Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: 8cDMmdGSxKaI+yes964MwVeYYPOe1dSm5w7kdkvaYcc=
Subject key identifier: 1A:8C:DC:A9:4F:9B:D3:DF:21:EE:48:41:BC:A3:45:98:E7:16:A4:F8
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 0197B890307B1E9A36FCA4805D954F96EA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:02:26 +0000
Manifest this update: Sat 28 Jun 2025 22:02:26 +0000
Manifest next update: Sun 29 Jun 2025 22:02:26 +0000
Files and hashes: 1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: HnG5cwyvvj+DDIgV33DcRifB3S6Hi0C4MQ6kX6dJ/HI=)
2: owqBee_Kxd5YjUschPQUDNZf4Dw.roa (hash: ot8KQMk3wQ6FB25/lH0yWio9yVgR4a2T0TywwiUxMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:30:7b:1e:9a:36:fc:a4:80:5d:95:4f:96:ea:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Jun 28 22:02:26 2025 GMT
Not After : Jun 29 22:02:26 2025 GMT
Subject: CN=1a8cdca94f9bd3df21ee4841bca34598e716a4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:c7:03:40:d2:df:2e:0a:16:51:c3:91:98:
41:9c:9a:de:19:b8:21:88:58:bf:1c:ea:c7:7a:64:
a5:f0:69:ae:cf:f2:c5:69:63:49:a3:3e:84:d8:39:
57:88:d2:e7:4c:f2:a1:a1:bc:6d:34:31:b0:17:6d:
17:b2:03:65:d7:b0:da:22:50:03:2e:97:01:fa:4d:
9e:6b:47:ec:d2:4a:a4:55:29:d5:b8:34:32:31:8b:
fd:f3:ed:11:ac:40:26:00:c9:18:d7:4e:92:e4:65:
8e:30:8b:43:05:d5:d4:9e:fe:c4:3d:b8:fc:6d:d2:
89:83:3a:81:32:29:9c:ce:7a:97:dc:c7:bf:30:55:
6e:16:bb:f9:c7:5a:3a:13:94:28:0c:0d:e2:3f:71:
2f:c9:ee:76:80:07:7b:77:6f:e1:51:a0:62:d5:28:
73:13:0c:a7:9d:75:de:99:00:2e:7a:10:95:44:ec:
77:b9:5c:8e:aa:1e:40:ec:07:70:bb:a0:2a:90:98:
45:c1:44:2f:c9:87:a0:e4:a6:8f:d2:63:78:98:d1:
07:f4:b3:16:5c:a7:af:ef:86:c2:c6:06:fb:34:62:
00:c5:af:34:c9:04:6c:02:7a:8b:45:93:94:7a:b9:
3f:b4:f0:ac:fe:9a:8d:b2:a4:90:58:93:d3:76:0a:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8C:DC:A9:4F:9B:D3:DF:21:EE:48:41:BC:A3:45:98:E7:16:A4:F8
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:10:d9:4d:08:8d:96:bf:a9:71:eb:12:65:20:15:5d:b3:cc:
57:45:46:24:38:c0:f7:21:6e:aa:ab:8b:7d:93:42:ab:7b:3f:
bd:2c:ee:ee:ba:ea:d2:f9:be:a8:c1:51:aa:ee:4c:dc:d7:4b:
ae:cd:9c:e6:06:7b:c3:ce:62:82:38:e5:2c:2d:e3:6d:a2:7d:
dc:76:40:32:14:21:26:0b:e5:a3:9f:f3:71:f8:dc:b4:c3:ca:
7e:15:1a:30:c7:a5:8d:c5:cd:28:5a:c4:19:56:48:d0:db:7e:
cf:8c:83:1a:13:05:e8:49:4a:ec:6b:b3:2b:a4:60:fb:af:cf:
56:b1:c4:7e:95:96:88:6d:25:5a:a1:09:3c:cd:ea:8d:b0:73:
f0:bf:a9:ff:45:ec:59:81:89:71:c7:8f:9e:22:bf:fd:72:ba:
f1:68:53:35:4a:9a:36:31:30:f1:9f:b6:b2:d6:2b:73:fa:c7:
e6:b1:4f:3b:a6:76:7d:e2:ed:83:13:47:c5:ea:0b:5a:2c:80:
07:7f:d8:09:ba:43:d1:80:9a:4c:c0:f4:b1:db:5a:25:78:9d:
e1:a8:f3:b1:3c:10:88:27:04:1e:c3:37:71:47:84:83:01:e0:
3d:bf:90:d0:23:f1:a6:88:03:35:ce:a0:74:2c:40:94:30:19:
21:08:fa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:58 2025 by rpki-client