Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: CEhuhJsEf+ZPUb5+0A1dd//Rl0GfCPwQMy6bQz04UjI=
Subject key identifier: 92:25:D9:F8:AA:E4:B4:DA:1C:45:98:D0:B6:F7:A1:0B:D5:6B:D4:61
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 01987373E962F2162585C16B49A3A494D7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 14A7
Signing time: Mon 04 Aug 2025 05:00:32 +0000
Manifest this update: Mon 04 Aug 2025 05:00:32 +0000
Manifest next update: Tue 05 Aug 2025 05:00:32 +0000
Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: 3CzvlTqbxMoE1crxhI4zB74C3CAQNHT8TWnDvUouMME=)
2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:e9:62:f2:16:25:85:c1:6b:49:a3:a4:94:d7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Aug 4 05:00:32 2025 GMT
Not After : Aug 5 05:00:32 2025 GMT
Subject: CN=9225d9f8aae4b4da1c4598d0b6f7a10bd56bd461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:e3:5f:7c:0e:2c:c2:47:ae:03:6f:7b:9d:
5b:f3:2f:0c:b6:20:7c:e5:35:a7:3c:0e:7b:c1:82:
14:09:58:0c:54:20:a9:e8:93:4d:08:a9:cd:48:bc:
61:62:91:62:00:76:15:c4:db:7e:9d:17:05:20:e3:
35:42:d7:a4:58:c0:90:2f:2a:3a:e0:1d:bd:dd:0b:
c5:08:b7:6e:71:79:08:36:d7:47:f6:c3:8c:4c:28:
bd:57:16:86:d8:e7:46:0d:d7:e1:16:cd:40:1f:0a:
40:b9:ea:f4:f5:ff:c0:30:05:8c:e9:36:1c:cb:0b:
1a:7a:b2:16:30:35:c8:f9:c2:c3:11:11:ad:de:6b:
40:a0:4a:65:34:86:04:b6:6c:f0:a0:c0:d2:b9:60:
c1:94:59:22:7e:ab:25:28:e6:a9:e3:97:de:1e:98:
82:43:00:89:e7:34:52:86:4d:31:63:68:b2:d6:8d:
df:ec:54:b8:d1:36:85:c2:84:b6:23:bb:29:6a:78:
d1:33:0f:87:4f:47:20:0e:0c:15:25:68:1a:ad:ca:
8d:7c:cc:d4:77:2a:1d:f9:d7:d3:d9:e1:14:eb:90:
6b:3a:ba:7d:27:36:2c:71:52:4c:05:98:9b:5b:e4:
c5:ff:c4:f2:23:c2:90:0d:a8:ab:77:84:09:fe:97:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:25:D9:F8:AA:E4:B4:DA:1C:45:98:D0:B6:F7:A1:0B:D5:6B:D4:61
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e7:f5:55:a0:01:64:07:7a:25:4c:21:f3:5d:32:cb:52:81:
3e:3c:96:2d:ab:4f:cf:ab:ad:d9:fd:92:ea:be:4b:05:d1:f9:
2c:0e:f8:1c:5c:00:a2:de:c5:9f:f9:21:6f:c6:87:fa:dc:22:
0a:83:fb:23:1c:90:6a:55:d4:f7:0c:6f:e8:8c:1c:92:b5:8f:
7f:fc:29:d6:28:47:73:7c:95:02:16:5f:0b:5a:db:4f:19:96:
8d:85:c8:f2:a1:33:bc:f8:e3:30:11:fd:52:ad:fa:e8:29:7f:
92:2f:3d:1b:d6:82:bb:da:44:f7:87:80:f5:f2:25:67:8e:4e:
2e:0f:df:3c:94:d7:50:1c:7f:98:96:93:8f:10:dc:7a:12:93:
91:33:ab:39:4f:e2:1e:d0:d0:86:d5:44:07:c9:07:63:9c:d3:
e9:ec:0b:47:75:c5:cf:66:ff:bf:03:4b:a5:d9:af:8e:2a:7b:
2e:8e:e8:d0:7b:b6:75:0e:6c:94:22:80:f8:b0:c2:9f:2d:5e:
9c:b1:12:0d:fc:5f:69:c5:27:90:91:c4:fd:b0:43:21:5b:29:
92:2a:da:e9:6b:a5:81:19:c8:ba:71:2e:d0:69:fc:7c:29:b0:
27:00:bb:71:68:e6:a9:24:f0:87:fc:04:51:c2:cc:f0:14:dd:
7d:4a:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:51 2025 by rpki-client