Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File: UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier: Ks1697JYbndfbtNz0G0Z7ZFG8KXdM40ZojoSjLFUoKE=
Subject key identifier: 35:AC:BC:7E:0F:85:D9:1F:B2:CE:C6:D1:68:AD:A3:F4:06:60:78:BE
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 0197B7B37D795EA1CB5120F7AFE954455C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number: 0A22
Signing time: Sat 28 Jun 2025 18:01:22 +0000
Manifest this update: Sat 28 Jun 2025 18:01:22 +0000
Manifest next update: Sun 29 Jun 2025 18:01:22 +0000
Files and hashes: 1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: 4dhKLIdVcJal6lm3/im8O9n9bnAijw6RDM8t15QOJfE=)
2: VwHu0AZouyhVLQY99VO0Hkcb7pw.roa (hash: cQhVJXl3GQeuBM9kWPoYpEUpa83WUtjFGDqVTGex39s=)
3: g5Vn880XXpeU5DJfsGcy-Urcv2M.roa (hash: OCJJ4xo5f+mpBB7aa28MDI5Ug57SbY/lCFK1ZpNzZKw=)
4: tqTqorxuukrl9uDDia_5nmx2f7s.roa (hash: Jv1dDJLLdh6QR2z0ABpF4hZs9+OaRufEEerM9P1Rxzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7d:79:5e:a1:cb:51:20:f7:af:e9:54:45:5c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Jun 28 18:01:22 2025 GMT
Not After : Jun 29 18:01:22 2025 GMT
Subject: CN=35acbc7e0f85d91fb2cec6d168ada3f4066078be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:63:34:fe:91:8c:ef:3c:4d:3e:3f:62:87:
fd:3d:a5:a6:54:db:32:36:89:b2:b4:67:91:81:9a:
e2:f4:49:8e:1c:2c:11:ed:34:c5:53:fc:09:ff:ca:
97:92:3e:35:9a:c6:dc:72:b4:40:6d:aa:81:e9:98:
da:92:5a:4e:33:d0:2b:80:f3:f7:14:de:07:54:23:
fd:32:ec:18:79:84:d0:d6:aa:a9:05:9e:a2:59:04:
25:56:98:d4:8a:10:42:80:7a:bb:46:fc:d1:9a:12:
6e:8d:20:5b:4f:a1:72:5c:9b:01:b3:c0:39:eb:af:
d6:70:a6:00:9a:2a:ce:1e:a0:2c:8a:0b:e0:6f:35:
74:ae:32:81:10:00:9f:19:89:13:87:aa:a9:54:6c:
0b:b6:fd:0a:39:cf:52:2b:8a:d8:5d:ac:a4:91:0c:
0a:43:7d:6f:02:43:f5:c2:d5:88:41:9d:1c:c6:a5:
5d:4b:4e:60:fc:a4:57:83:94:93:c1:3a:64:23:37:
dd:43:30:d0:19:7d:e9:42:93:cf:d2:69:15:d5:d7:
3c:e2:1a:d4:e4:83:e6:ee:9f:ae:b0:d4:91:70:1e:
15:a9:ae:0e:80:9a:33:01:ec:3c:7d:a3:f0:3d:cd:
c1:38:9c:75:55:74:5e:b9:5e:89:5a:ac:0f:0a:aa:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AC:BC:7E:0F:85:D9:1F:B2:CE:C6:D1:68:AD:A3:F4:06:60:78:BE
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:06:99:6c:71:c1:84:88:26:c3:3b:c3:2f:34:7a:86:51:b6:
86:61:00:89:45:42:1d:6f:d0:bc:e5:18:49:bb:26:0a:c1:79:
5d:64:00:05:af:8f:42:b7:2e:08:8a:1a:c4:49:01:57:c1:94:
93:ea:aa:07:9f:09:a2:90:12:62:da:ef:19:18:b1:0c:b0:6e:
4d:6a:38:95:6c:9d:cc:b5:57:a7:4b:34:63:a3:6e:27:06:ac:
60:0a:8b:10:51:9d:42:71:0e:18:88:62:df:fc:d1:03:07:fa:
b0:db:38:ca:04:fd:ec:ec:64:bb:06:91:ec:58:9f:bf:47:c2:
c2:90:d0:b0:6c:c1:55:08:84:29:85:6b:1a:b8:88:f7:22:6d:
cc:fb:b5:f7:78:0d:ae:46:a4:6d:9f:b4:d8:cd:3d:23:b0:80:
15:3f:ec:3c:58:4a:61:60:bf:95:54:88:52:7e:17:0f:4d:78:
a0:37:f0:b3:3d:a6:ee:f9:b2:8b:28:93:b3:e2:93:99:57:7a:
dd:23:32:61:71:e0:3f:37:1f:03:2b:cb:ac:87:49:51:b9:4b:
e9:49:e1:b8:68:c5:c7:04:69:08:dd:7b:02:0b:b1:96:c0:90:
12:eb:1e:25:e2:59:83:e2:5b:ff:f1:be:8d:e8:81:a6:de:1a:
3a:3f:8d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:36 2025 by rpki-client