Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
File: UA2xcVBSJTv1I_FAufVjehHV6a8.mft (raw, json)
Hash identifier: pe93SB+cYiMDAVyUoo5moJIV9GYH4MXMJUsSxvEErwo=
Subject key identifier: E9:8B:29:AA:5F:11:DF:F7:EC:5B:B2:D9:F4:81:CB:AE:6D:FD:0B:2B
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Certificate issuer: /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial: 01974855017078CAAE2FAE1BC61113A44BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 03:00:19 +0000
Manifest this update: Sat 07 Jun 2025 03:00:19 +0000
Manifest next update: Sun 08 Jun 2025 03:00:19 +0000
Files and hashes: 1: CYNP6vN-qElEU6kqxQQrlgtjw0E.roa (hash: 50zm/kAB1hENUbgpvzJQwq1lkvUVeWylyOULFWpoN/I=)
2: UA2xcVBSJTv1I_FAufVjehHV6a8.crl (hash: dolUU3fcRJ+Q8ErHHxAGqOf0HVZik+CUPDlBEPgIQjY=)
3: pSWgXuERRm1Au1teAh3DmpY14k0.roa (hash: EnWqTAmFjlN0INK78CFEhUf7qBxCnt1KXQVV4wR/100=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:01:70:78:ca:ae:2f:ae:1b:c6:11:13:a4:4b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
Validity
Not Before: Jun 7 03:00:19 2025 GMT
Not After : Jun 8 03:00:19 2025 GMT
Subject: CN=e98b29aa5f11dff7ec5bb2d9f481cbae6dfd0b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:a4:b8:ca:1a:f2:60:53:7f:30:7c:f6:e0:
7a:59:8c:13:ab:36:79:aa:90:53:6f:de:58:b2:67:
ef:53:0b:e4:ea:0c:fb:e6:cc:60:c4:b6:81:d9:31:
87:90:98:fe:b5:d9:65:ad:ed:ed:61:5b:1b:ed:68:
f9:1d:f9:28:5d:13:37:6f:ed:eb:75:2a:a7:35:63:
aa:ae:62:1c:7d:de:0b:c0:fe:c6:e8:8d:e9:df:fd:
03:0b:b7:54:ae:d5:1c:34:6a:f9:ea:6e:5a:75:c9:
3b:20:41:2b:be:23:25:53:ac:ca:6a:d2:54:4c:ad:
26:3c:6f:45:96:a1:7d:68:49:a9:47:88:c7:90:fb:
98:35:f8:22:bf:66:db:1e:23:32:f7:6a:55:0c:cd:
c6:19:8d:88:ac:d1:42:93:14:ff:56:27:a1:2c:bb:
c6:d1:d3:24:70:7e:82:fe:33:4b:39:df:06:74:be:
55:38:a3:99:b9:76:d5:8b:56:27:25:46:72:a5:18:
77:ba:e6:25:f4:6d:e7:b4:c8:72:41:a6:66:4c:ea:
f0:c3:c3:6c:90:5d:dd:ab:3e:27:ca:bf:93:7b:09:
f0:48:a5:60:17:b4:30:5c:fc:9d:ac:09:29:53:d8:
16:57:2f:99:f8:04:4e:9a:96:86:98:d7:c2:1c:b5:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8B:29:AA:5F:11:DF:F7:EC:5B:B2:D9:F4:81:CB:AE:6D:FD:0B:2B
X509v3 Authority Key Identifier:
keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c8:49:30:ad:4c:2e:89:27:5f:60:e9:ff:ed:2d:18:e7:21:
e1:40:1f:f1:3d:bb:86:6d:cc:f8:12:94:bd:22:ae:1e:6a:80:
34:02:db:be:48:bf:63:1e:ef:05:41:13:34:bf:78:90:64:39:
79:1a:ed:4c:ed:d6:4c:58:0f:c0:44:92:8a:d5:c3:59:a4:24:
c9:d8:09:9f:51:57:5d:46:a7:6d:c9:9c:7b:47:18:2a:b8:67:
29:f4:62:f0:36:6d:7b:17:f3:54:f8:61:f7:93:7c:43:bb:b1:
be:ee:1c:54:ab:40:0a:f3:7b:7c:e0:43:79:56:6d:20:d2:69:
75:9f:bb:9c:a9:f7:37:6b:70:41:1a:05:86:2f:a3:30:5b:b9:
c8:74:e8:42:86:27:6c:28:9c:a5:1c:e2:25:14:ce:50:c8:a1:
ca:b6:28:e4:f4:ea:89:64:86:48:f3:ab:e0:ce:61:80:71:49:
c5:4d:08:ab:ea:1b:36:3a:17:8b:bd:de:05:de:78:e2:34:11:
09:a6:fc:6c:e5:36:a3:6f:69:2a:f9:dc:ed:7a:2e:e3:24:5e:
b7:c0:4d:9f:ed:6b:d4:9a:b7:c7:c6:d5:e8:54:68:b8:ce:df:
23:8e:6d:4d:eb:f3:87:65:bd:6d:34:56:d6:3a:17:ef:46:2e:
20:76:76:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:02:42 2025 by rpki-client