Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
File: UPLWshZg-tH2Di350L18bM-VwxE.mft (raw, json)
Hash identifier: eMuGf5Fk85WApg79IhCY88VqTafTo5ekc6BzJN3Sv/o=
Subject key identifier: 78:5F:FC:B6:12:98:EA:EC:5D:DC:69:84:66:6F:4B:3A:35:8D:D8:4D
Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
Certificate issuer: /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Certificate serial: 019749D5A484CD0ACDB62B9A31E1692E8A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
Manifest number: 1583
Signing time: Sat 07 Jun 2025 10:00:27 +0000
Manifest this update: Sat 07 Jun 2025 10:00:27 +0000
Manifest next update: Sun 08 Jun 2025 10:00:27 +0000
Files and hashes: 1: UPLWshZg-tH2Di350L18bM-VwxE.crl (hash: f+/a3C/yPWt/TUBOD2G/vTCDA2wsI0FJ2q95zt9RvzI=)
2: jj41_vdc1pJ7_jJ7Qj3huwsGvCw.roa (hash: kWywwuZ3gFN5QXplJTXTCIOtPpLw0Ezkefc6voJQkFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:a4:84:cd:0a:cd:b6:2b:9a:31:e1:69:2e:8a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Validity
Not Before: Jun 7 10:00:27 2025 GMT
Not After : Jun 8 10:00:27 2025 GMT
Subject: CN=785ffcb61298eaec5ddc6984666f4b3a358dd84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:8c:97:9a:06:10:f4:a9:9d:dd:11:c9:e6:
87:29:7b:80:2c:49:22:62:47:d9:02:37:81:6b:35:
1b:90:ab:c6:70:c4:77:8c:53:fd:f8:71:89:90:37:
89:3a:ea:22:48:d3:52:a0:16:ca:be:0b:eb:47:af:
4d:0d:b3:46:52:93:16:9f:f7:e5:2f:d8:98:b4:f5:
4c:31:27:43:64:9f:46:51:09:9e:14:c5:1e:65:9e:
68:3b:60:a9:89:95:a7:05:22:fc:a4:d8:5f:55:f4:
94:04:9f:a5:2c:bc:77:41:84:e3:e3:c1:bc:2b:9b:
d1:4f:bb:83:f0:d3:3e:b1:93:1e:61:28:f6:b1:59:
17:b1:e8:a6:d0:49:56:be:a7:02:8c:85:ab:2e:21:
36:7a:d8:6f:8a:55:bb:6c:44:bf:b8:83:5f:dd:87:
96:18:a1:33:5a:2d:fe:19:10:e2:3e:4a:39:c0:95:
d3:77:29:e3:b3:28:27:9c:12:11:12:41:a7:52:e6:
dd:de:26:84:56:8a:0d:33:d1:1c:6d:21:ac:32:d3:
fa:cf:1c:38:03:eb:37:01:eb:9b:3d:a3:f8:a1:52:
29:8a:51:5c:98:39:28:28:72:17:66:15:4e:70:fe:
a7:2d:1f:62:81:28:5d:9f:5a:d9:37:f7:34:cc:9e:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5F:FC:B6:12:98:EA:EC:5D:DC:69:84:66:6F:4B:3A:35:8D:D8:4D
X509v3 Authority Key Identifier:
keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f8:d2:6e:22:de:49:67:b0:cf:eb:80:b2:ba:5f:6e:e4:3d:
46:40:c5:ba:53:1d:bc:0a:23:a2:af:fc:9d:54:ec:0a:5a:30:
45:c2:82:b4:e3:c1:e5:c8:7e:c8:8d:01:f8:37:bd:0a:33:b1:
b3:2b:a2:a4:23:f5:0b:3c:49:31:58:e2:6a:86:f7:4c:a7:94:
8d:72:e2:ac:18:86:2f:d4:37:a4:90:f5:51:67:cb:19:d7:f2:
7c:77:e9:55:1c:b8:ad:a1:6d:c6:41:92:4a:a2:ed:31:5f:67:
7c:ca:2c:01:98:87:fb:72:b2:21:4a:d3:c1:81:9a:ea:54:dd:
18:3f:74:02:da:b0:1b:24:fc:51:71:ad:af:57:2d:d8:d8:c6:
4b:d0:d5:b2:79:38:41:9d:b0:ea:ea:e9:b4:ad:ac:f8:e5:5f:
9e:be:39:a4:0f:5a:d1:4f:6a:46:12:54:4e:d3:6e:be:1f:78:
44:2a:6f:5d:38:9d:27:13:e1:62:85:91:2e:a2:d6:28:e6:68:
d8:70:6e:91:a4:34:86:5e:02:f6:f2:9e:bc:16:c2:d4:ea:50:
94:89:8d:70:0f:35:2f:70:1b:4c:a4:29:cd:32:ed:66:84:6e:
0c:90:bd:95:49:e7:a3:21:50:b8:0c:e7:51:9b:ad:6c:4c:8f:
6a:f8:4d:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1aSEzQrNtiuaMeFpLoosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZjJkNmIyMTY2MGZhZDFmNjBlMmRmOWQwYmQ3YzZjY2Y5
NWMzMTEwHhcNMjUwNjA3MTAwMDI3WhcNMjUwNjA4MTAwMDI3WjAzMTEwLwYDVQQD
Eyg3ODVmZmNiNjEyOThlYWVjNWRkYzY5ODQ2NjZmNGIzYTM1OGRkODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9qMl5oGEPSpnd0RyeaHKXuALEki
YkfZAjeBazUbkKvGcMR3jFP9+HGJkDeJOuoiSNNSoBbKvgvrR69NDbNGUpMWn/fl
L9iYtPVMMSdDZJ9GUQmeFMUeZZ5oO2CpiZWnBSL8pNhfVfSUBJ+lLLx3QYTj48G8
K5vRT7uD8NM+sZMeYSj2sVkXseim0ElWvqcCjIWrLiE2ethvilW7bES/uINf3YeW
GKEzWi3+GRDiPko5wJXTdynjsygnnBIREkGnUubd3iaEVooNM9EcbSGsMtP6zxw4
A+s3AeubPaP4oVIpilFcmDkoKHIXZhVOcP6nLR9igShdn1rZN/c0zJ57CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhf/LYSmOrsXdxphGZvSzo1jdhNMB8GA1UdIwQY
MBaAFFDy1rIWYPrR9g4t+dC9fGzPlcMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kMGVkZDUtNjA4Ny00YmUxLWIzNmYt
YWIzZGQ1ZGM2NzA5LzEvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kMGVkZDUtNjA4Ny00YmUxLWIzNmYtYWIzZGQ1ZGM2NzA5
LzEvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfjSbiLe
SWewz+uAsrpfbuQ9RkDFulMdvAojoq/8nVTsClowRcKCtOPB5ch+yI0B+De9CjOx
syuipCP1CzxJMVjiaob3TKeUjXLirBiGL9Q3pJD1UWfLGdfyfHfpVRy4raFtxkGS
SqLtMV9nfMosAZiH+3KyIUrTwYGa6lTdGD90AtqwGyT8UXGtr1ct2NjGS9DVsnk4
QZ2w6urptK2s+OVfnr45pA9a0U9qRhJUTtNuvh94RCpvXTidJxPhYoWRLqLWKOZo
2HBukaQ0hl4C9vKevBbC1OpQlImNcA81L3AbTKQpzTLtZoRuDJC9lUnnoyFQuAzn
UZutbEyPavhNPQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:49:46 2025 by rpki-client