Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
File: UXM4bzZygYSqADsdljn-OcShKqk.mft (raw, json)
Hash identifier: wkg61t4YRo0ndKtNLFEFL5jh0EIukN/IUgeVSQqXB1Y=
Subject key identifier: A6:49:49:33:79:A9:43:FB:53:6F:61:DA:53:7F:FA:89:09:92:1F:73
Authority key identifier: 51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
Certificate issuer: /CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Certificate serial: 019747E7464BB86320AFFA2660285DE2ECEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
Manifest number: 14DF
Signing time: Sat 07 Jun 2025 01:00:28 +0000
Manifest this update: Sat 07 Jun 2025 01:00:28 +0000
Manifest next update: Sun 08 Jun 2025 01:00:28 +0000
Files and hashes: 1: UXM4bzZygYSqADsdljn-OcShKqk.crl (hash: yYp6QREjFuBnsPmRa4pqzZYQePJyHKNBuVMUZ0h1onU=)
2: g6kbe_eW2XgI6YD7cyTnjFDylR0.roa (hash: VTjbXO0Nq4toGU1LGHuG65b5vXVgfgU9Ntfeo8aohYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:46:4b:b8:63:20:af:fa:26:60:28:5d:e2:ec:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Validity
Not Before: Jun 7 01:00:28 2025 GMT
Not After : Jun 8 01:00:28 2025 GMT
Subject: CN=a649493379a943fb536f61da537ffa8909921f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:48:5c:13:29:66:58:3f:df:12:ca:16:68:d8:
c3:34:05:8f:80:63:c8:3f:87:64:30:0a:fb:c3:c5:
f2:37:5d:e0:a1:e3:b0:04:6c:5c:21:46:f8:e4:ca:
ca:80:a6:5d:ed:af:12:2f:37:05:1a:ae:9b:cc:81:
e5:d9:cc:2f:40:75:99:6f:08:e3:5c:20:54:55:cd:
2a:73:82:1b:5c:18:62:08:a8:d1:1c:49:d6:d6:99:
e1:17:a3:83:45:fc:80:b3:28:96:79:5a:7a:ac:af:
c2:c9:31:9a:b1:06:d5:fc:db:4c:a8:0a:62:9f:8a:
f0:7a:f1:f9:69:76:57:cd:fb:a7:e2:d5:43:54:b3:
0e:e9:3c:5e:1c:5c:30:8c:7d:67:b0:14:37:86:15:
19:58:37:f0:57:ad:c3:99:8c:74:3d:06:f0:73:5f:
b5:9b:f2:c0:aa:4f:bd:d7:db:29:b6:45:33:4b:90:
a3:f1:fe:fe:56:27:49:6d:13:03:77:8e:9c:7a:1e:
e4:17:8b:33:b7:71:6f:3f:ff:75:27:0d:c7:a0:e5:
b6:86:81:f0:2f:1e:75:6c:bd:33:1c:e9:19:d4:90:
ad:6d:9d:d0:22:91:3d:08:80:4e:91:e4:09:61:95:
b9:a8:ff:11:d6:81:b4:da:87:19:ce:32:43:af:e7:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:49:49:33:79:A9:43:FB:53:6F:61:DA:53:7F:FA:89:09:92:1F:73
X509v3 Authority Key Identifier:
keyid:51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b5:d5:9e:56:0c:8f:9d:a0:e7:5e:62:d3:7d:8e:c3:91:8d:
b0:c5:f2:46:60:7f:d0:e8:28:22:4e:c5:15:be:df:05:fb:50:
3b:79:de:60:26:bc:68:00:e6:ec:69:7b:d6:4a:05:73:a5:49:
19:73:d4:42:5f:20:f8:68:cc:c8:ad:3c:94:56:a0:04:12:51:
c8:41:7f:5c:ef:1c:c2:44:74:b3:ee:1b:c5:9b:88:53:79:a2:
39:bc:47:f6:e0:f3:72:e7:ad:fe:a5:4e:5e:af:33:68:d7:bc:
06:3a:ea:30:09:0e:c8:21:35:27:1c:76:fa:fa:c7:c9:ad:22:
4d:70:23:89:57:ab:1d:81:71:18:7a:c5:25:f4:c4:f5:3c:3a:
d9:da:f0:70:21:bf:bc:d9:36:f4:01:f3:6a:e4:11:77:5e:27:
e9:a5:19:9e:88:39:f1:b8:95:8a:e9:cb:ca:47:01:c9:b8:e1:
59:2e:e3:0c:83:98:6d:4e:ab:41:e7:19:0e:be:3e:77:9f:92:
0f:3f:f2:15:02:64:69:85:b7:ee:27:d1:fe:e6:fa:44:8a:ea:
ca:3a:99:4f:fa:2b:b3:b2:d0:94:e7:91:04:7d:28:7c:ee:3c:
8f:50:4b:03:5c:24:4d:46:94:f3:85:55:03:15:54:c5:02:03:
89:f4:a1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:49 2025 by rpki-client