Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
File: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json)
Hash identifier: FAa086NaFsFHWadJkQZXYmr7BkYbmseG4LgbbRbmdaI=
Subject key identifier: 0C:59:BD:D0:AC:22:20:C0:8C:2E:86:F2:EF:9C:A7:18:7E:61:6A:6E
Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
Certificate issuer: /CN=50480549481968d43406127653f780abbf9a117b
Certificate serial: 0197B6A13798BCACB3A008E69C6C22BD5256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
Manifest number: 12FF
Signing time: Sat 28 Jun 2025 13:01:48 +0000
Manifest this update: Sat 28 Jun 2025 13:01:48 +0000
Manifest next update: Sun 29 Jun 2025 13:01:48 +0000
Files and hashes: 1: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: fjtYc2bV/APCgNo5jnJ+86gQXu4YXS4D+nzBVVs+O4Q=)
2: ieAdYhfL7YWN2SLS2f9hqBVZtZM.roa (hash: hG5CDDVlPm8IgOCRW9955aYuwC+jVZMftA53gP484x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:37:98:bc:ac:b3:a0:08:e6:9c:6c:22:bd:52:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50480549481968d43406127653f780abbf9a117b
Validity
Not Before: Jun 28 13:01:48 2025 GMT
Not After : Jun 29 13:01:48 2025 GMT
Subject: CN=0c59bdd0ac2220c08c2e86f2ef9ca7187e616a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:f1:e2:31:bf:e4:9f:d5:92:26:7d:d5:4d:
7d:1b:f4:bf:66:07:ad:45:87:30:a9:c6:30:0a:47:
07:82:d6:6e:c5:8a:03:57:b4:8a:d1:f7:8a:f0:40:
97:41:d7:42:3e:77:1d:ad:69:47:8d:1e:d6:fe:d2:
40:c2:b9:34:60:e1:c9:fe:16:f1:99:88:53:98:6b:
e2:6d:7f:49:da:09:be:00:0c:d3:5a:f2:0f:70:b3:
36:6a:f1:49:01:7b:d7:15:47:4d:b4:8f:b4:52:26:
36:6a:75:03:6b:37:83:6b:e2:4e:f8:64:45:12:79:
17:1e:5b:5c:67:9f:26:c4:cc:1f:fa:30:d5:25:f1:
34:65:f7:2d:06:e1:6d:0d:66:48:29:82:b4:09:ae:
fb:57:3d:14:64:b9:05:8b:a2:28:4e:42:d6:8e:fa:
c1:96:f4:1d:7e:db:b6:18:30:ef:13:5a:b4:d0:b1:
9c:4f:f8:92:84:a9:78:ec:d5:df:d9:89:d8:f8:8c:
84:97:b9:7e:3f:ce:b7:23:7c:c8:5f:93:b5:e1:92:
f4:9c:a4:63:fe:40:b2:31:0b:c2:8b:48:57:23:7d:
61:ca:95:bc:e1:3b:b8:6b:04:ec:3c:89:7f:2c:e5:
00:61:11:9b:3a:f8:b6:1b:8a:0a:54:c7:a8:97:22:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:BD:D0:AC:22:20:C0:8C:2E:86:F2:EF:9C:A7:18:7E:61:6A:6E
X509v3 Authority Key Identifier:
keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:51:7c:02:72:6e:8f:c2:2d:0d:af:4d:aa:ad:10:d4:59:b6:
e2:08:45:ab:08:87:e7:a4:4d:e5:c8:5e:b2:b8:74:c1:02:84:
b2:fc:d6:9b:4f:2a:55:d8:cf:07:71:b0:5f:dc:68:07:c9:c9:
b4:4e:7a:1e:9d:99:ab:6c:1d:64:eb:9c:cd:e3:ad:13:09:dd:
14:fd:f6:90:6d:b6:20:9b:4c:14:d9:01:db:9c:21:99:7e:32:
51:ef:9d:4d:b9:56:a5:88:ae:15:e1:08:23:4e:b4:64:3b:b4:
6b:03:71:7c:b1:be:27:61:1a:12:c8:29:24:0c:ae:1a:a2:46:
e1:1e:fd:db:db:96:bf:f5:31:9c:c3:a3:1e:7b:2d:70:4e:66:
fe:73:6c:a6:87:93:b8:bc:4d:ef:a7:bd:9c:cc:ea:0f:e9:59:
86:7e:c8:98:5c:f6:01:15:7e:9b:ea:e5:ee:cc:be:7b:bb:d3:
be:52:46:f9:f0:54:3f:32:95:d6:b8:c2:31:4d:7f:ad:6f:d3:
48:b0:d9:30:76:89:80:34:1f:cb:05:7e:61:03:d9:01:43:2d:
38:70:0c:cd:e0:84:c4:7b:fd:ea:6d:eb:90:71:b3:e8:c5:33:
28:44:73:ba:40:c0:d4:20:02:07:65:fe:d3:42:16:a4:e1:7c:
33:34:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:13 2025 by rpki-client