Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File: UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier: tgRca47jxuKwJgMylpbNe2V39YKihNES5E/4KBrWEPQ=
Subject key identifier: 0E:82:58:84:E5:B0:DC:9F:A8:31:2F:E7:05:92:74:A3:D6:B8:CC:54
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial: 0197CEA96ECF07B0B21995D9DDB94E40D1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number: 1554
Signing time: Thu 03 Jul 2025 05:01:39 +0000
Manifest this update: Thu 03 Jul 2025 05:01:39 +0000
Manifest next update: Fri 04 Jul 2025 05:01:39 +0000
Files and hashes: 1: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: EBZIkdlSBTNIaV3tP+nSdeNNIpB6z768DZYve0+gAvU=)
2: cDqRgVZUzcG8C6S6sy9XaY7R8i4.roa (hash: dXQReZhWlMp7R/f0KCpgMs+DeDxAbD08ZpRugIlwk3I=)
3: fn4qBfRUR0OB50vceznCHU7Je0c.roa (hash: YF9zXgr+C6MTpEPUuY8+DvVCvD+pUWLKC0NueJccgh8=)
4: u67ic7YzK78QcUkHm1snD1e9720.roa (hash: csRqjLRtzYYjHQDBckYWBc6iGrmSXKNq8hQ9btgA+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a9:6e:cf:07:b0:b2:19:95:d9:dd:b9:4e:40:d1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
Validity
Not Before: Jul 3 05:01:39 2025 GMT
Not After : Jul 4 05:01:39 2025 GMT
Subject: CN=0e825884e5b0dc9fa8312fe7059274a3d6b8cc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:03:91:be:f1:13:6a:dd:29:88:0a:85:71:
7a:e4:fd:2b:67:f3:91:3f:7b:28:31:27:98:12:09:
c4:c5:97:59:b7:87:7a:a6:4a:76:48:07:a2:c9:b3:
2c:ee:50:16:0d:ac:6f:7d:66:ab:de:f4:ba:d5:ea:
69:91:26:fa:02:c5:eb:23:ce:2a:7c:9a:e6:85:e8:
a6:9f:1b:32:1c:6a:ee:74:4e:ef:8b:85:3d:b6:c4:
69:b2:af:84:37:81:79:91:6b:b4:23:ef:1e:20:60:
10:f5:e4:04:2b:50:f4:6c:65:e6:1c:ab:02:ef:f6:
b4:7e:9c:49:60:ab:a5:04:72:b9:84:e8:ac:e6:e0:
4c:31:74:06:08:48:fc:bc:42:d8:21:6a:84:14:3f:
34:db:e3:93:19:77:2e:f6:06:e5:81:78:a4:b1:50:
f5:3c:a8:89:90:da:9a:7b:ac:aa:a8:72:ec:e9:81:
49:fb:87:a3:e9:80:f1:b0:4c:82:c4:80:b0:9c:ad:
fa:d0:27:a3:b3:a5:db:87:13:11:4e:aa:d3:a9:cf:
ba:df:7d:ca:fe:f6:ed:8f:11:bc:de:81:06:21:67:
c4:a3:6e:ba:df:b0:d4:59:99:2f:28:49:4a:cd:51:
24:7c:d9:68:65:62:0b:a2:00:ad:3c:19:0d:e8:9d:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:82:58:84:E5:B0:DC:9F:A8:31:2F:E7:05:92:74:A3:D6:B8:CC:54
X509v3 Authority Key Identifier:
keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:84:80:c1:92:bf:78:c8:bc:16:78:fa:d5:33:13:a0:61:82:
e6:28:ce:99:b6:c9:e5:89:14:c3:8d:a8:4b:de:85:11:95:f9:
db:51:49:cb:aa:c7:2d:3e:06:13:fd:2e:67:17:28:d1:96:25:
3f:87:79:bc:ba:71:bb:d0:b0:6e:87:34:45:23:4c:71:0c:cb:
1f:3e:c1:10:5e:fe:76:cf:85:33:1e:be:5a:81:ad:0a:74:6d:
aa:2f:cf:9f:d1:5c:86:90:25:eb:0b:f9:fc:25:94:c0:2a:ae:
9a:ba:9e:aa:01:85:2e:37:ee:a5:2d:ff:81:f1:0b:4f:40:b7:
c8:10:1b:ae:8f:7b:42:37:87:aa:de:7d:83:d7:ce:d9:23:b6:
1c:5b:61:4b:ef:c2:1c:73:74:a5:46:e7:9b:fa:51:3b:b3:13:
0e:88:b0:3c:52:72:1a:e8:e6:2f:cd:04:30:6a:6f:7f:ad:75:
46:20:87:20:94:c5:21:03:ad:e8:a4:0f:77:70:78:01:3f:bb:
54:b6:38:25:15:73:44:73:2e:25:26:d5:1d:43:c7:5d:be:15:
5d:05:7d:b2:fa:54:31:e1:df:b9:ab:d7:15:cb:e5:66:e2:d5:
8b:a9:9e:69:b1:05:10:a7:7b:93:6e:99:2d:b2:f0:11:29:cb:
ef:60:64:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:28:49 2025 by rpki-client