Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: CiSgqQVEqzQgOFJu+Qu5EkyPjgXniPK/QhVLs0yd0yI=
Subject key identifier: 16:3E:D1:DC:73:E6:E8:FA:BA:4A:1D:B3:73:A2:12:05:57:DE:9A:77
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 01974E204608DA64B88D70CBE3B5553FE1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 1585
Signing time: Sun 08 Jun 2025 06:00:27 +0000
Manifest this update: Sun 08 Jun 2025 06:00:27 +0000
Manifest next update: Mon 09 Jun 2025 06:00:27 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: o9hc599DtPzO/g5S8Kbja6qWJ4x9OjGyxgGnMv1sZIE=)
2: aGUQW-NVaHMBg-4QWkhklY8KGK0.roa (hash: bPMaS2I+pHesJBg7bFG+Rdvd7OKl0tnIQrQv2QCj1ts=)
3: fwxt0QHyh3ttD260VFCya7TU-1s.roa (hash: 9i1HvobHCHHVWkd92tpYtwhAF4c8uqpeWhFp9/w1WdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:46:08:da:64:b8:8d:70:cb:e3:b5:55:3f:e1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Jun 8 06:00:27 2025 GMT
Not After : Jun 9 06:00:27 2025 GMT
Subject: CN=163ed1dc73e6e8faba4a1db373a2120557de9a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:03:bb:0c:21:80:ad:e4:a8:b9:a9:9b:9e:
70:55:e5:6c:d3:8b:f2:f4:1d:ad:ff:0c:9a:8e:a6:
76:71:74:6c:c7:52:4b:6c:1e:d6:d1:69:e0:00:c7:
d4:03:5e:ce:4b:6c:6e:57:07:19:ae:62:7f:48:78:
6d:07:12:57:2c:35:d2:13:16:a8:79:6d:20:e0:b3:
39:14:53:85:fa:4f:4a:56:16:18:5b:a8:c5:75:5c:
64:6c:56:56:bd:85:13:2f:8a:a6:e3:11:55:67:d8:
a6:b0:1e:78:e3:80:d9:9b:69:1e:b6:f2:4e:69:bb:
e3:99:9d:2b:f1:9f:09:27:84:81:72:62:7c:87:45:
ad:3c:50:8b:e8:bb:b2:a8:36:b2:88:c2:57:db:30:
88:ee:47:67:0d:94:d6:c7:9d:f4:f2:62:73:61:fd:
6d:ff:e8:de:45:f3:c9:4f:d6:02:f6:1f:f3:d8:6b:
69:1d:56:61:30:5e:6d:ec:5e:0a:52:fb:21:82:75:
37:78:df:4e:d0:14:2c:0f:46:e7:93:4d:d9:c9:03:
13:6d:b4:ad:01:9e:ed:de:e5:c1:08:bd:8b:5e:50:
90:ed:e1:27:63:39:f1:62:b1:ff:33:2b:c5:05:f9:
49:87:e2:a4:67:bc:e6:de:b9:59:d8:e5:3e:3e:b1:
da:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3E:D1:DC:73:E6:E8:FA:BA:4A:1D:B3:73:A2:12:05:57:DE:9A:77
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3e:47:a4:78:00:26:9f:e7:b6:12:56:ab:ba:38:f7:b1:b2:
7e:fe:4d:92:e7:1e:bc:85:68:71:17:7a:1a:f6:16:e8:65:9f:
c7:dc:69:2c:c9:33:b3:20:47:3f:d7:9d:91:c7:17:69:d8:7a:
a9:8d:a3:32:7c:d5:86:6a:25:b7:e0:0e:f7:39:32:01:c1:45:
94:d5:b1:74:cb:56:17:07:a9:37:ec:13:7e:de:c7:81:42:01:
a0:e0:33:43:41:4e:f8:52:a3:eb:00:9e:a6:10:16:86:d9:2e:
8f:c1:ab:12:7f:97:f1:52:35:02:45:3c:79:58:25:f2:5c:69:
6d:00:57:43:8a:6c:e2:a1:8d:c7:6d:10:c2:ae:d7:fa:07:1b:
23:60:7b:24:fc:78:50:d1:7c:0e:b0:89:fc:b0:26:8f:ab:fd:
2f:c7:5b:35:e5:59:9e:56:44:23:23:3e:d9:df:8c:a3:49:d1:
04:29:6e:1b:eb:ea:b1:3f:82:ee:58:a5:51:a0:68:8d:9a:72:
a4:60:82:65:26:64:76:fc:11:4b:31:c1:48:93:7a:d8:3b:dc:
81:a7:ec:18:72:6d:a7:72:bf:d7:22:cc:6d:88:95:21:82:35:
f9:0c:bb:47:4d:45:03:6a:d6:e7:51:41:8f:00:bc:75:89:71:
57:82:ec:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:40:56 2025 by rpki-client