Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
File: UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft (raw, json)
Hash identifier: XpokK18xWwWuYR8Vm7TJ53/CXGuCcg+ib+l/EXS7+Pg=
Subject key identifier: F1:04:CB:89:25:0F:51:2E:51:30:58:54:35:63:A6:37:FE:8E:73:70
Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
Certificate issuer: /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Certificate serial: 0197B5FBE9EED83516FF2D7C0C5A5B7290D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
Manifest number: 0485
Signing time: Sat 28 Jun 2025 10:01:14 +0000
Manifest this update: Sat 28 Jun 2025 10:01:14 +0000
Manifest next update: Sun 29 Jun 2025 10:01:14 +0000
Files and hashes: 1: IrjMrbpwOJWHpcu-zGXQDhHPwlI.roa (hash: iPtJIKNsXTuFfreJtzzF7nkT3NPZDY2s1b/5234g/2Y=)
2: UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl (hash: IlrZqMkcTn2eU5sIqbGfSrkvD4SVAwIDrDhoD2XoP+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:e9:ee:d8:35:16:ff:2d:7c:0c:5a:5b:72:90:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Validity
Not Before: Jun 28 10:01:14 2025 GMT
Not After : Jun 29 10:01:14 2025 GMT
Subject: CN=f104cb89250f512e513058543563a637fe8e7370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:c2:04:69:91:1c:16:b1:6e:a4:b6:4d:32:
07:33:f9:8c:18:58:a5:1b:03:b6:26:62:27:3b:ff:
43:57:2b:16:c0:ff:59:17:ee:d2:31:24:52:f0:bc:
c3:d9:01:b8:94:98:2f:b3:2e:86:2d:7e:9c:51:bf:
a0:22:ab:51:0d:c7:fb:09:23:09:9b:2b:bf:64:6e:
06:c6:c1:23:80:39:12:25:88:0f:73:92:cb:16:51:
0c:8a:3f:a6:7a:d8:01:7c:f5:cc:d1:c6:6e:5a:1b:
96:9d:53:48:69:05:29:03:06:d3:d6:14:84:34:b2:
78:18:82:12:5a:ee:93:a6:ca:0e:33:21:be:ae:41:
ae:cf:c9:17:63:e0:09:81:2b:bb:e5:ad:c7:f7:df:
3a:0e:b2:5f:d6:bd:00:4e:22:ac:c2:d8:38:bc:ee:
b2:8c:db:1a:af:27:e5:47:6d:44:29:c5:93:15:9e:
61:b8:d1:75:5a:69:2b:63:12:45:cd:2d:74:44:81:
6a:0d:9e:7d:92:44:97:ba:df:8b:be:03:da:26:49:
a0:bd:7b:0f:4b:e5:a7:7d:8c:5e:6d:0a:b0:6d:7e:
69:b9:0e:66:1a:0c:2c:76:5a:1b:05:41:bb:78:66:
db:9e:66:dc:87:c5:97:13:f2:cd:0b:75:c0:fa:c2:
dc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:04:CB:89:25:0F:51:2E:51:30:58:54:35:63:A6:37:FE:8E:73:70
X509v3 Authority Key Identifier:
keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8e:d4:0e:f9:b0:12:88:f2:7d:94:ea:8b:68:91:6d:0e:dd:
c2:38:70:02:41:df:8a:d6:5b:b5:65:b2:35:a4:be:d9:28:96:
d3:60:cf:4d:57:b3:5a:06:49:0b:e7:8b:6b:7f:e5:b2:1a:48:
4f:5e:e0:ee:1c:42:03:3b:ec:30:7c:1d:6f:7a:b8:2e:df:cd:
7c:bc:63:3d:a8:92:b7:19:1c:10:56:ed:11:c3:aa:9a:5b:de:
e2:2f:93:5c:2c:fe:75:0a:76:04:05:28:dc:ac:46:c1:53:1e:
bd:e0:57:fb:a8:eb:79:8d:30:39:21:56:59:83:7b:56:8a:e4:
ea:f7:7d:2c:c5:0a:69:c0:d3:b7:19:d9:1e:fa:b9:9a:21:8b:
62:62:b9:b5:b8:3d:be:63:2a:c1:41:a1:8c:f7:84:84:18:fc:
3c:e5:6d:96:9d:41:f3:41:85:c2:e7:62:fb:a2:c2:1a:07:0c:
d5:96:2b:47:b9:f4:a3:ac:17:68:c6:57:44:92:12:98:19:ce:
01:63:1e:a1:e9:ce:33:4b:9e:ac:2a:30:79:7e:f4:8d:ae:d3:
85:04:31:82:9b:42:1b:74:00:98:72:77:67:c5:28:8e:f3:d6:
19:84:b1:91:aa:98:a2:3a:be:dc:39:51:aa:d2:19:65:96:a8:
b6:a7:9f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:56 2025 by rpki-client