Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
File: UJgPtq3oWPJlLnNpkxJshXWfBtk.mft (raw, json)
Hash identifier: jpvnes8nwuX/HDL0X5ug+UNgRp8VOi5huBTyl/058OU=
Subject key identifier: 3E:E7:B3:BF:22:1D:92:5E:FA:AF:68:C8:D8:77:C9:18:AA:DB:42:B8
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 01973B3E84ACED144977522DF6DFA3433D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
Manifest number: 14DC
Signing time: Wed 04 Jun 2025 14:00:42 +0000
Manifest this update: Wed 04 Jun 2025 14:00:42 +0000
Manifest next update: Thu 05 Jun 2025 14:00:42 +0000
Files and hashes: 1: 3aqcaFvnX3K7WdJarseDjVUiXLA.roa (hash: oYUYigd9Vtvfrvv9o0boJiIVHaAtMoZ5zO4oUtqPXO4=)
2: 67knVum1wBay7k_VNa2UY1ZRh60.roa (hash: mJTVZRqj1O7LfCpRR9HxwFssov8nRBQ/WlFjuFod+is=)
3: F6thJua_pfK1T5A75geE8te-p5Y.roa (hash: qKLS4h0BBZz8S6M5TJO8nDFTOYkr36FxmU2mfQ/9+DQ=)
4: GJHaatQheZf97nB24x4JgSqBMf0.roa (hash: +FlQApNOw6BNUpMXsT14zzUVOyzFNJwvGUQalJLYj3w=)
5: GeXAjifASMWW-RetKJHYQD473Ts.roa (hash: jdnwbDBImN9RF5KlDVV7kqZXHMWrLJ35s/1hnZnwdh8=)
6: UJgPtq3oWPJlLnNpkxJshXWfBtk.crl (hash: 9FBYN3xXjvBbJN773UML5Z+GgNCiv0RuxuNluVqw3HQ=)
7: _esXnKi8frhyKxTNyBGcORNFzu4.roa (hash: utERn0OrE5EflH9UCA6W8yG+8D0yfs5f+G9H2wqQcUs=)
8: hADWb8Ul-X_A2ySCHhCgfFnA2Yo.roa (hash: iOQmVmIc5hJAt4h0ebp8fY1nzsr9aufJIFiZdvi/Vd0=)
9: yuDYBrZjhTV7uI-QS5PT6qF5N7s.roa (hash: +th6rVasBDhTDv9q3+kidlk8IPZxm2tOEsWRAh7P2ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:3e:84:ac:ed:14:49:77:52:2d:f6:df:a3:43:3d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jun 4 14:00:42 2025 GMT
Not After : Jun 5 14:00:42 2025 GMT
Subject: CN=3ee7b3bf221d925efaaf68c8d877c918aadb42b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:f8:e9:94:18:c4:96:ee:21:af:b3:0c:51:
18:37:70:b0:bf:2c:42:01:52:47:e8:e7:c3:f6:1d:
e3:de:ae:51:80:73:e4:45:11:d0:2d:57:21:c5:8f:
50:2b:44:98:b0:a8:18:33:bf:e1:9b:92:f6:6e:30:
e6:94:53:0a:de:b7:82:c2:61:ba:ab:52:fa:56:b0:
32:8d:7c:84:39:1c:b6:f4:11:71:b1:4b:e5:84:05:
1f:6a:06:8f:62:bf:a9:4a:33:f0:fd:a3:a8:19:2a:
7e:ad:59:b6:c6:65:1f:6b:09:9d:10:19:17:21:64:
fc:7c:4f:a0:5a:c5:de:b6:24:30:86:50:70:12:a7:
8c:20:57:3c:c2:15:e8:9f:6c:62:4b:32:b4:c6:fa:
50:bb:89:7a:c4:be:1a:32:61:2e:d9:47:9e:51:a9:
e2:d8:14:96:3a:ef:2d:57:0f:c5:21:3a:2e:7a:04:
08:28:67:03:ed:67:05:3b:4b:81:d0:82:7d:e9:a6:
04:39:bb:72:88:d3:32:0a:3c:ac:05:bb:db:1b:ff:
fe:e1:7e:7e:30:a7:52:9e:b3:d0:ca:c6:bc:5e:f0:
90:d8:75:b3:03:64:f7:69:64:a1:43:f3:3a:eb:d8:
4c:50:54:61:e6:99:be:19:ed:2d:85:a7:f6:ed:41:
fa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E7:B3:BF:22:1D:92:5E:FA:AF:68:C8:D8:77:C9:18:AA:DB:42:B8
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0f:64:10:49:a9:1f:01:60:b5:bd:b3:59:08:54:05:45:32:
a0:c9:9e:d5:7b:25:51:88:9f:df:36:46:23:f2:a4:b8:f8:ff:
b5:8a:5c:3a:92:ef:61:3c:53:91:a2:b2:f4:67:57:35:5a:16:
88:09:37:06:12:ad:b0:c9:71:c2:4a:03:8a:28:fe:f0:d4:da:
2a:d5:93:cd:de:03:bb:81:3e:9b:4c:76:9a:d9:6e:67:d1:4d:
82:b6:20:fe:2c:ab:63:52:c5:18:9a:a5:3f:5d:76:5f:a5:a3:
8b:01:54:e4:a7:c4:87:94:ba:19:df:d2:48:96:1c:cc:0a:90:
ee:aa:f1:57:f4:d1:4a:ad:5b:ce:a7:e4:20:7b:a9:8d:f3:5e:
db:1d:2f:b7:e3:de:45:55:be:86:1a:14:f4:51:a5:e6:6f:0e:
6a:41:33:f2:ca:83:8f:59:85:b2:71:44:07:d7:0d:2b:9e:cb:
eb:3b:82:fa:31:07:d2:36:d6:b6:4d:84:96:23:6f:54:9c:3d:
2f:56:f0:c0:80:fc:9c:ce:3c:d6:e7:b1:b7:23:ee:89:50:7f:
2a:25:a5:7b:ec:a4:54:67:7e:18:ed:7b:12:db:c2:a3:15:98:
fc:42:f7:d2:1b:86:6d:17:9a:9d:bc:b3:32:1b:08:df:2d:58:
d4:26:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:49:14 2025 by rpki-client