Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
File: UPiOBciYeWyC_wFHVogW6TNCDhg.mft (raw, json)
Hash identifier: 3nGgrNHJYqkfyHKuqnnKXNRlQrxhcDCiqTURTO8GlGw=
Subject key identifier: 88:DD:DE:9A:90:A1:54:32:BA:54:C0:5F:4F:30:C6:7B:45:FC:BD:19
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 0197B74570C4E58A1916B327218E517DDC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:01:10 +0000
Manifest this update: Sat 28 Jun 2025 16:01:10 +0000
Manifest next update: Sun 29 Jun 2025 16:01:10 +0000
Files and hashes: 1: S6d6ZfQtYglTc5PqBY2Z1atkkFg.roa (hash: t4T7IISC3qIqOuSVfllwo9m13olig0aDm52s2i83g4s=)
2: TunP0FWmuXrf5YzoJj5ZZR9Zd2Q.roa (hash: 7wLHBrznfSkPVYQc5aPKo1rNMxi/Eci6q/qG+jPd+nE=)
3: UPiOBciYeWyC_wFHVogW6TNCDhg.crl (hash: UsJvr529sE7g1tMTAnPpVxz+MkCwZqrhinsYJdF+BT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:70:c4:e5:8a:19:16:b3:27:21:8e:51:7d:dc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Jun 28 16:01:10 2025 GMT
Not After : Jun 29 16:01:10 2025 GMT
Subject: CN=88ddde9a90a15432ba54c05f4f30c67b45fcbd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:97:72:64:98:01:46:cd:5c:a8:80:e9:9b:
f5:28:07:56:35:e2:ea:f5:12:46:fc:6c:af:e3:9c:
16:cb:5d:d9:05:41:5f:c5:8b:a9:a7:df:07:b6:14:
e2:cb:07:8d:15:dd:2c:e9:d2:f8:cc:2d:b0:e9:cf:
91:bb:4d:ae:97:93:b1:16:3e:15:e2:bb:90:17:66:
e2:0b:b8:54:e5:46:6e:ba:2e:87:a0:66:fc:52:13:
53:2b:1b:2d:d0:02:d9:ac:1d:60:04:e8:76:44:bb:
a4:e4:9e:e7:1d:f9:08:7b:d7:9d:4d:98:72:29:97:
c4:98:b6:60:86:50:11:98:c0:1b:a3:06:97:3c:a5:
78:c4:0b:18:c8:a1:22:04:b9:43:3c:e8:e6:c6:b0:
36:e8:7a:3f:cc:45:57:6b:f8:07:f1:a2:e4:c2:47:
64:3a:1c:cd:92:b9:bc:26:2c:8a:0c:36:5f:ba:75:
bc:80:1d:8b:6c:74:8d:95:38:0c:7d:05:9d:11:4a:
66:da:5b:c3:7f:ce:77:90:38:54:a7:40:10:df:24:
7e:c5:e8:83:da:e0:50:44:87:a0:50:08:29:ad:15:
8b:bb:0d:64:06:12:0c:c4:f6:d5:ab:93:20:eb:8d:
80:4b:94:91:a4:3b:0d:49:20:8b:0d:d2:32:40:0e:
3e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DD:DE:9A:90:A1:54:32:BA:54:C0:5F:4F:30:C6:7B:45:FC:BD:19
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5c:71:15:f5:e1:99:64:64:2c:38:85:66:f3:19:b6:a8:b1:
4b:d7:65:f9:31:e1:80:c6:b3:3b:1d:5e:7b:55:7e:b5:86:d4:
9d:6f:43:f6:87:69:7a:f3:c7:bf:16:cd:46:d6:0e:e1:40:14:
c3:82:2d:3f:59:cf:99:20:90:85:46:04:ea:a8:0e:0e:30:a5:
88:5b:7f:79:53:b5:58:6e:77:d4:09:fd:39:44:e7:91:70:f4:
75:1c:b5:66:8f:2e:f1:a3:58:3b:a6:34:83:f0:54:d1:77:a8:
28:0a:34:2b:07:7e:7a:37:b3:b8:6f:11:fb:25:89:02:ba:1c:
c8:04:e6:ef:a0:1e:7b:de:ae:8b:cc:15:79:93:4a:20:10:70:
c0:60:e5:e6:2f:33:3e:6c:e2:ac:78:21:a6:00:e9:26:fc:73:
0a:c5:1a:30:7a:1a:39:89:7a:f2:1f:3d:f9:85:2d:3e:9f:9c:
38:3c:e1:f8:00:02:99:b8:e1:b4:6e:9b:87:82:65:a5:64:12:
cc:0f:a3:0e:f5:e2:79:18:9b:65:57:22:6d:b4:f9:9f:ec:d7:
c2:65:91:44:4d:70:53:77:3d:a1:7a:5b:cc:d2:b7:d0:d4:28:
16:cf:05:f0:5b:7f:ee:44:4e:f5:90:e0:f0:d8:ca:80:4a:33:
27:6f:c6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:35 2025 by rpki-client