Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: 8fEp6ol+q+/CXbqjVbEhwu2SoNGj9b4fd9Au957NEDk=
Subject key identifier: AE:28:8D:75:C1:3A:E6:16:09:0D:49:CA:8E:68:64:C6:72:59:9B:2A
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 0198D5F1620DC336B9DDDA41F33AFB3EA94A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 14DA
Signing time: Sat 23 Aug 2025 08:00:22 +0000
Manifest this update: Sat 23 Aug 2025 08:00:22 +0000
Manifest next update: Sun 24 Aug 2025 08:00:22 +0000
Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: cL2BaAM0lIiiEktahxOKAJaNTVGCv2AQYwF94VFgt8Y=)
2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:62:0d:c3:36:b9:dd:da:41:f3:3a:fb:3e:a9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Aug 23 08:00:22 2025 GMT
Not After : Aug 24 08:00:22 2025 GMT
Subject: CN=ae288d75c13ae616090d49ca8e6864c672599b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:5d:fc:4b:7f:e4:6c:7d:02:de:6d:b6:04:
70:e1:ef:82:ca:d7:98:92:06:9f:fc:46:6d:e0:a1:
a2:3d:d3:d2:cb:2a:cd:b4:58:bd:82:17:05:fe:b5:
f4:bd:f8:48:a4:f6:ac:09:db:c7:8a:64:23:e0:a1:
f0:8d:bf:5d:a0:35:79:a5:52:a7:03:9c:5c:4a:0f:
88:7e:58:89:d5:8e:f4:ce:ba:f1:38:c6:05:3b:5c:
59:67:03:2b:b1:c4:2a:6e:e6:62:90:21:31:16:2d:
a5:25:65:55:db:5e:9d:3a:02:41:a1:7d:b6:76:2b:
28:6d:75:cd:b6:be:c5:ed:0c:fa:ac:54:0f:cc:84:
96:29:e6:6e:de:b0:1c:e4:c1:ec:cf:9c:e1:92:a5:
0f:f4:cb:b5:89:58:f5:7b:cd:d9:98:39:a1:a0:d1:
e8:33:da:8e:2d:35:4e:a8:4a:85:fe:fc:3c:6a:3f:
af:65:a4:a6:78:07:24:90:c4:a5:8e:93:36:04:67:
bb:f3:1d:6e:4a:28:89:d4:fa:01:e5:9b:e4:7a:34:
e9:5b:f7:38:10:e6:63:57:fd:60:11:de:6d:3e:0c:
7c:0b:a2:19:df:2a:6a:fa:d7:76:22:ed:d4:86:ce:
07:6f:bb:d4:7e:22:4b:5f:67:d4:5f:e3:df:e5:0c:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:28:8D:75:C1:3A:E6:16:09:0D:49:CA:8E:68:64:C6:72:59:9B:2A
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c6:e5:74:f0:2a:f4:d0:05:87:b5:65:6b:1d:2b:00:24:4f:
f5:59:68:b9:71:9b:8b:24:cc:58:62:33:b6:62:bc:79:58:fb:
9a:a4:24:42:5a:65:a6:ad:8a:31:b4:b2:6b:77:7f:ef:d6:65:
25:dc:aa:75:f8:1b:af:43:81:25:ff:98:ce:d9:98:47:9d:55:
27:5a:14:30:88:c3:d3:10:e1:5f:69:4e:97:ea:db:aa:52:58:
76:36:e4:22:63:01:ae:c7:be:ad:71:0b:ef:98:b9:c8:e2:e4:
a4:73:19:2d:d4:d5:01:84:1b:33:04:90:4d:db:ed:07:cb:d0:
8f:ac:9a:a2:bf:44:09:2d:35:58:35:3f:6a:0b:72:f3:b8:9d:
4a:32:ca:03:a7:a3:9c:78:c9:62:ca:4a:48:0f:d8:f5:bc:70:
c6:da:8d:fb:3b:f6:14:bb:25:8c:25:7e:4e:2e:e9:7a:d8:8f:
6b:50:f8:37:ce:03:af:4e:08:a2:1c:8e:06:fe:19:99:c1:f3:
27:81:90:77:76:01:07:1d:7a:9c:b2:ce:44:29:a9:e7:dc:c9:
32:5c:9d:5c:5b:ff:3b:d5:26:f6:05:7b:e1:f9:9f:3e:b0:14:
b6:17:4a:92:0d:59:2f:bc:9a:ec:2c:6f:94:2c:65:0a:01:e0:
b9:cc:67:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8WINwza53dpB8zr7PqlKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzAwNmQ2NDAxZWY0MmZhNTBlMjQwOTU1MDBiMmZkYWZh
ZDViYWEwHhcNMjUwODIzMDgwMDIyWhcNMjUwODI0MDgwMDIyWjAzMTEwLwYDVQQD
EyhhZTI4OGQ3NWMxM2FlNjE2MDkwZDQ5Y2E4ZTY4NjRjNjcyNTk5YjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T9d/Et/5Gx9At5ttgRw4e+CyteY
kgaf/EZt4KGiPdPSyyrNtFi9ghcF/rX0vfhIpPasCdvHimQj4KHwjb9doDV5pVKn
A5xcSg+IfliJ1Y70zrrxOMYFO1xZZwMrscQqbuZikCExFi2lJWVV216dOgJBoX22
disobXXNtr7F7Qz6rFQPzISWKeZu3rAc5MHsz5zhkqUP9Mu1iVj1e83ZmDmhoNHo
M9qOLTVOqEqF/vw8aj+vZaSmeAckkMSljpM2BGe78x1uSiiJ1PoB5ZvkejTpW/c4
EOZjV/1gEd5tPgx8C6IZ3ypq+td2Iu3Uhs4Hb7vUfiJLX2fUX+Pf5QxANwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4ojXXBOuYWCQ1Jyo5oZMZyWZsqMB8GA1UdIwQY
MBaAFFDABtZAHvQvpQ4kCVUAsv2vrVuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEt
YzJkY2RjODVlNTg0LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEtYzJkY2RjODVlNTg0
LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcbldPAq
9NAFh7Vlax0rACRP9VlouXGbiyTMWGIztmK8eVj7mqQkQlplpq2KMbSya3d/79Zl
Jdyqdfgbr0OBJf+YztmYR51VJ1oUMIjD0xDhX2lOl+rbqlJYdjbkImMBrse+rXEL
75i5yOLkpHMZLdTVAYQbMwSQTdvtB8vQj6yaor9ECS01WDU/agty87idSjLKA6ej
nHjJYspKSA/Y9bxwxtqN+zv2FLsljCV+Ti7petiPa1D4N84Dr04IohyOBv4ZmcHz
J4GQd3YBBx16nLLORCmp59zJMlydXFv/O9Um9gV74fmfPrAUthdKkg1ZL7ya7Cxv
lCxlCgHgucxnVA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:13 2025 by rpki-client