Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: ljmEDvSY0izA7Sw0Z6NB/03EchVS4/11VArna6yu25o=
Subject key identifier: C4:2C:E2:22:68:17:50:A0:04:FF:D1:01:29:A1:37:9A:96:44:A3:11
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 019757C8735F57EE775665BF439AD7551AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 11AB
Signing time: Tue 10 Jun 2025 03:00:43 +0000
Manifest this update: Tue 10 Jun 2025 03:00:43 +0000
Manifest next update: Wed 11 Jun 2025 03:00:43 +0000
Files and hashes: 1: E_VTiATzUgc2DhxvquhHUq4XjMM.roa (hash: QY5XIJ7ljEf/JGfsfFT7Yois/7EOyZU9vkUnS75efNE=)
2: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: 31SLx/exlsSQVkfXhMqnerhTMWUQ69bplqGsnSbH+eY=)
3: wCetPnuHXvivZcvg-nB5WG2XhQ4.roa (hash: 4Yh74lr3J9wyGwv+2vpPjVGwW6ZzDVQ5vG1BmfHb1Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:73:5f:57:ee:77:56:65:bf:43:9a:d7:55:1a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jun 10 03:00:43 2025 GMT
Not After : Jun 11 03:00:43 2025 GMT
Subject: CN=c42ce222681750a004ffd10129a1379a9644a311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:c6:d6:67:03:55:89:71:20:1f:83:10:ff:
25:b4:7f:95:a2:e9:17:12:e1:c2:47:22:85:a7:9f:
98:52:a6:20:68:a1:0d:2b:b4:5b:3c:81:5a:95:24:
e9:f7:07:10:67:76:70:cf:3e:91:b5:94:6b:a4:31:
16:d3:5a:8b:38:cc:71:4c:a1:26:d7:e8:7a:d7:11:
5c:34:4d:7e:ef:31:bd:69:ca:e8:f3:a9:10:0b:e4:
7f:48:06:6b:27:ca:de:4e:97:00:cc:e5:47:5e:f9:
d6:1e:0c:6e:c9:1c:9b:7c:e8:97:08:ee:87:8f:7e:
9d:b5:4c:98:71:41:75:5a:5d:5b:b0:24:34:81:b7:
79:9a:68:e3:5f:cc:c6:2b:01:13:e3:47:af:53:92:
c0:10:80:5e:b8:70:53:98:e1:7a:7c:23:fd:a0:95:
29:da:30:4e:77:1c:ae:62:a0:eb:1a:d4:27:8f:96:
a6:27:5c:e4:f1:55:d7:1a:73:0e:fb:da:6f:d7:c7:
95:2e:7b:46:4f:ab:df:46:10:64:e7:8a:a0:32:41:
04:3d:69:c7:82:1d:57:d7:19:fd:56:65:ec:cc:9a:
dc:8e:65:58:12:48:13:37:9e:15:fc:00:6b:af:b7:
cd:31:97:31:d2:5e:d7:c7:d9:0f:c0:a1:56:cb:76:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2C:E2:22:68:17:50:A0:04:FF:D1:01:29:A1:37:9A:96:44:A3:11
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:87:76:3f:96:88:7a:77:24:64:69:ce:dd:1d:68:b8:f5:8b:
22:01:b9:1c:77:b4:85:f2:5c:08:9b:89:eb:9f:19:36:66:3b:
1d:44:7d:ef:72:b7:37:03:33:76:a6:dc:05:c5:40:b8:89:c6:
33:fc:be:60:73:27:db:04:60:57:cf:93:87:86:96:6a:a6:d4:
0a:d5:35:c7:df:28:8b:f8:8c:9c:f5:92:87:53:fa:3b:3a:55:
8a:03:8d:52:88:1a:ee:97:90:06:7e:a7:58:eb:59:fc:be:4f:
f5:14:e2:ce:2b:90:27:b1:8f:c1:ca:d4:42:7f:77:61:21:ee:
a6:a5:39:68:b9:3a:5e:fc:e8:31:61:87:a4:f3:cd:ac:32:90:
a4:3b:16:78:57:ce:76:6a:a1:20:39:43:25:5a:85:cc:13:83:
98:7e:80:67:24:c2:51:34:1b:69:8d:0f:14:e5:b1:1d:91:02:
43:45:c3:4f:82:64:43:be:68:18:96:c5:fb:ff:b9:4d:2d:a6:
5b:7c:98:8a:ee:ca:4c:d7:46:67:95:f9:da:ec:15:e4:9a:fc:
e0:da:f6:2b:47:75:a5:2d:75:2d:d5:da:cf:87:7a:5c:d8:bd:
c4:4a:62:9c:33:a7:54:fb:45:32:6d:75:7a:4d:44:ab:d3:6a:
f0:c2:8a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:15:47 2025 by rpki-client