Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: MrUlyrYnJ6iVgzfWEEb5LhZUdsxL3HAUQh1klASc6YA=
Subject key identifier: CE:3D:C7:F6:68:58:8A:75:A5:F9:88:08:C9:17:FB:76:5A:C1:A0:F4
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 0197B7EA729835F005AD233D86BE958564D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 15C6
Signing time: Sat 28 Jun 2025 19:01:24 +0000
Manifest this update: Sat 28 Jun 2025 19:01:24 +0000
Manifest next update: Sun 29 Jun 2025 19:01:24 +0000
Files and hashes: 1: 1WNYYNS7RX-CeZ_6JxRjUdD-q2A.roa (hash: wxMlsJGdNKU4KY3gfHml6end/i1xs49sClefHW/FEbI=)
2: 7sgM8jQey0hzU8RbkK0fpr8zuWE.roa (hash: gY/oXRN1rQWRXTj4ibW7nW6LN4SdHlM7BLUYysL1ewo=)
3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: 6GAKSTtZ7TnsrEHR27b2ZOyBPtzSGyJjevLVwL3oW+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:72:98:35:f0:05:ad:23:3d:86:be:95:85:64:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jun 28 19:01:24 2025 GMT
Not After : Jun 29 19:01:24 2025 GMT
Subject: CN=ce3dc7f668588a75a5f98808c917fb765ac1a0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:f1:27:aa:8a:9d:2b:61:e2:19:4e:76:cf:
41:e3:1a:77:33:da:eb:ec:9a:20:2c:51:71:8f:c5:
22:f0:82:24:1f:45:74:d8:cd:59:f7:d8:6c:74:70:
be:06:76:48:b8:82:71:2b:2b:68:ce:de:ab:68:5d:
d5:c3:6d:3d:2c:55:7b:79:22:67:6b:c3:e4:d4:16:
2d:00:55:c1:8d:2f:5e:d2:db:47:19:d5:c4:32:14:
6b:b9:99:b7:de:89:e9:fa:f5:f6:d5:21:e1:2f:13:
65:e7:76:1a:e3:37:2e:40:ea:3a:0d:7e:f7:f2:96:
75:8f:d5:a9:62:32:9b:77:2e:a8:a2:07:fb:e1:5e:
2e:be:16:c8:27:9b:4a:d6:d3:7d:58:39:f1:99:a3:
61:5c:ce:64:9a:e0:1c:92:8e:12:d3:28:af:cf:9e:
a3:d9:35:7a:7e:29:d1:f8:2f:0b:7d:bd:29:9c:65:
a5:c4:b8:4c:25:51:38:b6:11:a8:f2:64:ac:8d:fd:
98:81:64:f1:3b:4f:4b:4f:8a:c0:84:71:6f:23:c6:
f6:0e:21:2a:48:0d:1b:ad:7e:98:aa:98:b1:99:4e:
07:32:0a:c1:5b:5b:4c:ff:ef:f8:2c:8c:d0:c1:d2:
95:7e:fd:42:de:e8:41:f4:b8:3b:65:c8:dd:20:1b:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3D:C7:F6:68:58:8A:75:A5:F9:88:08:C9:17:FB:76:5A:C1:A0:F4
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:dc:55:9c:3d:df:74:07:ec:9f:a6:2f:61:52:ec:20:fd:a4:
87:3c:a4:0e:57:67:a5:c0:2c:cc:33:e6:67:46:ce:31:f3:69:
52:47:aa:42:0a:a3:30:15:fb:6b:13:9f:f6:75:e8:1f:70:10:
2d:a1:af:90:b2:98:84:ff:b2:cc:5c:f3:7c:95:8f:f0:10:63:
00:17:ad:88:ac:f9:aa:e4:01:10:62:48:49:16:b4:6f:91:c6:
16:f0:8f:66:19:ef:f7:31:1a:c4:f4:d1:ba:d7:2e:2c:e7:e3:
15:27:e1:ba:c8:b0:de:20:ae:b2:dd:99:4d:bc:e7:46:13:63:
88:e5:ab:1a:61:0b:32:a8:f6:8b:de:73:80:13:c2:86:ec:ff:
66:53:08:61:1e:07:d4:6a:e0:e3:10:2f:56:a9:a6:4a:57:bf:
24:d3:57:07:14:07:a4:7c:5a:d2:de:32:77:76:76:9a:2c:82:
cd:2d:12:13:84:05:89:14:df:46:35:8d:1e:ae:7d:45:30:55:
da:7c:6d:a9:4d:f5:55:a7:5b:ea:e6:ca:cd:57:56:8f:09:f3:
2d:6e:9c:ca:cb:17:1b:2f:fa:01:21:96:a5:90:3c:a1:9b:9d:
5f:a0:0d:e7:a3:7b:88:7e:e2:24:db:a4:d1:68:52:79:91:da:
e0:64:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:52 2025 by rpki-client