Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
File: UNp8iuAVDrjJRte_HgXAQt32o9Q.mft (raw, json)
Hash identifier: auFOCCFpYHnavoVMAjz1w3EyUXIzDA2RLGVsEHiqBnA=
Subject key identifier: 74:97:A3:E2:E3:0E:CD:0E:25:3A:30:9F:61:3F:78:52:9E:5A:B7:E2
Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
Certificate issuer: /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Certificate serial: 0197B6A22C7A6E89FE8447E1D47B70BAD870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
Manifest number: 084F
Signing time: Sat 28 Jun 2025 13:02:50 +0000
Manifest this update: Sat 28 Jun 2025 13:02:50 +0000
Manifest next update: Sun 29 Jun 2025 13:02:50 +0000
Files and hashes: 1: TRZ-bXVpGuPzmHQA948WyQR5KOg.roa (hash: DS5TFuJAWuJAhwbXFziYJwVjw+lHGW5/W63yt+OmaIw=)
2: UNp8iuAVDrjJRte_HgXAQt32o9Q.crl (hash: kYLxoyLam290NRcsf0ixp2rJ882EAViuyyhMbGYM8ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2c:7a:6e:89:fe:84:47:e1:d4:7b:70:ba:d8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Validity
Not Before: Jun 28 13:02:50 2025 GMT
Not After : Jun 29 13:02:50 2025 GMT
Subject: CN=7497a3e2e30ecd0e253a309f613f78529e5ab7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:84:50:bc:a1:4d:bb:e4:fc:ef:bd:de:86:
65:0d:44:f1:1c:eb:b5:e4:d1:7e:fb:6c:d9:e0:42:
49:e3:b4:24:1a:6d:21:fd:f2:9f:6e:9f:88:57:b3:
65:39:01:a5:16:54:4b:7e:1f:b9:3a:11:02:a6:04:
f5:c0:35:6f:7b:9d:da:c5:29:c8:ea:30:66:ce:37:
a6:79:62:03:10:ef:cb:60:1b:8f:2c:38:d2:b9:66:
63:72:0c:c4:8a:30:f9:07:9f:ad:de:84:05:b8:f4:
27:33:2c:f0:9c:4c:1d:c3:1a:34:05:04:ce:96:be:
ed:ff:17:fb:e3:9e:d7:88:29:83:52:69:6d:16:ad:
e9:c6:b2:7c:0d:1a:de:3c:96:ae:78:d6:f1:5a:cc:
78:62:ea:6d:13:fa:6f:20:58:38:7c:b9:6c:a5:9a:
91:70:bd:a7:26:4d:3a:a2:8b:ad:09:f5:f6:95:9f:
66:cd:e4:74:ba:d1:45:d2:52:24:19:27:8f:dd:08:
5d:4b:4a:b8:a8:db:8e:b9:dd:a1:4f:13:31:22:08:
15:fc:fd:75:1c:eb:43:a3:bc:44:64:a2:ca:9e:b0:
7c:08:7b:36:7b:68:c7:70:10:5f:cf:ba:19:31:05:
95:d0:52:60:84:1f:c9:99:8c:78:16:e3:0f:25:8c:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:97:A3:E2:E3:0E:CD:0E:25:3A:30:9F:61:3F:78:52:9E:5A:B7:E2
X509v3 Authority Key Identifier:
keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:82:10:77:cc:29:b0:83:e9:a3:c1:62:48:75:94:3a:a7:b5:
22:bd:81:c7:45:37:00:f5:5e:7e:7b:be:94:41:a9:20:8a:59:
5b:f1:f5:08:de:f5:26:8e:72:0f:40:28:b8:e5:f0:be:f2:04:
e5:35:80:81:fb:5b:2b:f8:5b:50:67:0d:b8:e7:74:f7:4b:21:
c8:a9:a3:d5:34:5e:69:42:67:da:84:4a:bf:58:8c:b9:2b:16:
cf:45:1c:df:c7:61:2c:44:cd:46:39:ac:e0:f8:7e:8d:dd:12:
01:c1:2c:7e:22:d6:99:3e:79:d8:1d:3e:4b:30:97:ce:ad:71:
85:87:02:6b:14:f1:9f:0b:2e:79:ad:3a:0b:fe:d7:63:ab:76:
43:94:29:71:f7:3b:56:75:fc:fb:19:6c:d7:60:72:96:76:36:
6e:1f:9f:fd:47:2e:90:25:5e:ed:e7:d0:61:df:eb:da:9c:28:
63:74:35:b1:05:11:cd:93:65:53:35:f9:20:82:db:84:ce:9e:
c0:6f:06:08:3f:c7:5d:a9:c0:0d:33:68:e0:bc:e3:69:fe:40:
6b:66:cf:b0:23:d0:f1:d6:50:88:80:36:67:ab:6a:fa:52:64:
10:8d:49:c7:f0:94:39:f1:f3:ad:5f:87:37:d3:c2:46:6a:c8:
17:c8:d3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:40 2025 by rpki-client