Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: 56GQtIeWNGeOpd5aUIeD06U8PAeYi9ZiMqiPYQuiy10=
Subject key identifier: 06:CB:5D:02:7B:7C:E4:BB:75:92:1C:9C:44:CB:99:B7:74:AC:0C:C8
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 0197B77CBC7906BA089F376C662F1FB90C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 01F1
Signing time: Sat 28 Jun 2025 17:01:34 +0000
Manifest this update: Sat 28 Jun 2025 17:01:34 +0000
Manifest next update: Sun 29 Jun 2025 17:01:34 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: rAmA1JjNzQ6IDqbxwH/q/bwLAr/QKl1k+d8BnyLScuc=)
2: kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa (hash: bpCrbxr/pNjdQZDOcvXUOPJK/8m01DTiWBCnp2w78BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bc:79:06:ba:08:9f:37:6c:66:2f:1f:b9:0c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Jun 28 17:01:34 2025 GMT
Not After : Jun 29 17:01:34 2025 GMT
Subject: CN=06cb5d027b7ce4bb75921c9c44cb99b774ac0cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:e9:76:92:de:8c:07:70:30:24:69:d2:15:
f8:a6:20:91:a1:09:16:20:1f:30:77:d3:1f:a3:87:
cf:cc:c0:d0:9b:60:80:ae:fa:bd:10:04:4d:ca:d4:
f7:d2:8c:b4:5b:ab:57:2d:d8:b9:a1:5e:fd:20:27:
16:7b:e9:e3:ed:4e:15:11:7a:be:21:0e:95:70:0b:
05:92:7a:cd:3f:30:6c:48:0a:b6:5f:15:a8:16:e8:
11:22:91:53:74:52:08:9c:81:bb:88:58:22:5d:3e:
c0:e2:e8:c7:fe:8d:fe:04:e3:bb:99:c8:b9:3e:2a:
bc:53:8d:fc:0d:01:50:81:76:3a:b3:1b:aa:5c:ca:
5d:3b:c7:44:86:d5:cd:4e:cf:75:e2:1e:09:5e:52:
5d:ea:54:9f:47:f3:e8:a2:89:1d:bc:a7:e7:46:b5:
3a:45:f9:43:81:dd:69:ed:6a:2a:87:69:26:8e:49:
bc:2b:6d:c0:00:2b:d2:fe:0a:87:f7:d2:8b:09:d3:
9b:a0:cb:90:a2:64:89:6e:90:42:e8:6c:c6:19:cc:
b7:d6:59:8e:8d:6f:17:f3:d4:12:ea:6c:95:94:64:
9a:2d:c6:29:76:f8:f1:10:e8:bd:53:53:8d:65:3f:
5b:37:ee:ec:5c:d0:af:c1:1a:8d:f9:14:56:bc:62:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CB:5D:02:7B:7C:E4:BB:75:92:1C:9C:44:CB:99:B7:74:AC:0C:C8
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:93:28:20:7c:a8:86:6e:d5:37:60:f2:9b:51:38:e9:a0:5a:
0a:70:69:30:f8:ca:a0:6a:30:53:e8:ac:e5:03:63:33:7a:8e:
fc:14:c1:8e:e7:fc:84:ab:1c:a8:57:50:f8:be:66:e2:2a:29:
91:d8:7b:e3:2a:91:ad:e7:5e:39:ab:de:42:1f:40:12:b9:1f:
40:b7:7f:6f:c4:7a:3b:bf:c5:53:cb:6f:c7:12:fa:75:a5:bd:
3b:19:1a:6d:72:b5:9d:fe:f4:50:fc:dd:31:45:f8:81:40:a4:
f7:ea:7e:44:0c:09:77:88:c0:1c:7e:6a:e4:91:1e:f4:09:d2:
15:1d:65:21:dc:25:31:66:28:b9:e9:fd:93:22:87:72:09:aa:
01:4e:6f:82:07:c9:4b:70:51:d5:fb:01:5b:8f:b2:f4:a5:d7:
0a:eb:01:92:7c:99:5a:6e:bd:73:d2:1e:fc:85:2a:c8:4d:e9:
27:28:5f:3f:58:4b:19:d7:1f:45:2d:01:95:43:c0:da:7f:a6:
b9:ee:81:c6:b3:a7:ab:fb:89:5f:81:4f:82:fc:46:ab:47:16:
26:12:e9:d3:cd:0c:1d:56:43:b6:3a:e1:85:14:cb:53:0a:0a:
8e:af:e4:90:56:c2:e3:78:db:bc:3a:68:04:1e:c4:95:7f:a7:
a0:0c:24:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:12 2025 by rpki-client