Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
File: UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft (raw, json)
Hash identifier: x5aDaOgfwE4KSDwBBsYlg/otbLe6vj8ypy74Z2cKKDs=
Subject key identifier: 73:DA:DE:E0:0E:6D:FF:32:B2:BD:33:44:9F:6C:6D:41:40:DB:ED:A1
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 0197C349C70902F69323A9E860365E405EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
Manifest number: 14FC
Signing time: Tue 01 Jul 2025 00:01:21 +0000
Manifest this update: Tue 01 Jul 2025 00:01:21 +0000
Manifest next update: Wed 02 Jul 2025 00:01:21 +0000
Files and hashes: 1: JFeh_aiDk1Wok6qKY5rdZc79lcM.roa (hash: IiPvuOe1hAgTKQ/1gSaTyCWI6qu/9T3lc3CvXjp3aSc=)
2: R9Y2UXc3gbnEBailiktj6_FjgwY.roa (hash: +zsIlSUqGQ4eDziRAsiUj/M3yVhmW5V6xkg2OmRBGMw=)
3: UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl (hash: ApiCsaRI4GWsSR96HDpDbYqwciboRjde0P+6UCL/uuw=)
4: zGd05-NZw-sJTwuBu02tPsH24pE.roa (hash: ofSwbMcGSKnZ4x4xLzhpGhAWtlZ8SB33VsUVqo3M7tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:49:c7:09:02:f6:93:23:a9:e8:60:36:5e:40:5e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Jul 1 00:01:21 2025 GMT
Not After : Jul 2 00:01:21 2025 GMT
Subject: CN=73dadee00e6dff32b2bd33449f6c6d4140dbeda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:99:60:bc:72:c9:ca:57:fc:c2:68:a6:6d:
1d:68:c0:fe:6c:88:c8:b5:3b:8b:14:6b:d5:75:75:
cb:9a:26:0c:ff:3e:7e:32:a4:c9:16:12:9a:20:91:
c9:19:17:e8:9f:c1:dd:83:6e:93:30:b2:f4:34:a3:
0a:2e:ed:1a:1e:f2:35:77:1b:69:bb:15:2a:73:35:
c9:d9:42:e7:e9:9f:62:ca:38:93:24:44:f7:14:5d:
9b:58:14:42:cb:be:97:99:82:13:76:75:8e:a9:46:
4e:c6:ae:e1:2c:40:e8:0c:e3:8b:f6:df:7e:49:d8:
65:59:ed:e2:54:f1:05:bb:c6:5e:18:57:03:63:96:
66:6a:5f:6b:98:55:a9:f0:b1:55:33:f3:77:fc:7b:
73:5a:92:d8:8c:1d:52:05:34:8b:5b:d3:b8:6d:9b:
0f:97:b0:ab:b1:d8:3a:d8:40:45:68:ae:08:06:3e:
6a:71:7b:49:f6:13:3d:57:03:ab:19:99:45:14:1e:
c2:10:d7:93:4e:3d:0c:f2:3b:14:66:91:51:e7:f1:
5a:bd:6b:2e:bd:d2:60:42:cb:f6:c9:38:42:4e:80:
e2:92:df:4e:ee:dc:5d:9d:f3:86:27:7a:23:4b:5a:
d9:42:af:73:64:f7:89:59:38:3b:44:49:4f:26:1a:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DA:DE:E0:0E:6D:FF:32:B2:BD:33:44:9F:6C:6D:41:40:DB:ED:A1
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:84:b3:e0:8b:80:6d:42:a2:88:2d:76:80:52:05:d8:bb:e5:
42:98:3a:25:86:47:4c:cb:4c:ce:af:31:1d:04:4e:a3:23:72:
8a:02:92:36:a1:06:6f:92:91:0e:d8:92:b3:59:27:f1:54:7c:
d6:9a:90:a7:a4:5d:2f:e8:99:7e:d8:6a:c5:b2:48:d4:b2:0e:
c7:ed:a3:3d:06:08:fd:d0:37:d6:0f:af:e6:c2:42:25:d1:ee:
fa:72:fd:4d:1a:8f:c1:9c:ae:80:51:78:50:84:6c:f2:53:af:
35:89:6f:e3:57:d9:24:a1:b1:ca:d7:14:4d:a7:7b:cc:28:9c:
a8:ee:1c:d3:12:34:fd:6b:a8:8b:97:b8:8a:c1:53:52:93:e8:
da:9e:fe:f5:fc:c1:45:7f:c9:ec:72:a5:d7:57:66:39:ce:38:
aa:1e:1d:79:82:fb:07:25:c8:08:17:aa:12:01:8a:23:b9:fc:
31:d8:80:85:1a:ab:87:18:d8:e2:33:51:45:9c:b4:4b:21:21:
95:0a:80:ae:0c:1b:93:97:aa:19:51:20:56:27:36:fc:ba:64:
13:fb:dc:61:54:d4:75:0b:e0:e9:fa:75:52:1b:75:d3:2a:9d:
c6:d5:91:2b:de:a2:e1:34:64:6b:04:95:3f:ff:db:40:6a:76:
96:df:31:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfDSccJAvaTI6noYDZeQF6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZDE4MTk2YjI5ZjYwZTg1ZDg3MTJkZTQwMzlhNTMxY2Zj
MWFiMzEwHhcNMjUwNzAxMDAwMTIxWhcNMjUwNzAyMDAwMTIxWjAzMTEwLwYDVQQD
Eyg3M2RhZGVlMDBlNmRmZjMyYjJiZDMzNDQ5ZjZjNmQ0MTQwZGJlZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06mZYLxyycpX/MJopm0daMD+bIjI
tTuLFGvVdXXLmiYM/z5+MqTJFhKaIJHJGRfon8Hdg26TMLL0NKMKLu0aHvI1dxtp
uxUqczXJ2ULn6Z9iyjiTJET3FF2bWBRCy76XmYITdnWOqUZOxq7hLEDoDOOL9t9+
SdhlWe3iVPEFu8ZeGFcDY5Zmal9rmFWp8LFVM/N3/HtzWpLYjB1SBTSLW9O4bZsP
l7Crsdg62EBFaK4IBj5qcXtJ9hM9VwOrGZlFFB7CENeTTj0M8jsUZpFR5/FavWsu
vdJgQsv2yThCToDikt9O7txdnfOGJ3ojS1rZQq9zZPeJWTg7RElPJhp71QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPa3uAObf8ysr0zRJ9sbUFA2+2hMB8GA1UdIwQY
MBaAFFDRgZayn2DoXYcS3kA5pTHPwasxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jYmVjZjQtYmNlZC00ZDgzLWJmY2Et
YjRhMTgxY2Q0MGY2LzEvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9jYmVjZjQtYmNlZC00ZDgzLWJmY2EtYjRhMTgxY2Q0MGY2
LzEvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoSz4IuA
bUKiiC12gFIF2LvlQpg6JYZHTMtMzq8xHQROoyNyigKSNqEGb5KRDtiSs1kn8VR8
1pqQp6RdL+iZfthqxbJI1LIOx+2jPQYI/dA31g+v5sJCJdHu+nL9TRqPwZyugFF4
UIRs8lOvNYlv41fZJKGxytcUTad7zCicqO4c0xI0/Wuoi5e4isFTUpPo2p7+9fzB
RX/J7HKl11dmOc44qh4deYL7ByXICBeqEgGKI7n8MdiAhRqrhxjY4jNRRZy0SyEh
lQqArgwbk5eqGVEgVic2/LpkE/vcYVTUdQvg6fp1Uht10yqdxtWRK96i4TRkawSV
P//bQGp2lt8xbg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 03:54:10 2025 by rpki-client