Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
File: UKiPmoNBAa34dwN6UcgdEzqpRuw.mft (raw, json)
Hash identifier: 7BEHhLA9sZxQmVk5m9FR4wRmLo0R3aRey3GzAya55ok=
Subject key identifier: AD:80:48:3A:4F:99:56:F1:F0:35:8F:37:9C:6E:06:EA:99:49:3D:E2
Authority key identifier: 50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
Certificate issuer: /CN=50a88f9a834101adf877037a51c81d133aa946ec
Certificate serial: 0197B6A0C38CCDA40B6E725A85639C6C1996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
Manifest number: 0D40
Signing time: Sat 28 Jun 2025 13:01:18 +0000
Manifest this update: Sat 28 Jun 2025 13:01:18 +0000
Manifest next update: Sun 29 Jun 2025 13:01:18 +0000
Files and hashes: 1: UKiPmoNBAa34dwN6UcgdEzqpRuw.crl (hash: ZM8X35JCpzq56kquxK3E0FusUwYJ+eHNKb97jJN7iOY=)
2: kc-RSMe4Oew5F8NEK8PnK5Ztook.roa (hash: RrPN8D12kwMiREonpEUwGrZPp2WKXYrir6fymPU5Gvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c3:8c:cd:a4:0b:6e:72:5a:85:63:9c:6c:19:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a88f9a834101adf877037a51c81d133aa946ec
Validity
Not Before: Jun 28 13:01:18 2025 GMT
Not After : Jun 29 13:01:18 2025 GMT
Subject: CN=ad80483a4f9956f1f0358f379c6e06ea99493de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:b1:5f:96:db:0c:93:9b:6e:d0:f9:20:fa:
76:cd:17:19:08:e9:fc:4e:77:7f:b3:31:06:d5:98:
bd:2e:26:ec:68:a4:33:06:bf:2a:f3:64:af:60:46:
1b:69:ca:51:3d:36:47:c5:f8:95:c3:38:f4:74:58:
aa:18:d3:4e:bf:b1:8c:b6:f0:6c:b7:0d:7f:92:b5:
3b:d6:62:3d:e6:64:76:d7:c5:d6:58:49:0d:42:d8:
f5:16:93:66:67:26:c2:c8:78:e2:dd:6c:de:85:04:
21:42:b4:04:ba:5e:6b:8e:c7:66:5d:4e:2b:e3:46:
7c:9d:62:d4:9b:f9:e7:bb:b5:1f:54:01:1b:d9:65:
33:da:02:d7:54:c9:15:f8:d0:61:16:22:9d:d0:f7:
a5:a9:66:9b:7d:31:2c:75:a6:a3:a5:15:d1:22:d1:
a8:a9:50:20:4a:7b:13:6e:c1:7b:da:8e:5f:6e:8f:
d0:80:fc:4c:20:39:54:0f:f4:e2:d4:7c:35:e0:30:
22:8d:02:87:17:67:67:3a:49:a6:48:19:bb:38:ab:
ee:59:3c:44:b4:98:76:6d:de:84:46:6c:9e:55:98:
05:d8:df:c2:86:76:ce:f6:22:82:67:b2:38:78:ca:
30:0c:e5:39:21:2a:3d:5d:8f:6c:39:0e:b9:14:01:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:80:48:3A:4F:99:56:F1:F0:35:8F:37:9C:6E:06:EA:99:49:3D:E2
X509v3 Authority Key Identifier:
keyid:50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6f:ef:c0:4f:17:59:29:e0:1b:e7:00:91:ab:90:93:dc:60:
cf:ba:bf:39:b7:85:05:24:07:e3:34:4a:06:d5:85:84:db:70:
3f:0d:21:7a:87:91:de:5e:32:4f:5a:36:8c:b9:fc:dc:9d:a3:
b5:ed:89:69:d1:17:bd:8f:96:c9:d0:19:58:4c:87:d4:46:07:
78:d8:81:e3:22:63:6c:94:fa:0e:cb:5b:b3:96:fe:9c:1c:5b:
20:46:4b:4f:2c:91:03:4f:89:9b:d7:70:93:27:04:20:b2:8f:
a7:2f:bc:e8:f9:d5:2d:ac:15:7b:42:d9:08:ff:bc:b7:9d:2b:
55:e5:f5:0b:6e:84:fd:ce:7f:b2:f0:21:29:f6:c9:93:3a:37:
04:e0:6b:64:f3:b0:68:3d:9e:af:57:0a:98:6b:8f:c0:be:ab:
53:af:79:5f:90:4a:ef:a6:c0:d3:b5:c3:aa:60:91:42:0b:97:
b5:0f:f6:22:74:d4:c0:06:84:8e:bf:48:cd:f7:b4:90:56:97:
d0:59:66:8e:77:fc:e4:a8:bd:55:5d:a9:71:3b:f5:ff:b3:fd:
ff:2f:41:79:de:f3:bb:69:94:a5:e8:74:40:36:55:32:9d:9b:
42:4b:bd:cc:9e:be:14:66:89:68:de:00:37:00:27:16:0c:6f:
96:82:f2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:50 2025 by rpki-client