed:71:07:0a:86:81:f0:1e:32:2a:2c:34:8e:
e4:0f:3f:d9:6b:7d:66:87:4a:b6:9a:d0:da:1b:07:39:11:25:
15:2b:55:c3:dc:e4:5a:cd:2a:c5:e2:9e:9e:85:0f:f7:51:72:
42:24:e4:2b:3d:f3:27:e8:0d:15:a5:56:79:95:4c:4c:8a:e2:
e6:c7:76:20:0e:87:84:c8:da:35:37:82:5b:20:f4:88:b4:15:
ee:e2:90:d4:fe:3f:65:23:6f:ed:5f:f6:dd:46:49:44:87:bd:
77:3a:6c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:16:37 2025 by rpki-client