Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
File: UOpay0R7LOuTKgPykAgtx2-OQOM.mft (raw, json)
Hash identifier: 3elmRm9Qxg9hwmCwH9dJTpqjmiDFC5jeUlTs4st1r5o=
Subject key identifier: 50:64:ED:10:85:D8:DA:BD:78:91:3C:9F:7E:15:3D:C4:59:20:22:6F
Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
Certificate issuer: /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Certificate serial: 0198D73B874D9DAC2545CF4B4FD5F90F3A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 14:00:59 +0000
Manifest this update: Sat 23 Aug 2025 14:00:59 +0000
Manifest next update: Sun 24 Aug 2025 14:00:59 +0000
Files and hashes: 1: UOpay0R7LOuTKgPykAgtx2-OQOM.crl (hash: pb+FHmLNNYDWW9WscYzJk/R8JBjaajbmv3PL/py4Cks=)
2: UPs4nn0eBay_fIEXwzFrziOGHlg.roa (hash: n1rQX2er8ehY5mv/Oe6cZ3YcfGOcUxMxZAxeUBrIysk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:87:4d:9d:ac:25:45:cf:4b:4f:d5:f9:0f:3a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Validity
Not Before: Aug 23 14:00:59 2025 GMT
Not After : Aug 24 14:00:59 2025 GMT
Subject: CN=5064ed1085d8dabd78913c9f7e153dc45920226f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:77:4a:51:bb:3c:1c:28:23:a2:b6:eb:3a:
14:e0:4d:5f:df:9a:1e:b4:d1:f5:5c:b9:23:e6:ac:
60:16:13:8e:8a:3f:1f:eb:e4:5b:97:1c:7a:33:ff:
8c:25:a1:5b:f5:f3:75:bc:1e:e0:f9:a7:1b:c3:cc:
74:99:43:81:d9:bf:b0:a0:72:88:4d:3b:37:a0:4e:
a2:11:9d:56:4f:0a:77:74:93:c6:e7:20:68:a7:3f:
6d:65:ff:f2:1b:91:f6:7c:48:73:f0:2d:5f:21:f9:
ae:a6:c3:87:1f:c6:36:e0:67:84:bd:d2:19:0b:45:
37:be:66:11:0f:83:72:79:db:e5:4d:02:37:9e:e7:
ae:5a:4a:9a:7a:ee:13:1f:ca:af:aa:6d:79:dd:83:
7d:87:70:29:69:fc:48:6c:cf:ae:1b:41:ec:37:33:
c5:6d:c9:cd:03:9f:bd:6f:de:a7:6d:5f:d8:62:6f:
2a:0f:71:a9:fa:57:98:30:ce:4f:2a:ec:2e:b2:59:
16:6c:7f:c7:cd:bc:1c:df:6b:2b:26:64:86:78:38:
37:81:81:85:f1:81:a7:80:98:e8:e9:e4:90:36:d6:
2b:a9:9f:9d:8e:ea:c3:90:15:fd:bc:b1:db:06:c2:
41:e2:bb:41:da:c7:a8:a1:35:91:e1:d1:91:89:7b:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:64:ED:10:85:D8:DA:BD:78:91:3C:9F:7E:15:3D:C4:59:20:22:6F
X509v3 Authority Key Identifier:
keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:51:40:d1:fb:22:f5:f6:d1:93:9c:cd:2b:f6:3d:b3:54:e1:
76:62:6b:3f:95:56:5c:36:12:6b:0d:82:e5:5d:46:94:5d:53:
cb:55:ed:84:6f:8f:86:23:5b:99:18:74:41:84:df:96:f3:aa:
cb:a1:4a:04:f2:8b:9c:d9:6f:51:8b:37:05:32:74:98:77:1f:
5d:9e:0d:f2:bc:94:4d:4c:33:ca:f5:2d:c2:50:13:3b:1e:64:
2b:ed:a2:ce:38:30:60:7c:dc:32:b0:61:ca:86:d7:45:ac:6a:
18:36:8c:6b:29:49:07:7e:01:34:e3:94:13:c6:51:90:75:0b:
54:24:4f:2c:6b:37:d9:99:ef:19:0e:a3:b1:55:5f:ba:fb:7a:
2e:1a:0e:8b:b7:b1:77:7d:e8:46:44:c7:d0:da:53:23:1c:e3:
76:26:6e:a7:47:b4:77:7b:52:01:aa:f0:4b:7e:73:bf:2f:e3:
45:e9:b9:8d:c2:d0:5c:8b:4a:cf:84:b7:c6:af:0a:34:db:98:
1c:9f:17:b0:7b:64:e0:dd:79:6a:c3:01:8a:16:19:fd:81:b4:
67:d2:9f:d4:46:97:06:3f:b3:46:2e:1f:05:b5:4d:27:14:ee:
74:cf:6b:cd:1a:81:5e:a5:72:79:d2:f0:f7:04:20:82:08:d9:
d0:42:27:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:34 2025 by rpki-client