Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File: UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier: VhqU01AvIHWk4P4mwxtmzu7w2exrY+DijjgeCP5Xhr8=
Subject key identifier: BD:A4:7F:BB:1C:9A:34:F4:A5:11:2C:06:3D:C3:37:C6:70:0C:02:D7
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 019754C75F842D43602B7AAFEA2D9F34AF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number: 14D4
Signing time: Mon 09 Jun 2025 13:00:41 +0000
Manifest this update: Mon 09 Jun 2025 13:00:41 +0000
Manifest next update: Tue 10 Jun 2025 13:00:41 +0000
Files and hashes: 1: FEtsoc8GhVwS-itqE7wFwW_E2l0.roa (hash: wzhGlUkDAVqaCjdqlX0sPOVL6b9f0X/6vMu8NbyqVQo=)
2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: mnVEmir3IzOlJKRw5edld1S/yK1MjwRGtWPgBHkaRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:5f:84:2d:43:60:2b:7a:af:ea:2d:9f:34:af:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Jun 9 13:00:41 2025 GMT
Not After : Jun 10 13:00:41 2025 GMT
Subject: CN=bda47fbb1c9a34f4a5112c063dc337c6700c02d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:e5:b0:ef:9d:39:ec:49:07:68:c0:c0:d7:
d2:6c:57:da:e3:de:a3:55:d9:b8:2a:88:35:14:97:
e9:cf:cb:4c:be:81:b3:5e:b4:77:6a:a6:b5:da:94:
53:f8:61:d5:3f:27:be:d1:e4:74:41:45:56:b6:bb:
34:38:60:2d:80:bf:4d:5d:c2:06:9f:c0:e5:0e:07:
57:5f:71:ea:98:d1:53:9f:c1:ee:2f:d1:80:fe:11:
bf:e0:19:89:05:51:da:b5:0c:88:fb:4c:e5:5f:f9:
09:5c:19:48:f3:c7:aa:a7:82:7d:f6:f6:b9:cf:2b:
1c:4c:11:80:b6:59:db:b2:33:e3:8d:8f:ec:9d:99:
b5:71:f9:3f:e7:fa:28:e0:6f:df:11:90:00:c6:5a:
e2:cf:ae:00:82:d2:04:f0:0e:6c:35:ca:b6:d1:dc:
54:2a:df:44:a4:01:23:d0:c6:9e:53:36:17:9f:1b:
86:d2:6e:fa:7d:95:d4:cc:b0:0e:32:ef:5d:36:51:
67:b6:d5:91:09:3a:93:75:d5:91:31:dd:24:b9:b1:
63:dc:d4:55:93:c8:dd:17:b6:ce:eb:1d:90:64:74:
c7:1c:91:a3:43:03:9e:5d:2b:9c:42:e5:3f:e2:3a:
64:cf:92:b2:50:dd:a5:5d:31:33:63:4e:0b:bd:eb:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A4:7F:BB:1C:9A:34:F4:A5:11:2C:06:3D:C3:37:C6:70:0C:02:D7
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4e:6d:99:20:3f:64:5c:de:c3:33:22:a8:a0:c9:2f:fd:c7:
cf:bd:b8:8e:f3:5e:8d:cf:d8:38:3d:0e:23:15:81:ce:1e:f8:
a3:06:f2:d3:83:16:1f:bd:ed:7a:01:dd:8f:62:44:1b:f9:b5:
61:8a:a5:12:b7:45:f1:87:21:cd:c3:ab:9b:7f:b0:40:94:00:
f1:7e:ae:42:f1:8c:21:0e:5c:cf:3e:82:f6:ea:7d:83:54:9b:
a8:af:c4:36:94:b2:8d:9b:e8:7a:12:02:aa:07:25:54:48:0e:
c1:fc:82:6d:cf:1d:9f:c9:aa:9d:10:e6:56:ab:1c:cc:a5:6e:
87:1f:71:91:7a:0a:7b:f5:40:db:61:d7:0a:22:27:f5:0b:b1:
27:99:28:ca:9c:3e:3b:a7:d5:1b:d1:18:77:8b:ff:27:a7:78:
8c:bf:f1:72:91:8a:ef:9b:6f:bf:7a:37:31:c2:bf:f3:59:f2:
f0:c9:25:a6:ba:eb:1a:3c:16:6a:ba:de:95:36:6b:3b:da:d9:
b9:05:aa:11:20:1e:78:08:1c:f4:bd:5e:bc:f6:94:26:98:b1:
bd:00:ec:7b:d6:00:a2:55:9a:55:5c:d2:a7:45:ec:5d:45:9b:
a8:da:fd:f9:70:77:c3:a9:e0:a5:95:ab:f7:16:3d:15:ae:6a:
f1:9c:fb:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUx1+ELUNgK3qv6i2fNK9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzVjYTA2OWVhYWFhZWM3NzVhZDBhNGVhM2I0NzYwNWI3
MjhhMjUwHhcNMjUwNjA5MTMwMDQxWhcNMjUwNjEwMTMwMDQxWjAzMTEwLwYDVQQD
EyhiZGE0N2ZiYjFjOWEzNGY0YTUxMTJjMDYzZGMzMzdjNjcwMGMwMmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYTlsO+dOexJB2jAwNfSbFfa496j
Vdm4Kog1FJfpz8tMvoGzXrR3aqa12pRT+GHVPye+0eR0QUVWtrs0OGAtgL9NXcIG
n8DlDgdXX3HqmNFTn8HuL9GA/hG/4BmJBVHatQyI+0zlX/kJXBlI88eqp4J99va5
zyscTBGAtlnbsjPjjY/snZm1cfk/5/oo4G/fEZAAxlriz64AgtIE8A5sNcq20dxU
Kt9EpAEj0MaeUzYXnxuG0m76fZXUzLAOMu9dNlFnttWRCTqTddWRMd0kubFj3NRV
k8jdF7bO6x2QZHTHHJGjQwOeXSucQuU/4jpkz5KyUN2lXTEzY04Lveu/eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2kf7scmjT0pREsBj3DN8ZwDALXMB8GA1UdIwQY
MBaAFFDFygaeqqrsd1rQpOo7R2BbcoolMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1YS0JwNnFxdXgzV3RDazZqdEhZRnR5aWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jZGU3OTAtNGUzYi00YTRlLWI4NGMt
NTU2NTA2NzAyYTU3LzEvVU1YS0JwNnFxdXgzV3RDazZqdEhZRnR5aWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jZGU3OTAtNGUzYi00YTRlLWI4NGMtNTU2NTA2NzAyYTU3
LzEvVU1YS0JwNnFxdXgzV3RDazZqdEhZRnR5aWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYE5tmSA/
ZFzewzMiqKDJL/3Hz724jvNejc/YOD0OIxWBzh74owby04MWH73tegHdj2JEG/m1
YYqlErdF8YchzcOrm3+wQJQA8X6uQvGMIQ5czz6C9up9g1SbqK/ENpSyjZvoehIC
qgclVEgOwfyCbc8dn8mqnRDmVqsczKVuhx9xkXoKe/VA22HXCiIn9QuxJ5koypw+
O6fVG9EYd4v/J6d4jL/xcpGK75tvv3o3McK/81ny8MklprrrGjwWarrelTZrO9rZ
uQWqESAeeAgc9L1evPaUJpixvQDse9YAolWaVVzSp0XsXUWbqNr9+XB3w6ngpZWr
9xY9Fa5q8Zz7iw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 16:38:24 2025 by rpki-client