Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: 2+6xPauUpTdrS1M/bPS7WK5RTxvKiE/Ur2HBgFc5iNQ=
Subject key identifier: 5C:DB:76:A6:07:56:AF:AF:1D:31:62:67:3D:49:3C:2E:68:31:14:43
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 0199FB7CA0570D49A08A59D1BA29F08D4D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 1572
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: ve9Ltsdn8QB8YK7ybPKsKGv1Szs+oJpJTGckRLxlszk=)
2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a0:57:0d:49:a0:8a:59:d1:ba:29:f0:8d:4d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=5cdb76a60756afaf1d3162673d493c2e68311443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:ae:64:0e:e2:26:f5:f6:49:7d:f2:cf:6b:
37:f4:32:78:2f:e3:04:a9:b1:a9:41:6d:f5:a7:2e:
09:2e:33:c5:7b:a8:17:76:19:3c:9b:03:fc:e8:2e:
97:d7:98:ee:d3:84:9b:47:71:1e:5a:19:85:7b:c0:
2e:9d:c0:06:c0:b4:31:7a:c4:54:be:39:95:ff:8a:
07:46:6e:81:2a:2a:e8:1d:ac:7a:7a:9c:04:ed:28:
52:67:30:0f:ad:b9:df:64:25:c4:31:5f:e9:63:ec:
8c:55:7e:3c:e0:51:62:35:b1:4e:c7:5d:33:c6:6e:
23:91:ec:ee:24:47:46:68:f1:53:5b:7f:cb:9e:db:
d3:4e:b0:62:e6:7b:c5:bb:d5:2a:f1:25:7e:b1:b6:
3f:2d:11:33:f9:ad:37:5a:6c:b4:61:2b:b5:d9:87:
9a:73:84:97:95:13:f6:1b:92:67:d0:36:03:89:a3:
7d:f7:26:11:08:c6:fb:a5:5c:ab:20:98:1b:7c:5a:
71:cc:7b:4c:b8:94:7a:04:3e:fc:54:ed:f8:12:da:
03:90:ed:e7:2b:ff:1f:a3:91:99:29:11:30:17:71:
50:d8:4c:a2:61:22:70:49:ea:cb:e1:e1:ed:db:5a:
bc:0e:8a:f5:30:3f:98:de:7d:dd:b2:65:9f:13:9d:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DB:76:A6:07:56:AF:AF:1D:31:62:67:3D:49:3C:2E:68:31:14:43
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f9:88:c3:7d:41:3d:f7:89:8b:3c:54:34:c3:dd:a4:0f:43:
74:f5:fe:fc:27:6a:6f:c2:11:3e:66:06:8c:bc:b6:e4:18:57:
78:ff:4a:d5:03:4d:85:98:5b:00:5c:eb:53:90:45:61:eb:6b:
b5:60:f0:bd:71:e0:66:ba:4d:49:d8:31:3a:35:d8:30:6e:b4:
fd:b5:41:5c:04:cd:2c:df:4d:91:41:9e:53:a9:53:54:89:c6:
71:55:f6:ce:7a:3d:59:61:55:c5:34:dd:4c:3d:7d:36:ee:80:
59:b6:e2:39:eb:cd:93:04:b8:54:e5:d8:e4:99:9e:f1:db:b4:
c2:9a:e7:bd:06:bc:04:77:a2:f8:8c:8f:ff:bf:b0:dd:3d:c6:
b8:93:e9:b4:62:4b:ba:2a:b7:9e:36:17:69:39:87:53:af:93:
b6:60:61:30:1f:f8:bf:fe:ca:ea:ae:6c:d5:8b:3d:81:df:59:
8a:e8:fc:f4:0d:fd:09:db:93:9d:d8:ed:28:4d:bf:8d:93:9a:
4b:8d:0d:90:30:2c:17:20:85:a6:b9:07:01:e4:5e:b3:c0:f4:
b8:96:4d:09:14:83:cc:c5:86:88:c9:84:f3:c5:6c:41:e9:c8:
b4:3a:4c:6a:d5:81:82:c4:3e:f2:f9:83:dd:8b:64:8d:b0:e8:
e6:b7:36:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:29 2025 by rpki-client