Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: TJm4KRandaFLzk0wR0mqAw8GELlPuMBgQT5L9FrJMQc=
Subject key identifier: 16:92:F6:94:19:92:5A:32:08:AC:60:8F:ED:91:47:94:CB:C9:7B:21
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 0197B88F0915EEB55C6DE6EF8B3FD1A10F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 11DD
Signing time: Sat 28 Jun 2025 22:01:11 +0000
Manifest this update: Sat 28 Jun 2025 22:01:11 +0000
Manifest next update: Sun 29 Jun 2025 22:01:11 +0000
Files and hashes: 1: E_VTiATzUgc2DhxvquhHUq4XjMM.roa (hash: QY5XIJ7ljEf/JGfsfFT7Yois/7EOyZU9vkUnS75efNE=)
2: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: 9QPKcR22Z4m1kKXmORUEBA9qgLpgWXK0XKZ34NAxQ8c=)
3: wCetPnuHXvivZcvg-nB5WG2XhQ4.roa (hash: 4Yh74lr3J9wyGwv+2vpPjVGwW6ZzDVQ5vG1BmfHb1Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:09:15:ee:b5:5c:6d:e6:ef:8b:3f:d1:a1:0f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jun 28 22:01:11 2025 GMT
Not After : Jun 29 22:01:11 2025 GMT
Subject: CN=1692f69419925a3208ac608fed914794cbc97b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:c1:49:92:6c:ec:1d:44:91:c8:cf:72:ea:
09:f5:3c:c1:e7:f2:69:a8:6b:49:0f:65:25:a8:8b:
64:76:db:32:9b:8d:cd:25:21:f0:bb:50:67:ad:9d:
50:96:6e:c1:92:b5:39:d1:7c:d3:ac:57:ca:b2:3d:
76:3e:d1:68:59:41:13:a5:6d:51:c0:29:e9:9b:cc:
bf:be:f7:4f:8c:33:40:b2:56:3a:bd:4f:6e:2c:10:
1f:ac:bf:2e:3f:47:31:d7:33:26:df:1f:c0:76:0f:
46:45:b3:13:9c:09:d4:8e:04:1c:c4:d4:f3:5c:1f:
02:1a:9d:27:e7:df:f7:05:9f:38:2e:30:1c:4d:eb:
a1:4f:3e:71:b4:73:73:93:8e:05:57:cf:2b:6b:8f:
23:46:c1:5b:9e:3f:9c:32:e1:ad:ef:35:e7:03:dd:
ec:d1:76:7a:4b:0d:a0:60:00:d3:25:30:a8:9a:30:
50:ad:65:c7:78:4f:fd:dc:00:f0:e4:4b:ca:85:46:
ee:dd:47:4b:16:40:7e:33:bc:1e:b1:b0:4c:a4:47:
53:a6:99:cb:a2:d5:23:5d:6b:31:0b:4f:34:af:15:
e0:0c:3e:c9:f3:d3:80:58:de:53:d1:9b:82:b7:f2:
c1:80:af:5f:e4:36:7c:04:35:17:e2:02:7e:22:a3:
3c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:F6:94:19:92:5A:32:08:AC:60:8F:ED:91:47:94:CB:C9:7B:21
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:18:99:0c:38:47:07:62:7e:6c:8a:b1:17:55:6c:b7:84:20:
ce:50:2a:74:a6:1e:77:b8:03:9d:06:79:1a:2a:8c:bd:83:99:
fd:7f:e3:4e:c3:7e:29:94:9f:13:01:bc:d1:76:3d:24:39:05:
df:b3:e1:e3:db:16:13:e4:3e:15:b2:7a:37:39:44:37:45:50:
db:a8:1f:11:05:6f:7b:a0:fb:5d:3f:55:09:84:1f:35:5b:c6:
cc:ba:e4:57:74:b1:6f:3f:c1:6c:52:0c:5a:b7:c2:e0:b1:fe:
7c:bc:d1:86:77:79:27:1d:b9:e8:5a:29:92:db:1e:88:55:a4:
dc:32:dd:52:21:23:10:49:47:d7:b4:34:4e:8a:10:6b:b2:2e:
d6:f8:62:67:91:04:56:49:c3:e0:6e:c9:41:05:25:9f:10:13:
82:6a:70:66:a7:24:b0:d3:6e:75:0b:39:46:ad:00:fa:24:20:
8f:74:b7:a5:27:12:a6:8d:96:8c:f8:84:11:d4:3d:e6:03:cb:
00:ad:65:9f:70:d6:05:6d:4f:c8:27:99:32:47:8d:ec:51:0b:
8c:ab:44:b5:5e:04:b1:33:4d:57:16:6a:c9:fc:7b:6f:2b:c4:
a4:4b:21:81:a9:36:53:b3:5a:c9:88:d2:d4:37:6f:09:17:e9:
6b:e0:5e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:30 2025 by rpki-client