Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
File: UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json)
Hash identifier: hJh1Yq4jppkT50rKeKERJBsVTIZFDnn5aW0AKDf7szE=
Subject key identifier: D4:DA:84:D6:3E:1D:95:A6:2B:C3:07:8E:AE:FC:17:5D:90:D4:C6:C7
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial: 0197B70E9E0E5F648B4E1CB6CB083CE70DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
Manifest number: 0414
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: Flmkpd5gTmcCOCdSTCigS3i28zgyy/qwWnNQRoO5iiM=)
2: VET9fIhBlbMTkKoXploMWOAPmAw.roa (hash: IZFEuAAvRivghgtvVt+QUqUo/tUxGCoadK0TgrUsiYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9e:0e:5f:64:8b:4e:1c:b6:cb:08:3c:e7:0d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=d4da84d63e1d95a62bc3078eaefc175d90d4c6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d8:5d:3b:09:3c:99:02:aa:79:42:79:ba:cb:
5b:72:da:53:7c:95:51:51:90:37:44:48:32:d8:f3:
2e:41:36:ca:70:72:71:fd:27:42:2e:9e:06:8b:3a:
eb:d6:00:33:4f:6a:b9:4c:58:d8:16:6b:ac:a5:6f:
2d:7b:b6:4d:8c:b2:f4:2c:15:2f:0e:2d:b2:2b:b9:
72:48:59:b3:47:8a:aa:6b:7c:81:79:81:c3:a9:fa:
4d:5a:6c:d1:2f:c4:3a:6d:e4:1f:94:bd:01:0a:59:
14:7f:c9:29:2b:ef:33:fc:ad:0e:4c:28:6a:5e:40:
d6:86:b1:4a:b0:f2:a3:c2:22:b5:a7:00:fd:a1:37:
a6:cc:0a:48:37:bc:53:92:8f:42:e0:9d:63:00:66:
9d:fa:22:6d:88:f3:18:e9:f5:1e:5e:67:14:6b:df:
c5:b7:fc:57:b5:5a:f3:37:03:63:54:fc:c8:d3:4a:
30:94:db:8c:3c:84:d3:ba:3f:84:e0:9d:9b:57:8e:
df:97:27:46:48:d6:fd:81:f0:3f:68:69:bf:52:89:
37:55:55:4c:c3:9b:34:34:33:a7:db:67:93:df:1e:
90:dc:b3:67:28:47:7a:a0:ad:6b:8a:c5:d1:7f:64:
3d:40:40:c8:d6:10:3e:21:41:2e:d4:be:2f:0b:e7:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DA:84:D6:3E:1D:95:A6:2B:C3:07:8E:AE:FC:17:5D:90:D4:C6:C7
X509v3 Authority Key Identifier:
keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:29:81:18:0f:e9:fd:2b:c2:a1:3d:df:20:f6:e3:8b:32:f7:
e1:09:66:ea:c7:9d:60:f6:0a:52:a0:df:60:a8:cd:1b:9d:a1:
ed:c5:0d:a5:13:4d:e1:d1:60:b4:29:71:bd:aa:ca:f6:0e:82:
9b:e9:6b:0f:5d:c7:c5:43:1f:17:02:64:d6:ae:33:c9:ab:da:
ce:4f:e8:3f:1a:13:ae:a8:a7:0c:07:c1:98:d6:cb:06:3d:93:
47:80:81:6a:4f:40:05:ae:57:f2:77:07:4e:6b:e0:29:da:8a:
64:7d:f5:de:63:fd:2f:c7:fb:c8:1d:84:e2:23:58:ef:18:87:
b3:79:66:99:1f:68:ea:a3:24:d0:04:cb:32:48:a7:6a:05:32:
ee:cc:c7:85:3c:9c:52:20:52:8a:c6:0a:20:d4:7c:cb:3d:cf:
fd:2a:4d:78:4e:fc:01:cb:ac:a1:59:74:0d:46:f4:d0:0e:2f:
37:43:1c:7d:e8:01:e3:3a:9d:65:50:fd:4b:61:8c:dc:34:d3:
55:22:50:93:78:11:a9:9d:34:4f:83:a7:51:b1:01:44:93:7c:
b7:f1:09:67:30:69:ce:72:4c:7e:d9:34:b9:38:d2:c8:9e:97:
1c:40:3e:5a:0b:a9:6d:5e:75:87:eb:c7:6e:cf:13:ee:3e:bf:
06:20:52:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:43 2025 by rpki-client