Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: Zj1SXDcuKhmLLhbragO39Z+dM3eDagrk4jWs1SkMrDM=
Subject key identifier: E8:82:3A:8D:5F:A5:E2:D4:DD:B5:67:F9:12:3D:97:D1:03:89:4B:53
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 01974A0CA529CBD5AC3EC463458A036FCBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 0DFB
Signing time: Sat 07 Jun 2025 11:00:31 +0000
Manifest this update: Sat 07 Jun 2025 11:00:31 +0000
Manifest next update: Sun 08 Jun 2025 11:00:31 +0000
Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: NY3ss/27O6ICa//C9CuZy6hfzhPG9/TogKwtECDkRc8=)
2: jhae41lBxgum19Q0YmdVzc2ofw0.roa (hash: x1mZ5Yned7zFdt78wzWndyqBFeaTJjBaYlvrRS6j15I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:a5:29:cb:d5:ac:3e:c4:63:45:8a:03:6f:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Jun 7 11:00:31 2025 GMT
Not After : Jun 8 11:00:31 2025 GMT
Subject: CN=e8823a8d5fa5e2d4ddb567f9123d97d103894b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:21:f8:24:d8:68:5a:04:89:21:3c:48:db:
c8:53:34:14:45:f6:ed:2b:0f:24:c1:06:7f:f1:a2:
cc:6a:5b:45:0f:f0:db:38:57:11:07:33:a2:d9:dc:
fe:e4:a7:22:0a:6f:96:35:db:79:00:48:9c:a4:02:
f2:7e:95:5b:da:65:2c:08:e7:48:a2:b0:5b:1e:fd:
51:ca:e2:ba:26:b3:17:19:e2:25:f6:ca:05:c6:14:
b5:a4:68:c9:f1:52:df:0f:f9:49:e2:a7:0b:d5:c3:
b1:31:ac:9d:2a:92:c3:1b:38:4a:00:b2:05:7d:f6:
67:90:66:55:e4:3f:37:63:8a:bc:54:92:68:97:59:
4e:15:ab:25:d1:ee:bb:ea:6e:fb:04:e3:b0:d4:09:
ca:ce:d3:33:8f:6a:7d:ee:0d:35:9e:50:0d:65:db:
9b:d9:dd:20:de:52:64:bd:a0:04:a6:1e:9f:12:0b:
f6:83:10:eb:1e:1f:0b:60:7e:df:30:12:59:39:14:
35:9c:45:96:45:5a:29:b9:77:43:6d:d9:1a:14:0a:
34:7f:08:c3:58:b0:04:b0:f7:f3:08:5b:81:d8:ab:
b8:29:66:8a:63:58:3f:b6:1f:42:5b:e6:87:0d:31:
de:9e:b0:ca:12:c5:9d:47:7e:c1:48:34:c7:76:62:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:82:3A:8D:5F:A5:E2:D4:DD:B5:67:F9:12:3D:97:D1:03:89:4B:53
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6b:ed:e5:ba:80:b3:5b:ce:73:21:f6:1f:bd:35:b1:ad:f4:
38:91:1f:fa:77:40:1d:30:3e:53:3f:8b:07:c8:38:e1:15:c2:
ff:df:d7:23:ae:ca:ea:f5:57:41:e4:6b:65:ee:fd:ca:21:9a:
70:fe:7e:c6:a3:80:4f:d6:68:a3:e6:03:00:f6:4a:77:7d:d3:
ea:22:de:26:7a:63:10:a3:b3:f5:85:54:f1:e8:14:b8:5c:3e:
2a:87:3d:1e:7e:c7:27:19:ae:d1:d2:46:6f:4a:75:ef:7e:39:
96:e7:9a:be:a7:3a:f8:82:ad:8f:2a:db:a7:d8:ab:42:eb:5f:
a3:5d:36:56:61:15:c3:be:d4:5c:12:8b:72:4f:7e:1a:d0:dd:
68:62:44:c9:09:4e:38:31:d5:cd:8e:c2:a3:47:5f:bd:a2:bb:
32:69:82:df:1b:0a:03:5c:4e:26:b8:d7:fb:37:7c:34:2f:f2:
2e:23:61:e0:16:ee:8c:ba:d2:72:4e:57:b8:3a:01:1a:1b:f8:
37:55:39:df:21:47:86:42:ac:c9:b0:95:12:c1:c4:31:af:4e:
e2:d4:00:1f:84:2e:ee:4e:f1:86:6b:0d:76:72:3f:50:da:95:
cd:55:a7:75:be:69:64:62:4a:dc:35:e3:d4:36:25:a1:0c:58:
d4:fd:81:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:44:58 2025 by rpki-client