Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
File: UFZxLM-od6u3YMt34nBBd0ywRzk.mft (raw, json)
Hash identifier: L/Zuvf9F9NIY5lO+EkbH5/9wX7MqSw4x96RRdURRD7Y=
Subject key identifier: A0:33:0C:C4:A2:CB:16:E6:FC:12:CC:7A:D3:9E:76:59:51:E2:9D:A4
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 0197B6A1EBFC7D08C3AC9245B83D9E5C8369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:02:34 +0000
Manifest this update: Sat 28 Jun 2025 13:02:34 +0000
Manifest next update: Sun 29 Jun 2025 13:02:34 +0000
Files and hashes: 1: KkYiM3e0iOAnAg_yFBFSK_bjJl8.roa (hash: 5A5Vdre+g6oCjMH5zABiFnTSkWahsDuZjsJoxbwHMo0=)
2: UFZxLM-od6u3YMt34nBBd0ywRzk.crl (hash: u4ffjwAaZVNMfltcCZTlMUVRyU4J5VjUg9xiJ0WZFgM=)
3: _Q23PPlL8v2niGzmSooSDUdLWSk.roa (hash: 8JwVrSvS2kxaZsRD1vVjitt0fjw3hWWmjxqgx0yIUoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:eb:fc:7d:08:c3:ac:92:45:b8:3d:9e:5c:83:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Jun 28 13:02:34 2025 GMT
Not After : Jun 29 13:02:34 2025 GMT
Subject: CN=a0330cc4a2cb16e6fc12cc7ad39e765951e29da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:66:14:44:7e:87:c7:72:af:32:96:a0:70:
8f:a9:d4:31:3c:56:dc:c6:4f:23:3a:ff:d1:24:9a:
60:03:1f:e5:4d:b1:27:88:ef:49:18:85:23:75:94:
f7:82:eb:ef:bf:3a:33:c1:7a:2e:0b:ca:43:e9:ba:
97:52:2d:38:1b:c3:1e:d3:e2:23:e7:56:26:f6:6c:
24:01:d4:12:f1:73:c1:39:32:bc:3a:55:2f:e7:a5:
62:76:98:55:1d:4c:32:60:6d:75:06:1c:c0:d1:f3:
43:13:f9:8e:7c:46:c3:51:a3:c3:c1:af:c6:99:17:
ba:be:e6:39:87:dc:84:8b:6c:54:2c:4b:84:ca:96:
d2:1b:48:8a:db:56:0f:92:71:93:45:95:8a:57:88:
40:fb:0c:6d:94:6e:a8:4b:f2:77:23:8e:3b:8c:15:
e0:24:7f:36:d6:77:d6:c2:c3:25:15:52:20:53:15:
c7:b3:6f:56:bd:e6:06:df:96:97:58:d8:88:d9:8d:
83:c5:21:70:bd:19:09:32:52:45:e6:dc:9c:45:06:
e9:8f:51:fd:7f:2c:28:49:bb:1c:6b:56:cc:b6:34:
b2:2f:84:da:04:5b:1c:5e:6c:64:bd:92:e8:94:71:
a5:30:a4:95:33:b5:bc:04:6d:c2:61:6d:68:4f:7d:
b9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:33:0C:C4:A2:CB:16:E6:FC:12:CC:7A:D3:9E:76:59:51:E2:9D:A4
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c0:23:bc:d3:52:4d:dd:da:ed:a3:7a:97:32:03:73:a2:98:
ea:6e:22:c2:48:d4:d8:59:51:f7:14:e8:44:41:b8:01:c2:69:
65:6b:32:fd:e8:bb:a7:a4:8e:7e:de:75:0c:74:b0:49:2c:36:
4e:72:3b:ef:ab:bb:99:c7:7b:19:0c:85:7b:a0:a9:5b:4c:4c:
a8:db:69:96:d6:0b:0a:b4:74:f7:44:1d:e3:38:bb:82:19:a9:
47:56:02:d6:7c:60:b7:2b:c5:41:a4:68:4f:3c:ee:e5:92:00:
e9:5f:35:42:b7:0a:8b:8a:17:f3:da:c1:47:7c:df:96:05:af:
ed:72:b0:1d:c7:3b:09:33:62:f3:5d:b7:a5:f5:87:02:76:0c:
36:c6:a7:36:17:5a:ae:57:5f:2d:61:46:93:c3:b2:7d:66:92:
83:b7:5f:19:ee:31:83:84:97:f5:bf:74:7b:02:2b:6b:03:ac:
5c:e9:0f:b6:a6:eb:9f:97:97:5f:58:0c:ca:74:8c:3e:4c:d8:
bb:9d:de:36:54:48:c8:cb:6c:48:8c:ab:f1:c5:10:73:f8:6d:
5f:bd:7c:f0:df:1b:3d:0a:b3:d6:73:cd:76:22:df:9b:9f:ab:
63:6c:a0:64:0b:46:2d:95:10:87:d6:6d:cf:e3:f6:dc:03:8a:
fc:d2:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:35 2025 by rpki-client