Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File: UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier: LQ23gS4C9MA6+w5zhnfayyaQ8O27YNt0RsWW1gEOjU0=
Subject key identifier: C1:F3:ED:DC:24:BE:82:B7:59:D6:57:45:31:27:5B:23:DD:49:06:6B
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial: 019746D4D9F08B95736D59654BC162EC05B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number: 1445
Signing time: Fri 06 Jun 2025 20:00:43 +0000
Manifest this update: Fri 06 Jun 2025 20:00:43 +0000
Manifest next update: Sat 07 Jun 2025 20:00:43 +0000
Files and hashes: 1: 0fnHFCseCp-dowzjSO_W0ajo1TU.roa (hash: 6EWDnuvDaw8wNIkQ3MlMpyUilwRHG1UBmr10Bi9Kodc=)
2: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: yNEQCk0ERjAMpEZiVlbWTGZWOM2S573jTlLl0i/i8bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:d9:f0:8b:95:73:6d:59:65:4b:c1:62:ec:05:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Validity
Not Before: Jun 6 20:00:43 2025 GMT
Not After : Jun 7 20:00:43 2025 GMT
Subject: CN=c1f3eddc24be82b759d6574531275b23dd49066b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:23:08:8a:53:4d:f9:08:8c:4e:fa:5d:59:
2a:9c:49:32:15:04:02:09:c6:aa:f3:69:c9:de:c3:
bf:80:de:d8:af:a3:16:28:88:40:40:25:7f:f7:b3:
2b:f8:61:06:d0:9a:6d:af:af:a2:78:7a:c2:72:9a:
25:01:c8:c8:ba:8c:53:69:99:84:bf:8b:13:af:af:
f3:eb:ba:35:43:fd:ed:89:35:eb:99:73:40:6b:5e:
0c:87:64:8c:a4:3d:3c:21:af:02:d9:33:a6:18:45:
bc:b5:a7:ea:8e:16:69:24:2a:d3:8f:98:5c:da:37:
86:e1:a1:c4:d8:ff:27:d9:fd:ec:e3:a4:11:f3:52:
29:60:3a:c6:d4:b7:71:e5:7d:ca:9b:2e:d2:97:67:
ab:76:ef:bb:1a:29:8b:58:32:f6:87:cb:21:0b:02:
34:70:2c:38:f7:4a:30:f5:59:ec:b7:d9:3f:23:29:
7d:e7:22:df:a6:22:cb:f7:e2:a3:65:0e:49:69:68:
b6:ae:4c:b3:05:b6:6e:ca:63:b4:10:d3:5b:79:41:
1c:e7:59:1e:ad:00:7a:e6:1e:47:d3:35:33:99:c3:
66:0d:5c:a1:4d:8d:70:a4:d3:86:d4:b5:c6:a6:f9:
10:af:dd:7d:8a:2e:8f:d6:bc:eb:51:60:9d:88:01:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F3:ED:DC:24:BE:82:B7:59:D6:57:45:31:27:5B:23:DD:49:06:6B
X509v3 Authority Key Identifier:
keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:02:d4:53:be:f6:b5:a1:37:33:4c:84:ff:e1:92:d0:b5:1a:
5e:73:78:27:88:ae:6b:57:1e:89:e5:88:6b:ad:5f:b6:56:73:
39:2f:34:2f:18:ed:d9:84:63:1b:2e:ba:13:cc:98:83:80:9d:
6d:2b:9e:f4:5a:52:f0:8b:d1:9c:d4:4c:79:66:ef:8b:9f:bb:
d6:7b:88:9e:e2:61:c9:bc:9b:b7:94:56:34:da:a6:ec:a0:17:
47:80:bb:e0:3f:12:13:4b:a6:eb:68:d9:b2:f4:24:4b:1b:d9:
86:4a:91:7a:1c:d8:50:79:ec:54:44:43:21:d7:7e:f6:c1:49:
aa:02:3e:ba:80:9d:c4:82:d0:5d:84:22:6f:29:48:0f:11:81:
10:63:48:89:bd:7f:02:8c:0c:8c:8e:7e:4e:87:08:d7:c6:b3:
31:88:a4:fa:5c:33:6f:08:09:cf:c7:b0:6e:47:dc:a7:2f:cf:
b3:6f:85:4c:db:82:d4:73:22:b9:8d:c8:f1:00:e0:d8:3f:2e:
89:5e:13:9a:d2:e8:4d:5d:53:07:63:84:d0:ae:72:2e:e7:fd:
9a:25:ec:7a:7c:7b:c1:2c:ca:ec:4d:85:a0:70:be:7f:55:2d:
6b:c6:3e:fe:6f:13:c1:c1:d1:6c:b9:d4:53:0e:03:3b:63:92:
62:62:1c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:25 2025 by rpki-client