Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: nVJXN+eCM8aHp0cNi0iKXeOt+D+8YDFQg+eUsKRKG28=
Subject key identifier: B1:70:B3:B0:AD:FA:11:34:4C:6B:45:CC:3F:D8:E1:73:1B:23:D4:DD
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 0197B632867C1173607743D69EDB3681CBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 1445
Signing time: Sat 28 Jun 2025 11:00:53 +0000
Manifest this update: Sat 28 Jun 2025 11:00:53 +0000
Manifest next update: Sun 29 Jun 2025 11:00:53 +0000
Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: iuXNUXby3iDWo5gxbfuBV+/+iN07BmWsJ9yoythJcr4=)
2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:86:7c:11:73:60:77:43:d6:9e:db:36:81:cb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Jun 28 11:00:53 2025 GMT
Not After : Jun 29 11:00:53 2025 GMT
Subject: CN=b170b3b0adfa11344c6b45cc3fd8e1731b23d4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:ff:df:e0:91:84:de:ec:a6:d4:b0:c6:39:
f4:c8:90:2a:ee:9c:fd:bd:c2:3d:b2:82:e5:e9:be:
ce:a1:78:12:bb:51:ce:86:6c:36:36:c9:ee:14:eb:
01:52:33:51:db:f3:94:8e:b0:34:3b:99:5e:3b:19:
57:55:4f:f0:8a:8e:72:01:e6:09:3d:19:e7:d4:25:
4c:0e:19:7c:88:de:02:19:52:c4:35:e7:40:1d:f0:
bc:2f:f8:48:ab:a8:da:10:d9:c6:2e:be:1f:d9:1f:
ed:07:12:d7:2b:73:c6:ca:c8:0d:f2:1d:b6:a4:bb:
a6:46:5c:19:55:90:0a:4c:c4:99:83:58:7e:a6:40:
85:4a:7c:73:68:c7:4f:6d:4e:13:1d:5e:e5:6a:68:
01:08:db:30:5d:17:b5:5e:d2:cb:72:29:24:66:94:
64:ea:91:53:b7:ad:4a:3d:ff:75:4b:bb:c7:cb:2a:
c2:38:67:eb:da:6d:89:3c:a5:e2:f9:07:6c:f9:5e:
67:e6:31:8c:0e:07:57:f5:00:78:54:44:f1:5b:61:
57:23:39:bf:65:81:0f:86:41:5f:b1:74:f0:6b:f9:
cb:f3:40:74:19:9d:0c:45:09:3a:1c:b8:b7:1b:5b:
3e:37:84:36:12:e4:24:84:ab:18:ac:cc:76:0a:bc:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:70:B3:B0:AD:FA:11:34:4C:6B:45:CC:3F:D8:E1:73:1B:23:D4:DD
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4c:cc:e7:b0:a5:d8:5d:a9:e1:2c:a1:c8:09:14:68:f3:58:
f9:c0:37:e6:3c:dc:c2:ff:24:e8:6e:76:e6:ab:f6:53:82:c8:
c6:ee:4f:75:95:e6:e9:3e:95:8b:67:cd:6c:51:b8:7a:0e:bf:
27:fe:bd:26:6d:ef:eb:f7:80:48:6c:60:51:56:5c:32:2e:f0:
fb:f9:f4:95:ea:be:bf:61:cf:bb:ae:88:94:09:6a:8b:5d:93:
62:90:79:9a:c2:42:a0:ae:47:37:bb:e1:a3:da:c0:48:03:45:
12:04:cc:04:25:63:2b:36:ea:2c:d3:c3:56:e0:f3:14:93:c4:
b8:64:e4:69:bc:0a:37:5b:23:cf:c1:ae:70:e7:24:62:ef:02:
8c:50:d4:82:82:54:32:5f:08:44:c2:ab:7f:22:f9:ea:6e:04:
19:19:5a:7a:61:47:9d:ce:4a:6e:a8:bb:8e:eb:79:1d:25:38:
2e:53:ab:1a:b5:15:67:ed:82:cb:7c:f0:d9:f7:67:7e:75:99:
06:85:95:14:d2:37:76:4d:8a:05:19:fd:4b:ae:be:48:88:34:
71:28:a6:ad:7a:b3:64:31:40:d0:69:3e:d2:c1:a5:75:35:4c:
bf:73:39:94:18:f2:a7:db:39:38:3e:bf:7d:50:61:e4:63:ae:
eb:24:0e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:38 2025 by rpki-client