Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: kDHvY2O51k01Vd3ab2YMvXwCUOyvTt01/1MjxFM7SEI=
Subject key identifier: 7B:51:C1:EA:D7:27:E8:D0:1B:AC:29:38:72:2B:D4:19:57:73:1E:67
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 0197B88F1518A60085BFE950E7CC6A6867C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 04E9
Signing time: Sat 28 Jun 2025 22:01:14 +0000
Manifest this update: Sat 28 Jun 2025 22:01:14 +0000
Manifest next update: Sun 29 Jun 2025 22:01:14 +0000
Files and hashes: 1: 0EbACDVL2fDivnf5KUiVukCW6AM.roa (hash: 2EVhZ0rS+lj6U3ajXAU+8FEPpDbqGDvioQB8YdIkUmc=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: x5rmdvkcTGJLx3DYadE3giLYhWpUms7bE9jRhDIEuJI=)
3: mqm7Jg5-zPabxGFXHWcZsQaK2dY.roa (hash: /oBnHrhig1strh5pSaVLSZyr3E+b/5bhNvAnJC6HiAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:15:18:a6:00:85:bf:e9:50:e7:cc:6a:68:67:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Jun 28 22:01:14 2025 GMT
Not After : Jun 29 22:01:14 2025 GMT
Subject: CN=7b51c1ead727e8d01bac2938722bd41957731e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:58:9b:53:03:8c:27:76:9c:37:1b:f7:3b:
70:2f:07:e1:e4:ad:f9:f5:2d:b4:94:73:be:3f:14:
b7:9e:34:a0:53:32:a2:b7:df:41:84:b8:17:21:60:
9a:5a:3b:e9:a9:c9:af:5a:a2:9c:21:bc:4a:76:14:
cc:1b:89:da:82:57:bf:6a:24:e1:3b:f4:54:5e:1e:
bb:f3:a1:97:56:df:41:ea:70:85:4e:ed:ba:91:ef:
7d:73:25:54:62:a5:51:bf:b8:5b:a1:8a:1d:de:d7:
f5:d8:af:73:70:29:12:0e:4a:e0:dd:20:b1:35:34:
6b:c0:fe:6d:a5:9d:28:98:3c:e1:43:df:ec:15:ae:
c4:3c:04:db:1c:b5:4f:0e:c5:7f:41:e4:a2:21:50:
ad:92:e2:3a:dc:f2:12:90:9a:23:77:5f:ed:7e:5e:
9a:21:57:69:e7:09:4d:a8:20:a4:71:e4:17:c3:c5:
6a:e2:aa:27:2f:70:e9:96:ae:aa:1a:a5:1b:cf:68:
cc:47:ae:34:0a:bb:74:ee:f2:cd:37:47:21:97:93:
7f:7d:4c:3e:3d:d9:35:d5:81:bd:8e:91:cf:f0:ef:
e4:68:5b:cf:00:b9:9d:3a:98:bd:a7:f8:3d:c6:96:
05:71:f5:c8:9c:bf:5f:bb:d5:5a:03:9b:7e:70:8d:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:51:C1:EA:D7:27:E8:D0:1B:AC:29:38:72:2B:D4:19:57:73:1E:67
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:dd:4e:d5:35:22:a8:1d:78:22:e8:3b:b3:08:2a:ca:81:f1:
be:ad:21:09:ac:39:04:e4:56:b3:c2:7f:f3:b3:1f:e4:fe:43:
24:6c:d7:e2:e8:8d:84:fb:65:3f:69:6b:dd:39:e0:7c:65:03:
49:4c:1c:de:97:42:2b:bb:44:bd:f9:c4:86:30:06:a4:5e:fe:
4f:71:40:bd:bc:6a:3f:ec:6b:19:ef:33:07:54:96:79:31:74:
57:49:41:8d:d9:9f:f9:81:48:81:1e:3e:ec:87:da:d3:2b:44:
c3:80:86:3a:cb:58:d2:69:62:b4:e9:12:1e:85:1b:29:f5:b7:
dc:b3:1b:b2:2b:9e:f3:ee:87:49:72:d0:ca:a7:c8:07:1d:e0:
a9:c3:45:f2:9e:89:da:cd:25:03:f8:ee:a2:1c:5b:89:40:1a:
0b:12:c9:91:ec:bc:3a:32:3d:11:8d:50:e4:51:84:e5:e9:ba:
d0:a3:30:87:41:d4:64:c6:85:ed:9a:e3:76:27:f0:31:84:2f:
9b:d0:1e:36:5b:70:04:52:78:dc:11:ec:61:d5:06:d0:b9:e7:
2e:10:2d:af:7b:da:61:15:79:c2:b4:13:1f:70:68:e2:5b:e3:
dd:bc:18:ac:9c:e7:e0:43:30:cc:26:cb:00:7b:6f:a6:4f:da:
a9:6d:45:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:19:04 2025 by rpki-client