Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier: P8QjyhufUtJZyXMyNdJCx+2RQJywWH+poZ9pwUqVRjw=
Subject key identifier: 35:02:8E:B1:60:DF:96:F8:F8:C0:69:2A:D6:82:2E:2F:4C:7A:D5:62
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 0198D773A72EC67D3827F90C2EBCB7A39E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number: 0D51
Signing time: Sat 23 Aug 2025 15:02:17 +0000
Manifest this update: Sat 23 Aug 2025 15:02:17 +0000
Manifest next update: Sun 24 Aug 2025 15:02:17 +0000
Files and hashes: 1: LRROMH8PWkT6bvGRkMnS0JWxYn4.roa (hash: GIDYrP6C060YCYEpIBANWaiaIMglvY/1aJs51j6+Nek=)
2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: zodH5vC0pklIPrJiHzOYHRdCo2pTe+BK3FvC6KBqjMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:a7:2e:c6:7d:38:27:f9:0c:2e:bc:b7:a3:9e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Aug 23 15:02:17 2025 GMT
Not After : Aug 24 15:02:17 2025 GMT
Subject: CN=35028eb160df96f8f8c0692ad6822e2f4c7ad562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:02:3f:a1:3d:04:93:00:8f:a6:b7:b7:76:
a4:5c:e4:c8:02:36:0a:62:28:83:ad:04:36:d8:f2:
aa:dd:88:8c:e7:8c:be:aa:69:11:5c:ec:27:c0:64:
76:39:84:17:4e:ae:4e:6c:1e:ec:3d:14:48:e4:94:
e5:c8:0f:04:79:76:c1:e0:9c:9f:69:b5:35:b9:98:
bd:0e:e4:5e:2a:a6:cd:4f:76:bd:ad:09:6f:5d:a3:
80:82:b3:61:d2:fe:f9:b7:d5:f9:00:6c:2a:71:0c:
81:34:fb:c9:60:b4:85:b9:93:49:4e:f4:54:04:1a:
b6:de:c9:d9:f4:17:11:6d:fe:14:8a:15:25:77:bc:
a3:0b:65:d3:5f:c6:74:57:26:f5:f8:f3:3e:1b:55:
96:c6:44:28:50:4d:d5:a2:28:f8:d8:8f:a6:b6:95:
4d:32:23:75:de:b0:38:5f:f8:c4:a8:b4:b5:7c:83:
fe:84:37:09:65:64:26:86:a1:6f:c5:59:e3:f3:20:
01:7a:75:80:1f:8b:4a:a9:72:29:4c:1d:0e:c8:6d:
29:e9:98:7e:27:fb:a0:b4:c3:69:e0:1e:e6:10:09:
21:bc:9e:11:d9:e8:f2:83:b1:98:83:7c:dd:29:0b:
b8:89:5c:b4:dc:4b:fb:25:3b:ac:44:a6:00:3d:56:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:02:8E:B1:60:DF:96:F8:F8:C0:69:2A:D6:82:2E:2F:4C:7A:D5:62
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bc:f1:c7:33:3f:0b:7a:24:9a:04:a9:73:24:c8:76:49:21:
5a:9b:e4:df:9b:f7:14:5b:49:54:07:24:64:b0:d2:f5:89:7e:
f9:f6:ba:cf:8d:7a:82:58:b7:85:54:5f:c9:46:87:88:69:42:
c6:52:a8:15:5d:5f:c2:d7:25:3b:a5:f2:5b:26:76:f7:a0:74:
c8:e4:ed:6b:28:ce:ef:5b:36:90:8f:54:30:23:dd:ca:bf:60:
76:e4:13:c7:55:d9:d9:e3:24:6b:43:13:a3:ca:4c:af:18:dd:
7d:6b:5c:df:7a:d9:ed:72:a2:68:af:0a:1b:5b:05:67:7f:1c:
b0:c0:4e:f3:0a:63:cc:4d:f3:9d:b2:9f:ba:23:5b:54:50:dc:
c8:b3:a9:4d:0e:87:79:9c:6e:33:e0:22:3c:46:15:d3:c4:98:
28:1b:b2:a8:51:5a:52:ce:6f:a4:4a:8d:a2:fc:6d:e2:bb:7b:
11:60:2a:9b:7c:41:06:27:c5:a2:51:ee:62:d8:17:f6:ef:9a:
7c:29:16:c3:49:d5:aa:3a:07:de:26:e0:ac:69:b1:6d:4e:c2:
10:ba:21:cd:97:87:92:90:6f:81:a9:e4:d1:ae:32:65:95:05:
2d:00:5d:a4:4a:d8:b4:4c:9b:51:68:c0:2c:cf:2d:05:45:18:
53:26:f9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:41:55 2025 by rpki-client