Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
File: UOpay0R7LOuTKgPykAgtx2-OQOM.mft (raw, json)
Hash identifier: 6ROsYtzzMBR3NjVlfkWDbgUxREoprzVHepFMETOiQqc=
Subject key identifier: 42:0B:72:4A:B8:EB:5D:68:71:93:6A:88:41:31:A6:A4:C3:1B:73:7A
Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
Certificate issuer: /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Certificate serial: 0197B77CD875AFE98F6FCF0E7AAAAC27D0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:41 +0000
Manifest this update: Sat 28 Jun 2025 17:01:41 +0000
Manifest next update: Sun 29 Jun 2025 17:01:41 +0000
Files and hashes: 1: UOpay0R7LOuTKgPykAgtx2-OQOM.crl (hash: UZdMwp9pfODB7haYFp6Flfu4sRyEzs9lRRTPiVdIUZI=)
2: UPs4nn0eBay_fIEXwzFrziOGHlg.roa (hash: n1rQX2er8ehY5mv/Oe6cZ3YcfGOcUxMxZAxeUBrIysk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d8:75:af:e9:8f:6f:cf:0e:7a:aa:ac:27:d0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Validity
Not Before: Jun 28 17:01:41 2025 GMT
Not After : Jun 29 17:01:41 2025 GMT
Subject: CN=420b724ab8eb5d6871936a884131a6a4c31b737a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:fb:17:25:ab:e3:96:81:ff:f7:ac:a8:e4:
ff:49:60:a9:08:70:ab:c0:30:b0:7b:03:e6:3c:1f:
c2:e2:7c:69:a2:c1:df:be:58:44:51:b5:68:4e:99:
38:54:3d:4c:0c:74:20:80:31:02:a2:81:ef:5e:cf:
bf:b1:37:c8:cd:76:84:9b:c5:78:1d:ae:28:0d:39:
b6:aa:69:0e:22:fe:dd:a6:1b:14:c3:66:90:b6:5c:
95:9c:e2:80:d8:58:42:c0:1f:82:df:87:09:46:d3:
b7:7b:2e:9b:1b:de:08:9f:66:49:2f:8f:25:da:63:
63:76:2f:51:c9:2a:0c:96:ff:69:b9:3d:cd:3d:d2:
4c:ff:cf:bd:3f:7a:e3:33:08:b5:ad:71:b4:54:09:
e0:30:22:c9:16:ac:4f:1a:a1:de:e5:74:3a:24:3c:
72:9f:59:14:9f:1c:cf:f9:90:57:cb:34:33:c2:ab:
a6:08:c8:6b:3e:7b:f5:29:21:b7:0c:52:c4:ac:5a:
5b:f9:12:0f:3f:b8:24:61:5f:3e:0d:65:6c:57:92:
1f:a3:f2:b8:dc:ee:47:0e:f3:a3:15:15:46:7a:f8:
77:a7:7f:2f:1b:41:0c:28:bf:6d:a5:c1:04:27:ef:
83:f4:98:c3:96:4b:7f:55:c8:aa:ce:3e:f1:54:c1:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0B:72:4A:B8:EB:5D:68:71:93:6A:88:41:31:A6:A4:C3:1B:73:7A
X509v3 Authority Key Identifier:
keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ef:55:d5:3d:17:29:b6:0b:53:ce:ad:a9:e0:aa:a9:a9:66:
81:c5:e3:d9:26:bd:c0:37:92:bf:c4:aa:c1:57:3b:7e:24:f6:
55:ee:6d:d1:00:39:87:d4:f3:3e:d5:3f:ae:d9:f7:a8:65:fd:
88:28:26:60:c3:1d:52:d0:bd:07:0d:c1:e2:bb:d9:97:49:b6:
a5:84:c7:f6:f6:f8:85:a9:db:0e:5d:28:f8:d1:ef:0f:03:b9:
26:0a:8a:14:af:73:39:ff:b6:d6:21:c2:cc:41:3c:96:61:49:
9e:7b:1d:6e:5f:e0:83:f5:8e:b5:d1:cd:38:61:38:38:f7:76:
c5:f1:f7:e2:75:97:2b:61:6e:39:0a:12:0b:f7:68:00:97:72:
d7:a9:5f:69:da:09:3d:35:14:03:7a:51:43:6e:c1:92:85:df:
83:5e:ec:67:d6:a5:38:9f:13:af:b5:7d:a2:ec:40:b4:3c:b2:
7e:27:8d:8b:17:fa:74:af:6b:bc:ed:7e:4a:33:62:d4:eb:1a:
e7:53:28:56:f7:f1:4e:52:c8:dc:3a:48:8d:ac:26:c7:af:14:
33:2e:40:e2:7d:14:58:c9:b0:84:52:ca:a5:0c:a4:1e:5d:f4:
61:a4:5a:94:51:3e:b0:53:f5:44:03:8f:04:01:96:8c:d3:b0:
8a:39:8d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:28 2025 by rpki-client