Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: RcAF9NtUsfCYv5QzwC8RgBTYO5h/e8NSd4afkAnA28Q=
Subject key identifier: 72:40:EC:BC:46:91:C8:7F:9E:DE:2C:A1:13:C8:6C:D4:6A:36:A1:75
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 0198D54EA68B71D68581677E431C32434249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 0285
Signing time: Sat 23 Aug 2025 05:02:37 +0000
Manifest this update: Sat 23 Aug 2025 05:02:37 +0000
Manifest next update: Sun 24 Aug 2025 05:02:37 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: 2/bgg9wddkLn2fbZVb3eVKU1gCTflC3TSpmwDTs7u+E=)
2: kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa (hash: bpCrbxr/pNjdQZDOcvXUOPJK/8m01DTiWBCnp2w78BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a6:8b:71:d6:85:81:67:7e:43:1c:32:43:42:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Aug 23 05:02:37 2025 GMT
Not After : Aug 24 05:02:37 2025 GMT
Subject: CN=7240ecbc4691c87f9ede2ca113c86cd46a36a175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:9b:cb:02:9f:84:b3:35:49:78:a2:60:b1:
f2:f6:39:2e:5c:12:8c:dc:af:6a:58:91:b6:24:c6:
2e:c3:a3:5b:96:c9:94:36:14:dc:f0:4c:43:c4:ee:
1b:17:f6:7a:68:d0:b6:cb:52:9f:9e:66:f5:5d:f1:
16:35:24:2f:a6:87:3f:a0:7c:e9:4d:07:21:d2:a7:
57:02:24:23:c0:0c:2e:76:30:bf:6d:c1:44:13:d0:
bd:f7:91:8c:70:d4:53:b7:e3:50:c7:89:fc:05:19:
f9:c9:ec:8f:68:23:38:5f:c0:fc:68:79:d1:c4:2f:
9c:a5:e7:e6:7a:58:c8:35:cd:73:c8:85:b0:bc:d5:
c2:02:29:29:91:1b:c1:e5:cf:71:66:cf:60:3b:b3:
bd:3e:f1:a7:7b:b8:1e:9c:f7:d8:2a:00:dd:c8:b3:
d9:a5:80:46:11:4e:3d:41:93:28:23:63:ff:04:64:
bf:88:f2:93:c6:9a:e9:a8:08:dc:88:13:4c:ca:25:
59:3a:63:cc:eb:fc:84:4d:3c:65:2d:c5:c4:f1:37:
13:e1:b7:ab:ac:e9:34:87:43:23:d6:27:e7:26:24:
e2:17:e1:32:db:fb:f7:4d:72:55:3b:e8:3f:45:9f:
43:4d:b9:92:4b:bb:2b:b8:e4:df:82:bf:9e:9b:e1:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:40:EC:BC:46:91:C8:7F:9E:DE:2C:A1:13:C8:6C:D4:6A:36:A1:75
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:39:36:15:06:f8:06:74:5c:cc:21:95:62:a8:e1:e4:13:d5:
b9:07:58:25:a9:9c:73:a8:12:e1:09:2a:0a:f1:0c:91:a1:8a:
65:5d:91:f5:10:04:1b:c5:da:e5:64:f3:5f:41:f9:42:65:16:
9f:96:90:ef:67:38:eb:92:f6:de:68:a5:bf:b9:23:f0:34:68:
b4:f7:14:ac:d6:e8:b8:c1:de:91:de:05:33:ac:9c:5a:57:3c:
14:d7:9a:31:a4:2b:0f:e7:f4:32:06:67:8c:7a:d6:e9:64:90:
9b:94:48:52:a4:02:fd:ad:f5:da:ca:36:8e:5a:86:23:ea:bc:
70:53:14:17:d6:3c:06:eb:d8:10:5a:04:be:7c:9a:92:f1:8f:
07:17:a5:b0:68:c5:6a:9d:da:c8:4d:c7:7f:f8:4c:96:26:c2:
07:e1:c5:d7:29:69:c0:99:f0:3a:3f:42:ac:d5:08:28:33:00:
f7:d8:88:a4:ef:7c:6e:ae:c7:ee:3d:26:7d:83:93:0a:3c:85:
51:b7:6c:b9:71:11:5a:f9:d0:ca:a5:8d:ee:2a:d4:f3:bb:5d:
07:3b:98:13:2f:f7:95:a1:12:c9:3d:5a:df:e7:10:50:44:82:
5a:65:35:d9:5d:b5:11:df:cb:6b:3a:21:09:02:c8:81:8f:ab:
84:38:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:02 2025 by rpki-client