Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: XLo1FZW8ghHUDv5XEE8czKyGNLvEGi38bi5rxiCOqIk=
Subject key identifier: 3E:27:14:80:8B:86:21:33:78:52:62:EA:AE:55:BC:16:FB:87:9D:BB
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 0197B820E652F21A3D07874A58E197B1C848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 0E34
Signing time: Sat 28 Jun 2025 20:00:53 +0000
Manifest this update: Sat 28 Jun 2025 20:00:53 +0000
Manifest next update: Sun 29 Jun 2025 20:00:53 +0000
Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: WBrctUb1mwZoJYHtFQw2xTceokIciOmaRsphjqdeKS8=)
2: jhae41lBxgum19Q0YmdVzc2ofw0.roa (hash: x1mZ5Yned7zFdt78wzWndyqBFeaTJjBaYlvrRS6j15I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e6:52:f2:1a:3d:07:87:4a:58:e1:97:b1:c8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Jun 28 20:00:53 2025 GMT
Not After : Jun 29 20:00:53 2025 GMT
Subject: CN=3e2714808b862133785262eaae55bc16fb879dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:73:10:e0:51:4e:aa:ba:44:ac:cb:aa:50:
06:8f:b2:00:a9:2d:e1:30:89:46:83:0a:fb:c2:f6:
d4:8e:12:45:27:a1:ab:36:74:d1:6c:9a:1e:18:90:
e3:b9:6d:7f:7b:8f:d9:c0:fc:5c:12:76:2d:84:d0:
e2:31:14:f1:13:0e:4b:17:73:df:76:59:75:38:34:
fc:8f:67:d1:d0:ad:65:1f:62:64:e6:54:c2:eb:5e:
fb:16:ce:50:fb:89:c9:84:f4:3d:6f:d2:21:bd:90:
8e:ef:70:d5:15:e3:3c:a4:97:ec:86:64:a0:f6:d1:
82:18:2b:a0:3a:13:1c:b6:80:0a:83:85:7e:b8:a4:
af:e2:20:de:de:ac:04:76:ba:aa:ee:88:e3:eb:77:
9e:aa:d6:61:1d:61:1c:e6:e7:5b:81:36:79:9a:3d:
54:17:13:fc:b1:b4:f5:47:e2:e5:3f:6d:1f:25:b2:
68:60:af:f1:28:64:90:4b:af:08:3d:cf:e8:9c:e4:
c1:2d:64:98:d3:ed:37:41:37:db:5f:8d:81:e6:14:
ac:c4:0b:3d:51:da:d8:dc:e8:e3:11:de:e1:83:a7:
fc:31:54:80:d3:6a:10:b9:de:d9:d4:dd:7e:77:b1:
31:6e:65:ee:c2:4f:f4:e9:30:fb:d8:11:3a:c0:b9:
99:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:27:14:80:8B:86:21:33:78:52:62:EA:AE:55:BC:16:FB:87:9D:BB
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6e:2b:21:31:ce:dc:eb:c8:28:e1:a9:bf:4b:9c:61:6d:92:
d5:d1:d4:76:e8:b6:23:cb:f1:ce:e5:d9:3e:33:f7:6f:fa:a0:
83:d3:f9:13:4b:4c:86:af:4f:87:f9:23:50:94:f0:89:d8:b9:
66:e3:74:c6:9c:d6:1a:62:28:de:62:68:eb:10:7e:a7:f6:c6:
59:b3:2e:8a:55:c5:f3:45:34:d6:48:e4:6f:73:7d:69:2a:c3:
4e:3c:ae:03:9d:76:cd:0d:40:44:a3:9c:d8:89:d9:2e:87:db:
3e:37:cc:44:32:bf:fb:55:b0:42:df:de:0e:6f:af:20:2a:3d:
bc:3a:55:7e:06:03:3f:44:2b:cf:18:81:5e:6e:9e:b9:66:19:
d5:3a:a6:57:19:16:bf:cd:30:a8:f8:7f:31:d9:ea:ba:68:f3:
fc:fd:05:bb:ee:0d:1d:d1:dc:f0:6f:fc:19:3b:a0:a0:62:f7:
08:07:3e:1e:28:97:7f:c6:be:92:59:4c:eb:53:69:85:ee:d5:
03:a7:d8:f9:05:a8:14:17:46:29:cd:a1:81:d2:6e:5e:e9:a8:
11:c3:bb:5d:19:71:07:39:d1:f7:c7:96:d7:fa:87:a0:21:41:
f8:64:7f:57:d1:e7:ad:4c:37:97:d3:26:0a:97:77:6f:e6:31:
49:89:f5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:17:44 2025 by rpki-client