Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
File: UXM4bzZygYSqADsdljn-OcShKqk.mft (raw, json)
Hash identifier: J0C9jrHhQSLJoxWSnyjbn/CBAV9P2b+AhX4M9TaJyqM=
Subject key identifier: 0D:85:C8:66:50:23:CE:A1:A0:3C:89:77:FE:1B:F6:8A:EC:54:1D:18
Authority key identifier: 51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
Certificate issuer: /CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Certificate serial: 0197B7EA3BE78E424B141071AB657ACA51F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
Manifest number: 1519
Signing time: Sat 28 Jun 2025 19:01:10 +0000
Manifest this update: Sat 28 Jun 2025 19:01:10 +0000
Manifest next update: Sun 29 Jun 2025 19:01:10 +0000
Files and hashes: 1: UXM4bzZygYSqADsdljn-OcShKqk.crl (hash: 7BjsS+1jxN14jo3pEZ3tKFGRvDkARZtVPOsb6Hcj+aw=)
2: g6kbe_eW2XgI6YD7cyTnjFDylR0.roa (hash: VTjbXO0Nq4toGU1LGHuG65b5vXVgfgU9Ntfeo8aohYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3b:e7:8e:42:4b:14:10:71:ab:65:7a:ca:51:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Validity
Not Before: Jun 28 19:01:10 2025 GMT
Not After : Jun 29 19:01:10 2025 GMT
Subject: CN=0d85c8665023cea1a03c8977fe1bf68aec541d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:f6:29:f0:cc:7d:c3:5f:8f:3f:3c:c9:1c:
55:e6:8d:86:1c:61:1f:b6:df:69:ca:c4:be:66:c5:
24:68:46:2f:37:d2:d5:e2:35:19:5f:21:42:36:2f:
88:df:e3:65:64:d0:22:48:29:00:9c:64:eb:2d:ec:
bc:19:75:21:88:8d:02:90:fd:69:f8:e2:d0:d1:60:
e7:c2:5a:c8:e3:ff:94:37:6b:e1:b1:50:4f:04:ee:
d8:0b:f1:1c:5b:9c:5a:67:f4:98:c0:0a:69:50:f4:
5c:0f:30:b8:68:4b:68:f2:be:a3:ea:96:dd:7a:fb:
2b:44:ec:61:81:8b:85:6d:23:b7:55:5d:e1:26:65:
61:5c:5c:a2:21:7f:da:72:00:2c:9d:8a:6e:52:e9:
fa:71:45:ad:93:21:72:e8:8a:cd:b5:25:93:ee:2b:
92:e2:8f:21:43:36:02:c1:5f:20:6a:27:52:c0:4a:
6b:62:d0:a6:0f:7f:9e:11:e6:3d:14:5b:5b:a9:69:
b3:7f:58:41:1c:38:db:ba:57:e6:a5:8e:c3:10:63:
2a:c2:07:07:f5:5c:c1:ca:e6:d5:b6:30:65:98:b5:
12:c8:58:cc:5c:2f:42:0a:51:1f:d2:ea:9a:8b:de:
09:16:01:51:7c:0a:d6:2b:3a:29:ff:e6:48:b8:09:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:85:C8:66:50:23:CE:A1:A0:3C:89:77:FE:1B:F6:8A:EC:54:1D:18
X509v3 Authority Key Identifier:
keyid:51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d2:bf:19:99:be:2b:c5:33:3c:82:7f:82:aa:cb:99:86:13:
20:75:d0:29:56:c1:f0:04:31:2f:f8:e9:dd:31:ec:d7:70:d1:
c2:8a:6a:a2:dc:99:e5:7c:c0:ee:d2:d7:4f:d5:91:14:b8:3a:
60:0f:dd:b8:d9:03:00:14:28:db:2b:f0:c0:72:d7:68:46:54:
43:78:18:df:62:aa:f7:1b:2b:cd:81:c4:b0:3a:a9:fc:e3:d3:
3d:1e:68:11:07:37:1f:bb:98:aa:ca:c9:fd:36:01:51:3d:58:
67:f7:a2:c7:3a:e0:81:6d:15:fb:4f:d4:fa:28:04:87:10:71:
6f:a4:b7:8f:80:42:2a:96:9e:b3:77:94:98:3d:c7:29:c0:c3:
b0:7e:8e:79:0d:31:0a:02:fc:3f:bc:3c:e3:5b:c9:07:4a:82:
bd:ff:7e:46:5f:e1:60:37:70:e7:ac:aa:90:dc:20:2f:db:ab:
89:c8:6f:e0:05:67:1a:48:e0:98:5c:98:2f:b5:a1:04:60:7f:
f5:7d:4d:0b:a4:35:ca:ae:9d:dd:6c:43:62:3b:6d:ae:73:58:
55:90:02:17:da:45:f5:6b:0f:0a:42:88:76:e8:31:8d:e0:50:
d4:fb:36:7a:f2:0b:1f:24:cd:1a:67:41:9f:f1:0b:da:7b:be:
44:24:89:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:05 2025 by rpki-client