Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
File: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json)
Hash identifier: tyiZW0KJA2fMA01nFk5R3M3H7VhFhCEiueLa6cvTL7E=
Subject key identifier: 39:8F:E9:35:03:AE:8A:65:33:64:AC:FC:FF:C3:74:C8:E3:8B:0A:AC
Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
Certificate issuer: /CN=50480549481968d43406127653f780abbf9a117b
Certificate serial: 019769612A6766971EC7A647C0B37B38F436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
Manifest number: 12D7
Signing time: Fri 13 Jun 2025 13:01:04 +0000
Manifest this update: Fri 13 Jun 2025 13:01:04 +0000
Manifest next update: Sat 14 Jun 2025 13:01:04 +0000
Files and hashes: 1: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: AxPLsNPk+c+n5d+R+VFG+H+Byz611p/o0qn5EYOLOnI=)
2: ieAdYhfL7YWN2SLS2f9hqBVZtZM.roa (hash: hG5CDDVlPm8IgOCRW9955aYuwC+jVZMftA53gP484x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:2a:67:66:97:1e:c7:a6:47:c0:b3:7b:38:f4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50480549481968d43406127653f780abbf9a117b
Validity
Not Before: Jun 13 13:01:04 2025 GMT
Not After : Jun 14 13:01:04 2025 GMT
Subject: CN=398fe93503ae8a653364acfcffc374c8e38b0aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:c0:51:d6:5f:09:57:1e:de:c6:68:66:cb:
e4:45:95:af:d9:f1:14:ea:85:88:37:69:af:26:3b:
a9:70:86:79:f6:fc:2a:5a:91:0e:1a:b4:95:4b:c2:
72:03:8f:16:82:b4:7e:d6:30:a1:3d:69:a6:42:c4:
b5:1d:14:68:a8:db:3c:29:a3:9a:ca:2f:18:93:11:
0e:3c:7b:4d:e9:3a:01:47:62:73:45:27:f1:10:dc:
40:bf:99:88:7c:e6:d0:d4:c9:83:64:f3:62:17:9f:
29:ff:81:44:28:0c:13:55:7a:51:a6:b3:9f:68:b7:
8a:0c:6c:7b:82:ae:27:98:d8:17:fc:ac:32:4c:c5:
72:8f:a8:05:23:de:f8:88:d3:00:2d:c7:8b:bf:02:
77:fc:a4:43:79:09:91:0d:55:a2:60:ae:fe:83:7c:
d8:24:c2:5c:fd:24:b1:c8:aa:ed:d7:01:72:30:93:
b2:56:32:0d:d5:99:5c:7f:30:19:f6:2c:1b:15:72:
26:3e:53:e0:6b:57:af:a9:1f:60:54:b5:9a:16:87:
7a:ac:2f:5d:8b:5a:da:8c:12:ca:dd:30:81:57:51:
86:bf:76:2c:c5:e3:24:07:ec:05:f8:71:9b:85:0f:
7d:d1:50:90:e2:7a:5e:bd:0d:c5:43:7d:c2:89:7f:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8F:E9:35:03:AE:8A:65:33:64:AC:FC:FF:C3:74:C8:E3:8B:0A:AC
X509v3 Authority Key Identifier:
keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1d:86:21:1e:42:48:8d:ff:9c:94:34:0a:82:8c:1c:6e:91:
e9:4a:86:25:9c:90:47:3a:5e:71:85:4f:3a:86:6f:ae:85:7a:
8b:ad:74:c1:37:be:5e:99:14:28:94:19:33:42:9e:bc:ef:64:
73:0b:f4:a2:85:dc:7d:e2:e3:2f:fc:21:0e:81:24:77:cf:66:
cc:a1:7e:aa:00:09:1a:d2:44:d9:3c:bd:32:75:bf:86:12:c6:
49:a3:99:da:d9:d0:23:a2:4b:28:01:5c:28:71:9d:e8:c0:96:
4e:36:7a:59:89:eb:36:9e:6a:8c:e2:4d:88:a9:f4:15:8a:e5:
f6:24:40:cf:b3:62:eb:a7:e1:ad:19:bc:a5:f0:66:1d:70:80:
c2:b9:1a:43:55:53:ff:70:b1:63:35:bc:2f:2b:e7:14:f2:c8:
8b:93:b7:23:fc:24:4a:e7:69:54:41:0f:87:26:f6:89:bb:7a:
0e:76:ff:af:fd:6e:b9:3c:7d:dc:53:c9:e2:50:4c:1f:95:db:
ba:f4:c6:7f:43:5d:09:c6:3e:ca:d5:1c:69:7c:3c:a1:05:af:
83:75:ad:f9:f8:dd:87:86:db:10:8e:49:7e:c7:22:95:7a:4f:
c4:a8:ff:e9:37:f0:c2:08:97:22:a7:b0:c7:c0:aa:d8:9b:3d:
a2:fe:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:35 2025 by rpki-client