Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File: uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier: h5uw4CkJHUJhfkI33M6I63CAfJnbuaFQWMwUjJccG04=
Subject key identifier: 41:59:4E:99:B3:9C:3C:E6:6C:93:99:EA:64:27:C5:11:14:1D:2A:2B
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial: 0197B9D872754D96036C7061F67B991D1C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number: 0549
Signing time: Sun 29 Jun 2025 04:00:59 +0000
Manifest this update: Sun 29 Jun 2025 04:00:59 +0000
Manifest next update: Mon 30 Jun 2025 04:00:59 +0000
Files and hashes: 1: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: a9xYxbUWSgMjqaxjsF4Y6rQmXPim8TfJWXFSnnDFF2s=)
2: y_KZFLyx6LB5ap_GILmPLg-5ycM.roa (hash: jyTla7fsBC19wAEeiM1utmLy4FEG2TIj9sVLX9ZK0Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:72:75:4d:96:03:6c:70:61:f6:7b:99:1d:1c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Validity
Not Before: Jun 29 04:00:59 2025 GMT
Not After : Jun 30 04:00:59 2025 GMT
Subject: CN=41594e99b39c3ce66c9399ea6427c511141d2a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d0:df:a3:0a:4a:f8:f2:19:c5:41:f8:83:31:
21:9b:fe:20:35:6b:9f:82:6f:a0:27:6d:bc:39:e1:
b0:07:89:b4:50:d0:34:18:2d:ab:bf:af:7b:df:20:
8f:8a:90:5c:6e:5e:a8:0e:dd:2e:10:77:d5:ef:89:
e3:ca:e4:19:e0:6e:df:1a:48:50:71:a4:4d:98:8e:
09:c1:31:f7:d2:ee:f6:45:bb:51:e3:3c:fd:e3:79:
d1:8b:17:e6:25:06:df:8a:23:c3:1e:60:f6:83:ea:
8d:5d:b8:26:4d:05:fc:34:4f:82:aa:73:87:e0:5e:
eb:99:43:b5:83:ce:fb:ad:a1:b8:c6:a5:27:77:c6:
b1:c2:c6:5e:1a:14:7f:43:f3:60:da:3f:e1:c9:74:
65:63:e4:b2:83:93:18:ce:0d:a7:f9:c5:86:e7:09:
9f:71:0d:98:db:a4:ae:a9:d2:7c:d4:c7:d4:63:44:
e6:63:00:62:0d:11:7e:43:2a:d7:21:ff:fa:a1:b7:
30:f8:d7:f5:58:79:11:6e:2e:4f:10:ec:64:a6:5c:
d1:6b:fa:00:65:ce:29:61:01:ea:28:c8:cf:d4:af:
71:85:f3:3e:69:aa:b3:09:cd:12:7d:74:95:6e:43:
40:18:63:ec:ef:96:82:4a:a9:0d:b8:96:a6:38:24:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:59:4E:99:B3:9C:3C:E6:6C:93:99:EA:64:27:C5:11:14:1D:2A:2B
X509v3 Authority Key Identifier:
keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7c:ab:7f:7e:48:bd:a7:f2:1a:f5:89:20:95:d3:02:15:65:
6c:c8:30:b4:52:df:02:c8:00:7c:dc:9b:2a:c6:52:da:57:38:
a9:88:dd:45:36:54:85:59:b8:ef:df:83:28:fc:e1:ef:52:ca:
60:f9:0f:03:bc:54:06:ff:b7:07:d9:d2:d4:90:f8:59:70:d6:
2a:77:df:10:d2:95:9e:8d:f7:e6:84:d1:1b:6c:a7:90:57:1c:
08:82:df:9b:7c:77:0b:1b:3f:e6:39:f7:12:1c:8d:92:6c:f1:
92:55:9f:a4:e3:8d:be:98:cc:48:30:84:5f:0e:7a:3c:b9:e8:
d1:de:95:88:46:bd:ab:85:56:44:cf:42:da:9b:73:4b:9b:23:
2b:13:df:3b:8a:93:ef:8a:d2:31:df:25:29:14:7a:30:0f:d6:
af:70:77:3f:81:6a:2b:e0:1a:c3:6f:9e:9a:f8:9e:11:1d:40:
c7:db:15:0c:12:04:23:4a:92:f2:38:28:2b:ca:00:2c:c4:55:
f8:5d:77:1f:cf:1f:a7:f8:e9:cc:fa:20:8f:ae:5e:e9:41:5e:
df:ff:db:d1:18:e8:b3:6f:bb:e8:40:69:5e:46:3d:34:49:d6:
96:bd:f4:e6:22:a3:3f:bc:d0:27:e3:99:7b:b2:ab:0c:99:eb:
cd:ba:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:32:58 2025 by rpki-client