Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: 7CDABRKvA+BuGQhftRenvG3B/H9Vgufl2ShlUpSPO+4=
Subject key identifier: EF:52:1F:B3:1E:87:46:12:0D:E5:AE:14:C4:8C:18:CE:55:2B:61:CD
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 0197B6D7283AC913278D1FECCBA9D7FA502B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:00:43 +0000
Manifest this update: Sat 28 Jun 2025 14:00:43 +0000
Manifest next update: Sun 29 Jun 2025 14:00:43 +0000
Files and hashes: 1: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: coc3ymimZOQoCrla8j7+XN8Bz7bRc0q0pUsiB8k1sHo=)
2: XmJ8vYGbQYVnd8y-h4wRzi3J_pE.roa (hash: exnN1l7i5NuQ19i+bMh7iG0NXDBSnKZN8vpjyWS2vRc=)
3: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (hash: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:28:3a:c9:13:27:8d:1f:ec:cb:a9:d7:fa:50:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Jun 28 14:00:43 2025 GMT
Not After : Jun 29 14:00:43 2025 GMT
Subject: CN=ef521fb31e8746120de5ae14c48c18ce552b61cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:98:b8:bc:02:e6:7f:75:08:67:d1:93:7a:30:
b9:2b:59:79:7c:75:94:a9:4c:41:38:41:f1:24:7e:
53:f0:25:b9:6b:74:d5:09:ab:a1:e4:79:45:79:d8:
78:bd:c4:c4:6e:30:ff:7a:a1:5d:60:da:b5:22:d1:
42:0a:1e:41:9a:09:d0:69:98:27:ad:fc:b5:c4:b1:
48:70:d3:4b:9a:69:7c:1e:c0:7a:a7:17:fa:1e:55:
2f:cc:64:a5:9f:3e:cb:bd:a0:59:b7:e8:cd:da:ac:
90:08:c1:f2:6b:19:c5:e9:b5:df:66:e6:48:f5:03:
a1:27:ff:51:55:bd:8f:83:36:43:aa:45:6d:f0:fb:
4d:13:f9:0b:c5:4f:b3:c7:49:e2:49:8e:c0:cf:af:
9e:a1:5a:39:c0:36:1a:ec:0b:59:f5:16:d9:90:0f:
30:4b:be:e1:8b:18:09:d0:41:4d:38:6f:dd:c5:d8:
8e:d7:15:e1:f5:22:06:66:47:48:b3:d6:0d:35:c8:
d3:06:05:8b:ab:b7:e5:f4:b4:28:9d:f3:3f:70:f6:
79:ff:eb:e4:07:4c:55:b9:32:46:36:26:09:22:cf:
f0:b0:e1:41:fb:09:5f:84:9a:08:a5:dd:d3:fe:ab:
80:ab:27:71:6c:42:fc:74:b8:5c:20:cd:ba:bd:6b:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:52:1F:B3:1E:87:46:12:0D:E5:AE:14:C4:8C:18:CE:55:2B:61:CD
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d4:a1:da:8a:74:e9:67:5b:47:49:4b:51:7c:4e:53:95:e4:
e1:ed:ea:eb:07:24:48:c0:37:7f:90:99:c7:30:9b:4b:60:4d:
53:6f:e3:dc:b5:51:cc:d1:5b:6e:fa:ab:d4:7c:2d:71:6f:0d:
5e:ac:0b:93:c1:0a:94:36:24:12:53:84:bd:18:e0:bf:ae:e3:
ec:a9:4e:88:6b:08:a9:76:12:88:ea:b9:84:36:68:0b:6d:c4:
ed:66:43:41:9c:14:de:11:61:06:8c:12:a8:f7:fd:9d:35:d6:
2b:4f:a0:1c:28:b3:8a:7d:a2:27:ec:d4:fb:e0:4e:a9:88:1d:
de:b0:11:71:a6:10:d2:8e:3f:32:28:b7:98:5c:7f:bd:3c:f2:
e8:59:30:7e:a9:c8:fc:9b:14:34:d3:c8:fd:68:e0:7f:17:3f:
b4:4a:16:0a:83:fe:57:88:49:a9:32:ca:fb:f4:07:0e:cd:82:
d8:01:2e:47:5b:34:6f:71:cc:1f:8f:b4:8f:75:5b:88:97:4f:
b8:d4:76:24:b4:9f:f3:a9:94:cf:4e:b2:f3:78:51:9d:a0:1f:
88:8c:aa:3b:0d:c8:49:37:1b:a2:e5:ef:84:0d:87:75:6c:80:
78:93:ee:5d:d8:f5:89:e9:ab:8a:83:6e:56:80:23:5f:33:29:
94:1c:59:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:49 2025 by rpki-client