Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File: UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier: 18cjre8toawgTBCBdcxRNUwBLprS9WOw9GVKGO/mA3A=
Subject key identifier: E9:C3:68:F4:33:84:06:41:E3:63:76:F5:57:67:33:93:CE:19:36:EE
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 01975E6F8778776AB5D4B3F56C49D4737C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number: 14D9
Signing time: Wed 11 Jun 2025 10:00:56 +0000
Manifest this update: Wed 11 Jun 2025 10:00:56 +0000
Manifest next update: Thu 12 Jun 2025 10:00:56 +0000
Files and hashes: 1: FEtsoc8GhVwS-itqE7wFwW_E2l0.roa (hash: wzhGlUkDAVqaCjdqlX0sPOVL6b9f0X/6vMu8NbyqVQo=)
2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: VT99+1lel6bw5soZLBZ1OP5Vvtzu0qRmGLwJwLhVo1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:87:78:77:6a:b5:d4:b3:f5:6c:49:d4:73:7c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Jun 11 10:00:56 2025 GMT
Not After : Jun 12 10:00:56 2025 GMT
Subject: CN=e9c368f433840641e36376f557673393ce1936ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:7a:0d:02:4f:a5:f9:74:14:e1:2d:5c:4e:
94:be:c5:fc:45:1f:3d:05:bf:d0:43:07:33:b3:df:
9e:d6:78:d3:ef:c4:0c:37:9f:18:ef:e9:95:6e:65:
0f:cb:a5:ed:2f:54:2c:b6:c5:ea:6f:a1:b8:20:5f:
02:72:61:cb:e3:29:a9:5d:0e:ed:d8:84:47:d2:9a:
69:4f:af:54:51:b3:4c:dd:76:13:91:3e:69:48:b8:
58:da:4b:0d:39:0a:30:ff:5a:03:03:06:8b:17:bf:
e2:0e:97:e5:10:8b:1e:ec:09:58:c7:ed:7e:b3:f7:
e6:b2:fe:d1:30:af:d9:c3:fc:b3:98:ae:48:3b:37:
f2:f7:f6:40:6a:ce:64:1d:5a:7d:4e:24:f4:89:ba:
24:39:b8:99:0b:2f:c8:4c:79:da:88:e9:59:58:29:
d0:38:76:80:69:a0:ea:84:c7:3f:bb:51:3e:2f:fa:
86:8d:3a:04:c4:f1:16:a6:2e:1b:13:6b:ca:77:d9:
91:49:fa:de:40:72:e8:9d:f6:55:0b:97:ad:c1:05:
22:56:29:75:ed:c8:31:8c:ac:c1:0e:a7:1c:78:97:
6a:b4:e9:48:76:8a:a5:d5:69:2d:69:6a:e4:60:40:
9b:1e:46:28:8e:bc:e6:e6:86:3a:a8:ac:87:49:f0:
e5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C3:68:F4:33:84:06:41:E3:63:76:F5:57:67:33:93:CE:19:36:EE
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:84:41:66:d8:ea:f9:73:2e:ae:e8:37:9c:b4:3f:e8:41:3a:
18:8a:14:4b:ac:b3:2b:2e:35:bf:61:8a:e4:40:27:a7:45:e6:
c4:45:6c:23:25:0e:93:73:11:80:36:a7:fd:01:f3:1e:cc:d0:
57:e1:2e:f2:e6:a4:af:d2:7a:25:43:88:77:36:de:6c:81:be:
48:39:2d:a5:42:23:f7:69:d5:20:5f:d0:1a:f2:cb:1d:34:71:
74:3d:1d:c7:f8:40:15:ea:79:d3:64:da:7f:7a:df:62:1e:dd:
df:f7:a8:f7:c2:8a:76:cd:08:81:e8:bd:a3:8a:17:50:78:74:
5e:3a:c3:03:3e:ac:b2:24:a7:df:0b:b5:8d:a8:4b:e6:e2:18:
ea:15:5a:25:b4:9c:56:b4:97:ff:a5:f8:13:f9:5d:9d:17:9b:
5b:41:53:38:c9:e0:e5:28:35:75:58:5e:5b:a0:f8:28:ce:02:
25:bf:7e:ff:a6:0e:55:3e:ad:8f:03:a7:85:e1:5d:d5:b5:66:
ae:77:ce:ba:f9:f2:ac:0b:32:ac:93:2a:2b:ba:ca:98:8a:e7:
1b:3a:bd:b0:7b:5c:07:e7:d8:b6:97:9e:1c:8d:f6:f2:2b:d8:
61:9a:27:3a:38:85:d2:7e:ec:27:93:87:81:6a:32:b7:46:0c:
d0:6b:70:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdeb4d4d2q11LP1bEnUc3yHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzVjYTA2OWVhYWFhZWM3NzVhZDBhNGVhM2I0NzYwNWI3
MjhhMjUwHhcNMjUwNjExMTAwMDU2WhcNMjUwNjEyMTAwMDU2WjAzMTEwLwYDVQQD
EyhlOWMzNjhmNDMzODQwNjQxZTM2Mzc2ZjU1NzY3MzM5M2NlMTkzNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNJ6DQJPpfl0FOEtXE6UvsX8RR89
Bb/QQwczs9+e1njT78QMN58Y7+mVbmUPy6XtL1QstsXqb6G4IF8CcmHL4ympXQ7t
2IRH0pppT69UUbNM3XYTkT5pSLhY2ksNOQow/1oDAwaLF7/iDpflEIse7AlYx+1+
s/fmsv7RMK/Zw/yzmK5IOzfy9/ZAas5kHVp9TiT0ibokObiZCy/ITHnaiOlZWCnQ
OHaAaaDqhMc/u1E+L/qGjToExPEWpi4bE2vKd9mRSfreQHLonfZVC5etwQUiVil1
7cgxjKzBDqcceJdqtOlIdoql1WktaWrkYECbHkYojrzm5oY6qKyHSfDlAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnDaPQzhAZB42N29VdnM5POGTbuMB8GA1UdIwQY
MBaAFFDFygaeqqrsd1rQpOo7R2BbcoolMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1YS0JwNnFxdXgzV3RDazZqdEhZRnR5aWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jZGU3OTAtNGUzYi00YTRlLWI4NGMt
NTU2NTA2NzAyYTU3LzEvVU1YS0JwNnFxdXgzV3RDazZqdEhZRnR5aWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jZGU3OTAtNGUzYi00YTRlLWI4NGMtNTU2NTA2NzAyYTU3
LzEvVU1YS0JwNnFxdXgzV3RDazZqdEhZRnR5aWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoRBZtjq
+XMurug3nLQ/6EE6GIoUS6yzKy41v2GK5EAnp0XmxEVsIyUOk3MRgDan/QHzHszQ
V+Eu8uakr9J6JUOIdzbebIG+SDktpUIj92nVIF/QGvLLHTRxdD0dx/hAFep502Ta
f3rfYh7d3/eo98KKds0Igei9o4oXUHh0XjrDAz6ssiSn3wu1jahL5uIY6hVaJbSc
VrSX/6X4E/ldnRebW0FTOMng5Sg1dVheW6D4KM4CJb9+/6YOVT6tjwOnheFd1bVm
rnfOuvnyrAsyrJMqK7rKmIrnGzq9sHtcB+fYtpeeHI328ivYYZonOjiF0n7sJ5OH
gWoyt0YM0Gtwpg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:49:41 2025 by rpki-client