Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File: UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier: QuIgk7jNCpdP4L/zZB9Y2X2OPLmS0RAmF2OqiAbdecI=
Subject key identifier: 75:0B:EE:7E:B6:79:1F:BD:93:CF:6C:A4:D9:09:F4:2A:5D:03:76:7E
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial: 0197B6D7A798D26EDCBC43253EB0D134775A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number: 147F
Signing time: Sat 28 Jun 2025 14:01:15 +0000
Manifest this update: Sat 28 Jun 2025 14:01:15 +0000
Manifest next update: Sun 29 Jun 2025 14:01:15 +0000
Files and hashes: 1: 0fnHFCseCp-dowzjSO_W0ajo1TU.roa (hash: 6EWDnuvDaw8wNIkQ3MlMpyUilwRHG1UBmr10Bi9Kodc=)
2: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: RpOV3hS9lC2Mbr4Odm7BEUdL1W+MfUXnisUro+FYlhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a7:98:d2:6e:dc:bc:43:25:3e:b0:d1:34:77:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Validity
Not Before: Jun 28 14:01:15 2025 GMT
Not After : Jun 29 14:01:15 2025 GMT
Subject: CN=750bee7eb6791fbd93cf6ca4d909f42a5d03767e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:f4:ef:48:3b:76:4b:77:64:3c:c1:06:95:
39:28:4c:df:21:23:c9:85:c9:eb:8f:c9:6f:5a:31:
f0:dd:90:77:cd:53:ce:99:ec:76:5a:e7:8e:1d:78:
e8:d8:ee:61:bb:da:df:35:06:c8:13:4d:8f:71:40:
9c:bb:3f:63:d8:f6:ea:ea:51:a2:02:f2:ad:39:37:
e1:c9:10:c8:b5:d4:c9:cd:52:e9:04:e9:85:33:a8:
28:02:84:91:3d:97:eb:22:d4:a7:64:7c:d9:0a:9d:
cb:c9:f3:f1:5f:cc:51:54:67:64:c7:59:9c:9b:8c:
ec:52:b0:d6:9c:e0:35:ef:42:8b:1a:42:2b:87:8f:
a3:2e:3c:ab:27:32:4a:02:07:60:3d:b5:a8:84:ae:
6e:f2:01:45:14:8e:40:10:1d:92:19:f7:74:62:b1:
78:62:56:3e:57:07:e4:cb:5e:e1:c2:3c:6b:23:9b:
59:c3:9b:e8:e8:b9:1b:28:59:b0:3e:5c:c3:c0:37:
37:0a:ec:7a:48:d3:56:0b:fa:31:98:7b:b7:66:82:
05:43:90:3e:2a:38:f1:ff:77:e5:36:4b:06:97:06:
ae:e8:38:0a:bd:d6:fe:1e:67:06:83:aa:5f:c5:53:
f4:fb:2f:bd:fd:fe:31:33:67:15:7e:c8:51:12:fe:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0B:EE:7E:B6:79:1F:BD:93:CF:6C:A4:D9:09:F4:2A:5D:03:76:7E
X509v3 Authority Key Identifier:
keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8a:fa:33:16:bf:3f:a0:93:b4:d4:4e:05:c9:f1:58:8a:89:
25:ba:b7:f9:91:fc:40:27:e1:25:fa:ca:d9:b0:5b:f8:aa:96:
5d:d8:c2:7b:e3:5a:e7:da:8f:f9:3d:62:eb:5d:ee:1b:68:21:
33:59:d3:07:fb:9d:08:37:67:85:32:87:5e:bb:0d:2f:2d:05:
fb:df:72:ff:0c:15:52:bd:5e:70:f1:4b:3e:4c:69:d4:fd:95:
a4:c4:4f:cc:73:f2:4d:a4:0d:90:ef:6c:59:80:2b:07:d6:59:
89:a3:86:9a:16:df:5b:2c:de:cc:5f:71:54:50:c6:7e:10:70:
2c:b4:83:1c:c3:f0:e8:a6:7c:0f:ef:45:be:d8:5b:8d:40:0c:
8a:4f:aa:cc:84:01:0f:2e:c4:77:f6:6b:02:59:aa:75:ed:04:
66:70:8a:9e:ba:11:87:45:b1:74:05:d5:14:61:c5:06:42:89:
41:60:60:d7:c5:60:74:4e:d7:eb:6a:21:38:c0:16:f7:93:9f:
2b:c9:b9:6a:25:b9:3c:f6:c2:c4:4c:8c:4b:99:ef:9a:59:f5:
89:91:c6:8b:0d:b4:49:77:50:7b:d6:a4:d9:c7:75:2c:6b:b7:
8a:9f:cc:3e:ac:6e:a0:ee:41:d5:68:45:b5:e8:7c:7b:3b:fd:
79:34:75:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:45 2025 by rpki-client