Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
File: UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft (raw, json)
Hash identifier: jx5sgqSvyew+emUbUcb9tKTppIOwt1+eekJr5ILWWUE=
Subject key identifier: C2:81:53:26:64:A5:52:DC:E1:F6:E3:00:5F:00:B8:94:9E:18:ED:1D
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 0198D515DB417E3C8503EBEB98AF0FF6DC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
Manifest number: 158A
Signing time: Sat 23 Aug 2025 04:00:36 +0000
Manifest this update: Sat 23 Aug 2025 04:00:36 +0000
Manifest next update: Sun 24 Aug 2025 04:00:36 +0000
Files and hashes: 1: JFeh_aiDk1Wok6qKY5rdZc79lcM.roa (hash: IiPvuOe1hAgTKQ/1gSaTyCWI6qu/9T3lc3CvXjp3aSc=)
2: R9Y2UXc3gbnEBailiktj6_FjgwY.roa (hash: +zsIlSUqGQ4eDziRAsiUj/M3yVhmW5V6xkg2OmRBGMw=)
3: UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl (hash: Zi0EBrwg4ShgmKjWgLMXrMYfc0nOZ9pERDqjzuM9HiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:db:41:7e:3c:85:03:eb:eb:98:af:0f:f6:dc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Aug 23 04:00:36 2025 GMT
Not After : Aug 24 04:00:36 2025 GMT
Subject: CN=c281532664a552dce1f6e3005f00b8949e18ed1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:20:53:93:0a:46:c9:8b:34:f1:66:a5:d5:
a8:b8:ef:32:f5:21:bc:ff:68:2b:55:ba:8f:55:40:
26:e9:24:d8:09:83:35:ee:79:26:b8:59:c8:44:39:
5a:0c:88:b6:8c:b2:52:e3:f3:27:c2:32:46:49:9a:
6d:86:4b:a6:1e:a6:23:9a:13:9d:04:92:d8:eb:bd:
c9:31:b2:b2:bc:fe:ee:90:3d:65:e0:7f:0e:b5:e1:
6b:42:0d:f6:bf:24:fc:4f:3a:fe:6a:e1:a3:0a:1d:
7d:26:c9:c1:25:07:60:23:0d:8f:67:d5:d9:c7:1b:
c9:b6:cb:23:96:60:7b:11:dc:ba:0a:61:18:b5:62:
06:39:9e:f4:71:c1:73:ee:e3:81:44:58:00:f6:23:
a1:a7:48:51:91:78:47:a2:19:b8:cd:66:70:80:c0:
9c:f4:95:3f:57:39:a9:cb:46:38:51:7f:58:f0:e8:
f8:e0:36:e9:4f:38:1f:c2:56:84:e7:7d:91:4b:0c:
2a:21:2b:a6:2a:4d:7d:49:dd:14:7f:88:df:b6:ec:
39:e8:16:12:77:29:9c:d0:ef:ed:f4:38:e5:5f:8e:
4b:44:11:27:0c:2f:bf:d3:5a:6d:f5:db:1c:20:a3:
c1:7a:a3:98:45:61:d6:4e:07:4b:9c:44:72:04:dc:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:81:53:26:64:A5:52:DC:E1:F6:E3:00:5F:00:B8:94:9E:18:ED:1D
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d9:d9:10:7d:72:10:6b:92:a4:34:77:cf:87:b1:ff:5a:64:
ba:0f:6a:ef:bd:ae:f2:60:2d:12:59:0c:74:d1:7b:63:3a:68:
74:a8:02:34:68:ac:0b:39:fd:7e:60:1a:58:31:38:23:60:06:
a1:b6:48:60:a5:b5:86:44:73:ec:30:27:e5:5d:e5:e6:d9:58:
da:69:c4:a8:49:d3:2b:ef:62:5b:6a:ee:07:03:e6:ef:13:15:
bc:16:d7:5a:c7:f6:e8:57:d3:f2:ac:bc:68:be:23:fa:48:91:
77:87:5a:88:0d:69:0e:6b:5f:e4:b1:68:2c:c6:95:cd:7b:36:
08:11:0a:03:c4:64:00:5a:cd:62:99:f0:5e:4f:a9:af:7d:b1:
b2:22:52:fb:0f:2f:dc:91:d4:95:6e:81:68:45:5e:11:7a:2a:
20:07:10:b5:6b:84:77:8f:77:fc:4a:87:8d:2c:73:e7:d1:55:
0c:3c:7e:6e:90:0d:47:c2:a2:36:ca:b8:30:0e:5d:49:6e:8f:
9a:63:71:e5:b2:52:ec:5d:aa:53:22:e1:5e:eb:21:15:51:12:
85:13:60:f6:62:a6:30:49:b6:53:e1:96:f6:f4:16:b1:c9:7b:
31:9d:9c:e0:39:da:88:73:66:d9:40:2f:36:f0:40:ff:f7:b7:
c1:e6:63:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:37 2025 by rpki-client