Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
File: UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft (raw, json)
Hash identifier: o0HckK0eepiNeoxmESqIzOwpXBgDznpd1LR2Xs+rEZ8=
Subject key identifier: 59:B1:54:4A:BB:89:79:ED:06:18:66:6A:23:92:50:0F:0A:91:21:09
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Certificate issuer: /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial: 0197B6A1FD0ACB9EFB69AA3AD7B2F5AD36B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:02:38 +0000
Manifest this update: Sat 28 Jun 2025 13:02:38 +0000
Manifest next update: Sun 29 Jun 2025 13:02:38 +0000
Files and hashes: 1: 9m785MXZwp0BQtk_jk4fp9A4qB0.roa (hash: u+8J+4zJtWHS217NkWrzbcfb0E+Zj0l1Wu1mFSLU2lI=)
2: UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl (hash: KTIM5m+VIyFMSKhicpE2QgUE0WMSL0seW/I8kcliG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fd:0a:cb:9e:fb:69:aa:3a:d7:b2:f5:ad:36:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Validity
Not Before: Jun 28 13:02:38 2025 GMT
Not After : Jun 29 13:02:38 2025 GMT
Subject: CN=59b1544abb8979ed0618666a2392500f0a912109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:5c:04:ee:7b:13:39:e3:cc:ce:61:56:ed:
e4:16:23:41:26:9d:c5:28:65:d4:e5:6f:70:6a:1a:
84:51:25:37:78:a7:08:1f:b4:f1:28:82:f5:f2:d9:
f9:24:5f:b7:6a:a0:ee:e2:ea:ff:cf:63:16:2f:ff:
c4:db:b1:59:55:a8:d5:9d:40:90:5c:6e:c3:31:f4:
cc:d1:31:7a:3f:8b:c0:26:f7:04:31:f7:40:6f:f0:
4c:6c:f9:a4:6e:ab:b2:e6:d7:3c:03:a1:ce:65:a9:
8a:f1:1b:b2:e0:31:43:02:78:c0:38:4a:8e:22:77:
19:c2:0e:b3:54:2f:76:d2:7f:6a:28:85:e0:3f:2a:
56:a6:79:1f:12:59:63:e1:be:c7:1a:7b:dc:4e:bb:
3c:39:ac:bc:33:d5:98:d6:2e:09:b7:a0:da:52:04:
78:b6:88:71:5d:6e:e8:0a:f9:86:7c:4a:a7:b1:9a:
33:d2:c4:d5:3e:ef:f7:d5:ca:6f:f3:4e:86:89:02:
58:0f:fb:fa:13:ba:3c:5f:c0:9d:4b:f8:9f:33:dd:
b2:38:43:83:72:59:32:22:a0:1b:f4:4e:49:cb:1d:
8b:6a:e7:32:8e:14:c2:bd:31:5e:16:d1:67:94:90:
8c:08:0d:2f:31:45:61:f2:e1:75:66:6a:41:ba:ba:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B1:54:4A:BB:89:79:ED:06:18:66:6A:23:92:50:0F:0A:91:21:09
X509v3 Authority Key Identifier:
keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3a:e3:3d:78:b5:0a:d8:0b:5c:db:ac:e3:3c:3f:90:57:9b:
9e:85:62:f0:83:b5:d8:51:f8:c9:f6:61:e1:38:db:67:0e:40:
22:1e:1c:8d:2b:7f:38:a6:2a:0c:f4:2e:0d:9b:26:5a:60:30:
67:45:85:7f:26:c4:20:e4:fc:08:82:9a:ab:d9:58:e9:49:67:
36:18:4d:e8:38:ad:a8:39:54:89:1f:b2:6c:e1:91:5f:8c:9e:
5f:79:eb:53:67:02:58:fa:56:61:e8:4b:49:ab:1c:2d:95:38:
19:1d:69:fe:9a:14:d0:91:91:c6:af:96:ba:c0:c0:c4:15:dc:
05:f1:a7:20:3e:cd:b5:1c:7a:6f:44:b8:6e:b4:27:97:bb:c5:
82:13:11:44:07:3a:2c:fa:1e:fc:41:fc:ae:16:ed:5f:51:3a:
21:3e:2a:9a:98:af:4b:9d:93:50:20:9a:6e:59:6f:fa:01:0f:
3d:4f:21:1d:fd:46:4b:c4:84:8c:8f:1d:8e:a9:bf:f7:d5:03:
6a:98:56:16:6d:15:99:db:4a:5f:a0:ff:09:6d:f4:65:0b:df:
f7:30:f7:c6:72:e4:ef:ce:d7:7c:52:53:00:1a:0e:ed:70:59:
67:5e:0a:21:53:75:6c:2d:fb:18:45:96:50:17:0a:42:8d:cb:
d2:78:51:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:52 2025 by rpki-client