Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: r54cV37zqFOin6bND2zd9UiYddIPNS41fvOG02gOmZc=
Subject key identifier: 5A:77:71:AE:DB:FA:7D:33:D0:47:2A:FB:BA:33:4E:95:08:25:F2:88
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 0197469DD8D2AF9CDD8869E6803B0980E1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 0942
Signing time: Fri 06 Jun 2025 19:00:39 +0000
Manifest this update: Fri 06 Jun 2025 19:00:39 +0000
Manifest next update: Sat 07 Jun 2025 19:00:39 +0000
Files and hashes: 1: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: keLketJYltH3w6HtXEmr66Ns8Vs/+Snla62m77Uv6M8=)
2: sq5AEY7QJIys2vGMgSgXE7FeRjY.roa (hash: aCGTeZMaEctcz9l1gB+wzw0eDWMxaeU9DQux69bQvFE=)
3: uDBXK8T_CYBhR7j4qUX3KNaOzNA.roa (hash: l69OGXgxbADqBf3n8PsE9PC3wGQv9qukdYrOEUN64Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:d8:d2:af:9c:dd:88:69:e6:80:3b:09:80:e1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Jun 6 19:00:39 2025 GMT
Not After : Jun 7 19:00:39 2025 GMT
Subject: CN=5a7771aedbfa7d33d0472afbba334e950825f288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:28:09:db:5d:47:24:ba:cf:ab:9c:ec:73:
f0:19:ca:a2:c4:9c:3a:79:55:31:b7:6f:28:e8:96:
f6:6d:fe:dd:25:ab:a4:04:97:97:b2:9f:b1:f3:bd:
03:aa:27:01:41:8b:7a:bd:d6:ea:b1:7f:19:83:d5:
4e:00:a3:38:02:b8:e5:fa:7a:d8:66:f1:77:db:3c:
e5:f1:6c:4a:29:f1:51:a7:57:b9:01:b8:69:f0:86:
97:4d:69:1f:4a:47:44:e0:0d:17:17:b0:95:62:1f:
2b:8d:50:78:b0:88:dd:42:51:0a:c2:ac:ea:06:9e:
c6:6b:6a:a1:9a:f8:be:cc:00:5f:4b:17:69:2c:fc:
8e:e6:dd:df:db:6c:26:0c:cb:7e:c9:3c:51:2e:39:
72:d7:c5:ab:4f:cd:e0:ad:30:00:20:25:94:59:9e:
01:8f:1d:14:6a:05:70:8d:0c:89:35:30:14:4a:01:
47:85:28:40:a4:81:b9:05:2e:72:ca:0d:f4:96:b0:
a5:b1:a2:ca:55:ab:66:f4:97:83:dc:97:f1:c9:9b:
58:cd:40:ea:ed:95:98:03:e6:df:41:26:4b:a7:79:
e3:6b:6a:42:dc:64:ed:f4:2e:bc:f2:23:1a:30:80:
c0:63:32:da:b5:e3:6f:99:95:fe:e2:c0:c0:29:dc:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:77:71:AE:DB:FA:7D:33:D0:47:2A:FB:BA:33:4E:95:08:25:F2:88
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:de:fd:11:38:ea:31:a2:ab:31:9f:a1:c4:6e:68:29:9a:8a:
3c:cb:48:1d:26:f0:cb:8d:c8:15:2d:d2:8b:3f:2f:6a:a6:66:
7d:c4:bf:94:4e:67:e0:3e:1a:af:41:05:04:35:f0:c2:c1:8f:
40:24:27:72:d8:3e:93:48:36:d5:4e:2a:74:6d:79:b4:0e:32:
60:37:01:02:7e:ca:80:a5:e2:c6:65:e4:1f:a2:cd:a2:82:e0:
b1:c3:0d:3e:83:ba:f6:b9:e2:e5:35:d6:eb:51:8d:9d:91:d4:
fd:63:27:b5:29:01:b6:da:04:19:04:4b:26:40:ba:75:95:57:
4d:b1:1f:90:2c:10:22:ca:3e:f3:e1:dc:3c:71:4a:e4:94:38:
4a:41:04:a3:2b:5e:2a:20:53:e8:a1:5c:a8:e2:4d:a1:c1:d6:
06:9b:86:31:fd:71:cc:1f:0c:54:d0:e6:a9:1f:06:8b:c3:f0:
b1:71:29:50:54:52:83:c6:2a:07:9c:c3:9e:cd:d7:a6:b0:0d:
42:23:e9:eb:b8:08:9c:45:7f:0d:dd:94:44:ad:b4:43:56:da:
38:72:94:30:ac:75:43:c5:8e:49:08:b3:00:87:8f:d4:28:81:
b9:59:30:57:39:2f:7f:a1:06:15:39:72:67:7a:96:43:88:93:
b9:cc:74:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:38 2025 by rpki-client