Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier: /cF3Sv9wiNkmS4q4OsaMjJ7JSReYc1NRpubfQieu89k=
Subject key identifier: 15:07:3A:A8:B7:5F:F6:ED:B3:18:A6:DC:AC:88:BB:12:30:71:6A:61
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 0197D2BC96E4B77297BDF585CEE973AD8CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number: 0CCA
Signing time: Fri 04 Jul 2025 00:01:04 +0000
Manifest this update: Fri 04 Jul 2025 00:01:04 +0000
Manifest next update: Sat 05 Jul 2025 00:01:04 +0000
Files and hashes: 1: LRROMH8PWkT6bvGRkMnS0JWxYn4.roa (hash: GIDYrP6C060YCYEpIBANWaiaIMglvY/1aJs51j6+Nek=)
2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: G+SByufl9tuTpz54qST9Byr5WQebJ6eOyRCkHPDuKjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:bc:96:e4:b7:72:97:bd:f5:85:ce:e9:73:ad:8c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Jul 4 00:01:04 2025 GMT
Not After : Jul 5 00:01:04 2025 GMT
Subject: CN=15073aa8b75ff6edb318a6dcac88bb1230716a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:14:5e:b7:91:a6:e6:db:f9:a8:77:25:0b:
8e:c4:87:ee:3d:fa:d2:50:e0:2a:23:af:4d:22:f5:
e6:2d:95:5b:73:5a:d1:9d:50:29:06:4d:35:18:a5:
ef:2b:df:ac:33:a3:a2:2d:a6:0f:12:a7:43:0a:7e:
2b:9a:ca:fa:36:9e:f2:a9:35:65:10:7e:44:04:aa:
a2:45:24:88:1b:98:19:05:aa:2e:b8:d4:79:dd:03:
fd:67:17:ff:82:d8:49:6b:ba:10:bc:38:fe:41:76:
98:5f:88:61:bc:5d:26:a8:8f:f4:dc:81:c9:24:f8:
6d:5c:65:a9:c9:4c:75:55:4c:27:3b:50:4b:ac:53:
0c:22:10:4f:25:2c:db:4d:f5:0d:52:f2:d2:cc:bd:
34:14:25:37:ca:70:0c:c1:73:a4:fd:1a:08:37:d6:
8e:3a:44:65:6c:52:3c:66:54:2e:f3:27:76:a9:03:
92:bd:7a:87:cf:3f:28:a7:95:b1:35:7d:4a:a4:1b:
30:aa:09:d5:32:7f:18:59:48:0d:08:04:f4:0c:a0:
55:43:1e:9d:09:a1:9a:9f:e2:b2:22:70:5a:c1:df:
f2:22:b4:59:6e:a9:57:b5:84:5f:21:35:2c:7f:53:
09:73:85:4d:45:97:a4:1c:39:cc:98:39:fb:e4:d3:
21:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:07:3A:A8:B7:5F:F6:ED:B3:18:A6:DC:AC:88:BB:12:30:71:6A:61
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c1:a5:74:dc:0c:df:eb:ff:21:80:a5:eb:8e:fe:7b:7c:18:
82:1e:db:8c:dc:54:97:95:d9:a0:06:c3:bf:a0:01:e3:13:48:
0d:11:62:95:99:a0:14:67:32:38:69:d3:7d:7b:15:fb:99:3f:
65:d5:6e:fa:36:12:8e:94:a4:1c:3f:1d:7b:8a:61:5d:4d:bb:
02:66:8a:d5:68:d0:4b:0d:7e:fa:f5:63:a1:23:1e:fb:8c:85:
b3:0c:ba:65:4d:1b:2d:4b:02:47:03:59:af:81:fd:01:72:f5:
1b:d5:a9:de:a7:34:12:09:09:e5:ef:84:60:8d:f8:da:9d:f1:
5b:13:34:87:1b:4e:85:3a:27:c6:0d:9e:6a:3d:40:3f:e8:05:
81:7d:88:16:37:a4:ad:e4:0d:a6:a7:39:8c:78:06:43:99:e3:
58:e6:6c:c6:1d:13:3c:03:3a:e7:42:b7:3c:ce:0f:9c:23:66:
27:43:7c:a1:cf:7c:70:8d:85:a8:2d:13:3f:22:0a:ed:05:bb:
88:41:fb:e5:96:90:8e:03:46:5a:4a:72:2a:fb:d2:91:1f:98:
07:b2:91:1a:9f:13:37:4d:d9:29:9b:94:e0:c2:48:ed:01:f3:
f0:af:63:36:03:8e:89:99:9d:54:b4:91:8f:bd:35:d3:7a:3e:
4a:60:fb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:41:52 2025 by rpki-client