Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File: UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier: cZm7+AGzR9aETiOuIZaTuwyVWs+mdnmPjhe7rWZi0Ro=
Subject key identifier: 89:88:3E:2F:9D:A4:24:74:3F:56:FA:F4:20:10:B0:A4:E0:D3:24:79
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 0199225556F98ADE84808FAC63E7AE9DAA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number: 15C3
Signing time: Sun 07 Sep 2025 04:00:41 +0000
Manifest this update: Sun 07 Sep 2025 04:00:41 +0000
Manifest next update: Mon 08 Sep 2025 04:00:41 +0000
Files and hashes: 1: FEtsoc8GhVwS-itqE7wFwW_E2l0.roa (hash: wzhGlUkDAVqaCjdqlX0sPOVL6b9f0X/6vMu8NbyqVQo=)
2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: S2T1mrkgX6sH/wTpG6bRhmUE7VJGk0920FNg8Ftw9qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:56:f9:8a:de:84:80:8f:ac:63:e7:ae:9d:aa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Sep 7 04:00:41 2025 GMT
Not After : Sep 8 04:00:41 2025 GMT
Subject: CN=89883e2f9da424743f56faf42010b0a4e0d32479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:0a:ff:c7:46:a6:a8:c6:37:46:23:c7:d0:
ed:29:55:71:0e:65:65:b2:e3:90:b6:39:d4:db:b5:
49:ac:bd:01:a6:2e:4a:f4:3e:dd:15:f5:db:57:c3:
68:9a:b7:16:e5:10:65:f1:7f:e6:2a:33:2b:64:cc:
19:da:ae:31:37:66:ed:2f:07:5f:08:43:bd:a6:43:
58:7f:ad:6c:5e:56:4e:9b:10:9b:09:0e:48:18:00:
0b:26:1b:6e:5a:fb:68:c5:1e:c1:eb:5b:8d:5b:d5:
f5:d3:07:a1:62:42:1d:cf:25:ac:7e:ed:f6:c9:f1:
5e:18:bc:d4:e3:d0:8b:45:23:d4:44:00:1e:4c:2d:
6f:e3:09:89:bc:eb:a4:10:7f:0a:64:1f:68:fb:0f:
46:df:d9:15:92:67:a4:cd:cd:6f:d2:d0:d0:8e:a4:
02:92:e7:94:72:24:bd:c8:8b:36:56:9c:f2:2b:fb:
c0:5e:e9:2a:93:8f:0f:83:c9:8b:19:ba:d6:00:c4:
6e:c6:c5:b1:d0:ea:24:21:db:e2:ae:bc:07:a8:76:
5a:ed:3c:2d:b1:b2:36:3e:6a:bb:75:26:b0:f6:5a:
62:da:ec:71:a7:95:fe:f0:4d:11:3d:02:82:76:a5:
6e:66:c3:fc:1b:08:c3:10:30:24:f4:9d:24:e1:1f:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:88:3E:2F:9D:A4:24:74:3F:56:FA:F4:20:10:B0:A4:E0:D3:24:79
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:68:76:f1:15:11:f7:6a:6e:ba:32:52:c8:2c:b4:d8:90:c7:
fc:9e:a3:10:b0:2d:38:98:53:1f:6d:13:f6:0f:4c:a4:c1:6b:
05:47:b7:28:8d:68:74:d7:49:93:af:63:50:9d:41:dd:ff:bf:
6f:02:92:7c:e6:06:f7:7b:57:a3:c0:9b:dd:c3:08:66:bb:42:
c8:1d:9a:d4:54:d4:55:8e:76:40:db:fa:2f:89:24:88:ed:5c:
ef:38:f4:ad:6c:67:50:8e:2f:6b:36:f2:da:02:0e:eb:92:8b:
3d:3d:7c:6e:89:69:9a:06:f5:19:5b:48:3f:19:09:f4:e1:78:
f9:48:a8:ed:84:70:97:e8:e1:89:79:fb:10:ed:b3:71:f1:4d:
6a:e1:94:4f:35:ee:c1:ae:b0:44:91:86:c3:b5:c4:d3:04:90:
65:2f:5e:32:66:7f:e2:7b:92:05:b5:08:c3:00:f4:91:d3:a7:
f8:e8:3c:38:92:7e:49:19:7e:1c:54:a0:79:d2:e3:ff:84:bf:
63:a8:02:2a:dc:3a:53:7a:6d:14:06:1c:70:65:17:d2:5d:a7:
3a:7e:54:1b:65:80:bc:dd:01:8f:99:e3:e5:ac:07:71:c1:c3:
8c:a6:4d:c3:f3:f1:79:e6:40:92:6f:49:70:cd:5d:36:13:2d:
fc:c2:21:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:48 2025 by rpki-client