
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: pDRI6TTL4eYeZ8FMOWCYpx9fPgz2oCq6IlahDw9H/5Y=
Subject key identifier: 46:7A:F0:99:E9:B2:F1:C0:8E:35:07:F9:20:99:37:04:68:DD:5E:7C
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 0196C0EF614AA6CFF6DD7124EA80034EBF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 13C6
Signing time: Sun 11 May 2025 20:00:35 +0000
Manifest this update: Sun 11 May 2025 20:00:35 +0000
Manifest next update: Mon 12 May 2025 20:00:35 +0000
Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: GHTtM3H9QCCYPoNjmngGAYZ4NaqstGKtfSTVbcmYST4=)
2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:61:4a:a6:cf:f6:dd:71:24:ea:80:03:4e:bf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: May 11 20:00:35 2025 GMT
Not After : May 12 20:00:35 2025 GMT
Subject: CN=467af099e9b2f1c08e3507f92099370468dd5e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:77:a6:35:b5:64:88:45:f7:d7:1f:0b:7a:
5b:5c:31:e8:0a:b0:fa:2c:15:c8:c1:13:6e:3d:dd:
a9:5b:74:0f:70:0a:c9:cf:cf:55:13:32:7e:40:24:
38:77:d5:5d:b9:79:7f:31:5f:9f:08:ab:ec:56:13:
f0:dc:86:e3:76:0b:7a:d6:33:43:fe:c0:44:6c:12:
1e:35:3c:e7:40:96:f3:a7:5f:e7:27:05:dc:d0:18:
b9:af:cb:94:a1:86:ee:46:a3:fd:5e:47:8d:ed:6b:
ce:11:e5:d5:bb:31:d6:20:eb:6b:1e:ec:bf:38:62:
b8:2f:50:41:07:af:8c:a0:a9:1f:3e:ef:f5:72:02:
99:a2:57:20:e2:ed:c4:9b:5d:e0:55:10:ea:4a:bc:
26:94:72:ca:88:c2:3a:aa:b8:20:ff:33:52:b0:24:
14:fd:aa:16:1f:d2:09:4b:03:25:35:90:56:5e:a6:
d1:42:19:24:d2:40:5c:43:0f:63:77:1b:83:a2:b8:
fa:8c:ea:9e:ef:75:f3:1a:7a:b6:a9:d5:79:84:fa:
e3:6a:77:63:25:f8:86:4c:4b:a5:20:e5:00:30:50:
cc:a8:1d:8c:ec:b0:e6:57:8e:97:cf:d0:4a:7a:1e:
c6:1a:f7:a6:02:b6:61:a3:33:19:57:6c:20:14:90:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7A:F0:99:E9:B2:F1:C0:8E:35:07:F9:20:99:37:04:68:DD:5E:7C
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:db:15:80:b3:d3:97:2e:4f:b2:b9:8e:c9:ef:3f:10:11:6a:
ce:ee:f2:74:00:4c:2a:28:78:ed:8d:db:20:0a:1e:7c:a4:58:
1b:f2:77:58:d7:5d:f8:8e:25:b0:fe:7d:34:c8:31:1c:06:c1:
53:2c:bb:04:f4:ac:e3:68:ea:06:eb:19:00:ee:51:73:09:e6:
9d:45:e2:e9:87:7f:51:63:6a:89:f3:45:63:30:09:aa:7b:4e:
eb:36:2e:da:cf:98:f4:5f:c2:30:7c:b2:84:b9:c3:fb:f0:57:
26:da:05:7d:ee:89:54:ba:eb:90:8d:5a:34:d0:47:49:ff:bc:
57:c0:eb:11:cd:43:24:00:ca:96:bc:a8:4c:f8:56:e3:aa:eb:
aa:31:45:1a:63:2c:64:e0:fe:35:f7:bf:c9:fd:c2:df:79:f1:
d4:18:53:e6:ca:cd:02:91:0c:d0:cd:44:9c:4e:f2:21:85:de:
19:66:7b:1a:58:e7:99:fb:4b:a8:73:28:05:4b:1c:b2:65:28:
bd:95:cf:68:91:ec:cf:3a:08:b3:59:3f:17:10:bf:e0:3f:78:
b0:a9:1d:75:11:86:b8:6c:b2:ec:ae:de:60:ad:25:d3:c5:96:
b9:31:b1:f5:c4:77:fa:36:54:79:c9:33:e5:11:e7:2e:71:d0:
65:b4:5f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:09:50 2025 by rpki-client