Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: q78akFyw35XskzIM6yOfSyrFG90zTurmzhQUKbOajFM=
Subject key identifier: 21:DE:FD:C8:2C:4A:39:A6:DF:2B:13:FB:4C:63:DB:7D:11:B8:D6:63
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 01993123B5A0ACC13161C1CB423CD41C3B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 12A0
Signing time: Wed 10 Sep 2025 01:00:47 +0000
Manifest this update: Wed 10 Sep 2025 01:00:47 +0000
Manifest next update: Thu 11 Sep 2025 01:00:47 +0000
Files and hashes: 1: E_VTiATzUgc2DhxvquhHUq4XjMM.roa (hash: QY5XIJ7ljEf/JGfsfFT7Yois/7EOyZU9vkUnS75efNE=)
2: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: MHc+kSCHJN05BTZ1yIimhKaQixiQTIvWOXK6xjQ2Cbw=)
3: wCetPnuHXvivZcvg-nB5WG2XhQ4.roa (hash: 4Yh74lr3J9wyGwv+2vpPjVGwW6ZzDVQ5vG1BmfHb1Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:b5:a0:ac:c1:31:61:c1:cb:42:3c:d4:1c:3b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Sep 10 01:00:47 2025 GMT
Not After : Sep 11 01:00:47 2025 GMT
Subject: CN=21defdc82c4a39a6df2b13fb4c63db7d11b8d663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:a5:41:e0:45:14:d9:d8:0d:ae:d3:9a:48:
54:f6:67:48:a0:5d:32:7a:24:6a:58:ec:dd:cb:c8:
05:43:14:04:84:f4:a8:78:44:c5:a8:09:25:bb:0a:
28:6e:b7:f8:d9:d2:f1:f8:7f:d9:40:72:69:8b:79:
60:fe:98:8a:d5:cb:f2:a2:9c:3f:90:9f:1e:33:d0:
de:8e:7e:2e:d3:ca:7b:d1:f8:c3:8b:03:a6:49:3d:
89:14:40:51:ed:92:47:cb:03:da:a2:da:9f:16:90:
58:fb:47:d9:03:88:08:b5:d6:93:e3:db:c1:3b:8d:
b5:d2:90:aa:13:59:55:0e:76:92:ee:d0:52:fc:fd:
2b:b2:12:d9:17:84:71:36:01:5c:e5:27:7f:77:06:
f1:e8:b2:80:59:71:41:00:5a:82:33:05:b4:9f:2b:
b3:d1:78:d9:f8:df:c6:20:e6:93:66:f5:00:eb:6d:
02:73:7f:1e:a4:f6:0a:5b:ca:30:34:d7:e2:53:1a:
8d:2e:0d:e1:43:35:37:25:a8:fc:fe:ad:bd:5d:4f:
76:2a:c6:f7:86:bc:fe:6d:24:b8:f6:00:41:d1:37:
1f:65:b1:12:b3:f5:57:f8:24:dc:07:53:f2:ba:b6:
d4:bd:f5:45:5b:50:a4:46:6e:6e:b5:3d:ae:72:a9:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DE:FD:C8:2C:4A:39:A6:DF:2B:13:FB:4C:63:DB:7D:11:B8:D6:63
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:92:b4:48:66:f0:70:8e:22:e3:e1:ce:01:4a:67:27:6b:35:
49:b2:90:2a:2a:60:1e:f3:e3:fa:fb:c8:36:23:cf:8f:83:63:
9c:23:f2:70:7b:6b:fc:7a:bb:c7:58:69:65:31:e1:d4:28:93:
c3:8a:61:e8:36:2b:fd:cb:f4:96:80:f5:23:16:c5:ae:94:65:
54:83:af:07:3b:d7:38:ba:77:e4:04:5d:60:d1:95:e8:1b:47:
5c:1e:39:2d:16:be:c7:91:6b:b1:35:bf:62:08:bd:3f:b8:8b:
c2:d1:f2:c0:47:bb:a0:18:df:6f:5a:57:15:7d:67:c0:5c:25:
48:02:53:d4:59:24:97:fe:3d:e8:57:d5:05:c6:aa:cd:b3:0d:
b2:72:68:5f:c3:6b:94:2f:df:65:68:76:51:4a:26:47:80:04:
4d:37:bd:3b:a9:67:b2:68:b5:e5:5d:a6:ae:da:76:b6:6c:e6:
3a:07:55:e6:8c:26:2e:b9:f5:0c:55:19:37:da:e8:2a:e8:d4:
27:53:1f:61:95:59:a0:ed:7f:44:65:f3:a9:74:fe:f7:bd:2d:
83:1e:02:ee:65:2f:73:0d:7d:37:24:60:cc:bb:97:e2:cd:ea:
9f:df:50:47:82:2b:ea:ad:a9:29:0c:54:8a:72:eb:a8:7e:48:
77:ad:8c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:39:25 2025 by rpki-client