Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File: UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier: jDDpwpMFz4Bzn4No/ZWA7GPss+Q3/tTpcIVHUrq2H80=
Subject key identifier: EB:25:88:11:E1:47:3C:11:FD:73:43:9A:18:CA:45:3F:D2:6E:EE:5C
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial: 0198CBA58639DE8C7255F6AB83B4009C6522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number: 15D7
Signing time: Thu 21 Aug 2025 08:01:19 +0000
Manifest this update: Thu 21 Aug 2025 08:01:19 +0000
Manifest next update: Fri 22 Aug 2025 08:01:19 +0000
Files and hashes: 1: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: 08pkli9rNNOZvWmGBfwtvUglt9DkscSimyTt/N29USA=)
2: cDqRgVZUzcG8C6S6sy9XaY7R8i4.roa (hash: dXQReZhWlMp7R/f0KCpgMs+DeDxAbD08ZpRugIlwk3I=)
3: fn4qBfRUR0OB50vceznCHU7Je0c.roa (hash: YF9zXgr+C6MTpEPUuY8+DvVCvD+pUWLKC0NueJccgh8=)
4: u67ic7YzK78QcUkHm1snD1e9720.roa (hash: csRqjLRtzYYjHQDBckYWBc6iGrmSXKNq8hQ9btgA+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:a5:86:39:de:8c:72:55:f6:ab:83:b4:00:9c:65:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
Validity
Not Before: Aug 21 08:01:19 2025 GMT
Not After : Aug 22 08:01:19 2025 GMT
Subject: CN=eb258811e1473c11fd73439a18ca453fd26eee5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:dd:52:e3:73:9a:e3:eb:80:1e:ab:fd:27:
3e:0f:9a:6f:f4:e9:bd:f5:61:84:2e:00:7f:03:3c:
f1:bc:4d:2a:67:4e:49:95:91:64:b6:bc:d0:61:21:
11:a5:33:ae:72:eb:1d:60:3f:7d:5f:82:17:92:4f:
a6:50:8c:dc:64:a1:2c:ed:09:45:44:cf:2b:87:7c:
12:bc:5f:67:b4:c7:b4:a7:fa:7f:21:81:fa:48:aa:
26:64:d6:0b:41:fe:8c:03:fe:82:6a:fa:eb:a1:ba:
5e:59:ee:dc:2b:cf:c3:5f:d8:c4:66:40:7b:27:7a:
b5:4d:7a:7a:bc:99:a8:13:55:4e:b4:2b:a8:d4:71:
22:13:d4:f7:ea:38:a5:51:fb:d5:41:4d:5b:7b:97:
7c:85:1f:9b:d0:7e:91:18:1f:c2:bd:71:47:68:31:
ea:61:02:f7:e0:17:2c:2e:90:b7:95:ae:93:f5:06:
ff:db:d3:7e:c5:f6:15:29:35:30:50:17:f4:24:a7:
79:3d:a5:4a:27:23:d7:fa:51:ff:7c:04:5b:4f:12:
92:8c:e8:90:a2:31:75:8f:ee:6d:d6:e1:69:36:5b:
5f:dc:da:27:64:e3:40:b1:64:35:02:79:6b:b7:e8:
56:63:93:a4:dd:fb:2e:03:f2:e7:a8:f2:82:b1:fe:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:25:88:11:E1:47:3C:11:FD:73:43:9A:18:CA:45:3F:D2:6E:EE:5C
X509v3 Authority Key Identifier:
keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:10:aa:e7:60:b3:45:ec:11:95:97:ce:af:56:91:f0:af:cc:
75:c3:f3:eb:b6:48:53:06:26:0f:0a:d8:2b:6f:cf:f7:a3:9e:
f8:18:a5:1d:29:32:3f:86:cc:52:b1:5a:d8:11:af:44:bd:87:
72:31:ac:2b:8a:c4:aa:9b:5f:be:43:46:b9:7c:d4:77:c6:06:
d2:ad:15:9f:be:4a:31:31:87:c9:ea:dc:93:41:11:d1:0e:19:
78:71:3b:37:34:66:45:4b:6b:d9:71:a8:8b:47:d0:3b:ac:0d:
97:94:b5:a8:6e:1c:4c:21:58:72:45:11:1c:48:3f:35:45:f6:
41:a5:75:c0:53:c5:bf:66:34:f6:16:9e:df:7f:0f:04:c0:a4:
f2:65:bc:78:e4:d0:3b:b2:da:fb:91:0b:8f:b2:c1:93:a5:29:
07:19:bf:6d:49:eb:45:b1:f2:24:03:9c:04:5b:5c:16:1e:76:
bf:43:e8:af:98:5a:8c:17:4e:28:85:58:f7:48:cf:18:5c:8d:
fe:79:25:5d:3a:c5:7d:0d:6a:ba:fd:0e:6d:86:d3:e5:09:ad:
14:c6:2d:e0:75:f2:5a:14:42:b6:c0:2e:1d:af:0e:43:0e:6a:
6e:60:de:47:0d:ea:50:78:09:c0:fb:40:2e:45:ff:1d:68:93:
b3:90:8a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 16:36:37 2025 by rpki-client