Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
File: UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft (raw, json)
Hash identifier: 1rNt/74ReTX4GE0pib1pEsA8GBTrAKM0la5cDa3sins=
Subject key identifier: 48:8B:3D:CB:66:21:08:DF:9E:CF:5D:B2:00:BA:03:79:8D:B1:FA:26
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Certificate issuer: /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial: 0198D4728D3DB22B9C22539871B0FD6DFA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:02:13 +0000
Manifest this update: Sat 23 Aug 2025 01:02:13 +0000
Manifest next update: Sun 24 Aug 2025 01:02:13 +0000
Files and hashes: 1: 9m785MXZwp0BQtk_jk4fp9A4qB0.roa (hash: u+8J+4zJtWHS217NkWrzbcfb0E+Zj0l1Wu1mFSLU2lI=)
2: UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl (hash: jH2m2wat8LIrYpvIiO1fM4RutX8zhrjbm749w/r7+gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:8d:3d:b2:2b:9c:22:53:98:71:b0:fd:6d:fa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Validity
Not Before: Aug 23 01:02:13 2025 GMT
Not After : Aug 24 01:02:13 2025 GMT
Subject: CN=488b3dcb662108df9ecf5db200ba03798db1fa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:73:c7:c1:de:f5:4a:88:12:9f:df:fb:f8:
d2:5e:61:6f:81:29:3b:b5:a1:42:62:a1:6c:58:aa:
86:ee:27:c8:56:42:3b:e9:9c:87:1e:85:cb:58:1d:
25:2d:f8:d3:b0:52:87:cb:3d:5c:dd:dd:7b:a7:08:
f0:87:f6:78:41:d3:49:c9:16:17:f0:79:82:6f:74:
e2:20:90:7c:c4:76:74:21:4b:07:52:07:62:74:e2:
6d:8a:eb:3f:f7:fc:25:5c:53:05:9e:d8:9f:27:8c:
03:18:83:1a:67:02:85:a4:a9:08:d1:1d:71:38:25:
b2:ac:05:10:a2:1c:f6:f0:a0:d8:37:85:1b:c9:4c:
ca:87:d7:4a:5b:ea:b2:6e:fe:93:98:8b:fd:e9:14:
ea:9a:e2:1b:d0:3f:df:77:06:b8:59:5c:a8:31:fb:
70:05:a3:32:14:11:42:63:4b:72:78:36:7c:59:4f:
cf:b9:5c:57:dd:17:b2:c1:04:29:df:d4:54:e3:79:
a4:73:0e:12:59:b4:6a:99:64:ee:ab:cd:2f:7f:02:
01:af:83:b7:d0:17:ad:ec:59:29:6e:16:6e:18:5f:
2c:d3:1c:7b:ae:1c:1b:4c:85:0f:ae:21:12:01:a0:
b5:2a:f3:0a:5d:ad:4a:71:12:aa:70:34:41:2a:e5:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8B:3D:CB:66:21:08:DF:9E:CF:5D:B2:00:BA:03:79:8D:B1:FA:26
X509v3 Authority Key Identifier:
keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:7c:60:44:8f:32:47:f7:e3:cf:30:0e:fe:5d:01:ce:37:b9:
3f:7b:da:dd:9a:ed:ae:2c:4a:2c:65:e6:f8:fd:81:39:a8:3d:
a7:4e:94:3c:b2:7b:c8:3b:3f:4c:c7:69:b0:e3:72:b0:fc:73:
fc:ac:6c:c9:f9:7e:04:15:72:b2:7c:44:04:50:d6:c5:1e:dc:
52:c6:ea:0e:3e:29:c5:dd:0c:92:0f:48:be:9d:bd:1b:1b:24:
1c:12:23:b4:31:0b:e0:eb:8a:6a:d9:07:b0:85:0b:2c:5c:73:
a5:58:59:5b:70:88:75:e7:0e:0b:b0:ea:c7:1b:29:22:01:ff:
af:c3:f1:0d:ef:c4:9e:22:f6:8c:39:84:80:ee:d8:9f:d7:f7:
31:62:ee:29:05:76:09:6d:c7:82:ca:a5:57:03:ac:f3:b7:4e:
82:4b:01:58:69:db:7c:25:99:10:2d:7c:3d:5a:db:bb:ea:32:
b8:ea:70:6b:06:0b:ad:39:04:d1:72:03:6c:86:8c:46:e0:b8:
27:e1:7a:52:b7:b5:0a:69:99:5d:13:bf:4c:fe:69:72:c0:5a:
1e:2a:e2:97:28:57:63:9a:73:b5:d2:f9:90:08:a1:1a:ff:f6:
77:5e:b9:c7:48:fe:a8:1b:d1:6b:b8:56:41:d3:7b:ab:54:84:
9d:bb:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:49 2025 by rpki-client