Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File: UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier: 3mGG8j51RuF5P7YNtOLdejRBipJEh7rUPk5PzL+vZnQ=
Subject key identifier: 41:1C:39:15:6E:58:70:64:88:04:9B:7D:BD:A9:C6:F0:B9:93:6E:3E
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 0197B890174086B32CEFEDC2AD9A6A5BBB86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number: 1055
Signing time: Sat 28 Jun 2025 22:02:19 +0000
Manifest this update: Sat 28 Jun 2025 22:02:19 +0000
Manifest next update: Sun 29 Jun 2025 22:02:19 +0000
Files and hashes: 1: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: f1oVwGcYnk5KRhkY8Kj3LKxokdgJ3CQiynwAHR3wPOg=)
2: ZZhPPwqLkt0i32K3myspkarpm7w.roa (hash: I/Su6LLFQ+Dm0Pej9IN4WakV0FZtHq7XZa94FgMwfR8=)
3: _U1q7kl-Gvc0JP4VZVgWjqcMCOs.roa (hash: 3X8IGbj3QMA8V3ptFiyp/tKTSPuKRQ3qYJfTsAQKmxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:17:40:86:b3:2c:ef:ed:c2:ad:9a:6a:5b:bb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Jun 28 22:02:19 2025 GMT
Not After : Jun 29 22:02:19 2025 GMT
Subject: CN=411c39156e58706488049b7dbda9c6f0b9936e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:93:22:2d:1a:84:0f:fd:c6:aa:d8:0d:01:
ce:c3:6d:68:98:4c:6a:b6:75:a5:b9:f9:08:b1:83:
b0:9a:d7:dd:e6:43:08:f3:7f:36:10:fa:40:42:0f:
2e:f5:d1:da:43:e3:e7:88:49:f3:aa:d4:32:26:8d:
83:60:2c:46:68:15:28:2a:75:d5:91:e4:d8:5a:1f:
1c:ed:e0:29:5e:f9:69:18:52:d0:18:42:75:e3:7a:
73:39:2b:a6:25:68:92:6c:92:2b:14:59:e2:2c:46:
6a:7a:5d:c1:f2:0d:36:9e:e5:4c:b4:49:6e:e2:9f:
65:9b:85:cb:9f:b9:d5:27:c2:dd:2c:16:05:27:06:
1c:9f:ea:0c:f3:3b:23:b2:71:5a:5a:d2:0d:16:1f:
5a:18:ac:c7:15:07:6f:4e:69:98:33:5b:a1:ec:13:
1c:9f:e0:d0:28:cb:f0:9d:4b:bb:6a:82:b3:c1:eb:
7f:6a:6e:5b:8a:29:b2:00:c3:61:80:7b:c3:39:3c:
5a:00:d3:cb:2b:37:fd:df:6c:5d:96:63:fc:a6:da:
af:84:c4:4e:26:3a:3a:67:f5:72:74:32:ae:21:3c:
03:cc:5f:d7:7a:ea:07:ef:26:dc:07:04:95:02:8b:
2f:6b:4e:b3:1d:e9:8a:c8:6b:15:39:e7:f9:36:ab:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1C:39:15:6E:58:70:64:88:04:9B:7D:BD:A9:C6:F0:B9:93:6E:3E
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b2:4d:0e:f0:fb:ca:c7:ff:51:9c:47:30:fe:99:01:b8:f6:
11:49:53:4f:76:0d:6a:d9:62:86:e6:22:cd:d6:8f:69:2e:ea:
1b:98:38:43:ca:27:59:dd:b8:59:e9:fb:dc:43:08:5d:59:d0:
bd:74:41:e7:fe:b3:fa:bd:e8:d4:fd:bd:fa:fc:59:96:40:67:
ea:ad:8e:14:ac:5a:f1:72:47:92:6e:99:37:6f:4e:90:f3:24:
f4:18:7e:14:75:a3:56:a0:7e:25:5d:24:79:97:d8:40:df:ea:
05:a4:b2:64:f3:24:4c:16:c1:87:7d:c2:5e:a4:fa:da:f4:2f:
ef:3e:99:b1:81:5f:0a:df:2b:8c:c3:88:f0:6c:0a:e9:d3:f1:
53:7e:d0:d1:17:0c:84:56:af:48:9e:88:7c:dc:e1:da:3a:04:
b7:09:82:55:2d:f0:68:d6:3b:6d:73:bd:2d:ee:cd:0b:68:5e:
2f:a5:52:a9:5a:3c:6b:84:e5:eb:0c:a6:4a:7b:34:23:8e:39:
15:ce:54:59:8e:af:27:1f:36:bd:af:93:7a:6f:c9:94:b2:a0:
45:be:19:f4:6e:31:e6:85:68:8e:67:aa:b9:88:a1:ba:3d:50:
0f:50:6e:9f:49:40:72:27:7f:68:58:ba:cb:c7:63:07:87:0f:
96:1c:33:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:30 2025 by rpki-client