Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: Ds9/970cTuDEXyeDhajS1zLHajCS5oBZrmID6sLuUyQ=
Subject key identifier: C7:30:7A:0C:46:6B:77:1A:E6:62:D6:2B:43:71:CF:24:2D:F3:39:08
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 01976EBDE1771B26C282F11149C4DB0F0EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 1420
Signing time: Sat 14 Jun 2025 14:00:27 +0000
Manifest this update: Sat 14 Jun 2025 14:00:27 +0000
Manifest next update: Sun 15 Jun 2025 14:00:27 +0000
Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: umBY9qSXKC2kJV5hsF/t8KBaV7llg89hBx49ZJ0KiyI=)
2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:e1:77:1b:26:c2:82:f1:11:49:c4:db:0f:0e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Jun 14 14:00:27 2025 GMT
Not After : Jun 15 14:00:27 2025 GMT
Subject: CN=c7307a0c466b771ae662d62b4371cf242df33908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:f1:2d:cf:86:cc:f4:e7:b7:25:c1:2a:17:
ec:1b:a6:32:91:41:f1:40:81:99:f3:94:73:3d:c2:
fb:14:1f:bf:30:07:0a:e1:78:50:c3:04:f4:f3:35:
de:cd:c3:5f:f0:1d:65:b3:8a:5c:20:a0:44:d4:ff:
c0:62:1c:f4:b0:5c:76:5c:b4:17:d3:85:a1:93:d5:
db:f8:14:60:78:64:10:7f:75:1e:e2:6d:24:10:d3:
f7:64:9f:b2:4c:58:a7:10:d6:6c:7e:f2:aa:69:11:
d7:ce:62:b8:ca:84:ed:ed:33:7c:4a:e5:82:97:3b:
32:81:d7:ae:c4:e3:bf:a3:5a:dd:be:10:07:aa:55:
57:70:6f:4b:98:de:4f:90:22:67:79:27:a0:2d:ea:
f3:7e:78:89:33:c1:f3:57:85:37:86:0c:39:72:0f:
5e:fe:fc:68:b6:14:0d:11:e9:72:a4:45:ed:95:61:
2f:1a:fa:55:22:35:c4:8b:8d:7a:a7:3e:fe:70:e1:
07:21:ea:a2:12:49:96:a1:bd:c0:f2:64:bf:af:78:
d9:9f:4d:5b:11:46:40:30:49:0e:2f:e8:e4:ae:a6:
59:eb:a8:12:43:ec:68:5d:ca:c1:d9:a4:1b:73:6b:
4e:18:16:0b:3e:95:c1:d1:a4:c8:62:69:e6:4a:c7:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:30:7A:0C:46:6B:77:1A:E6:62:D6:2B:43:71:CF:24:2D:F3:39:08
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3c:6f:4f:86:5d:ff:0e:08:9c:9f:1b:b5:63:76:d6:cd:eb:
9d:2e:9a:a8:b5:c2:69:8b:90:4a:45:9a:62:2e:ae:a2:a2:d7:
26:fa:1d:78:85:74:4d:3d:57:32:24:af:b8:77:87:59:74:a3:
c6:81:43:98:c4:4d:53:61:89:11:8a:e1:13:4e:3f:aa:04:60:
b9:df:ce:25:ba:30:f4:8e:b5:08:ed:e9:64:f3:5a:f7:23:67:
bb:2a:de:c5:8f:17:5f:9c:bc:aa:db:69:d7:b7:44:86:f2:f0:
c7:d5:10:7f:fb:8c:cf:c3:4b:b9:0d:3e:f3:14:11:1d:34:4f:
4a:21:7b:7b:50:5d:fc:9e:29:28:7d:94:ca:8a:1d:1e:de:9f:
4a:59:79:ed:c1:d0:dc:01:3d:49:f0:96:43:a8:31:7f:8f:d8:
3e:ce:76:53:8e:0f:54:0d:37:f1:f0:75:2a:48:13:ce:bf:01:
42:92:10:7c:6e:56:73:ae:1a:d7:39:d1:11:92:cb:fa:2c:94:
4d:2f:aa:c2:f9:ac:37:b5:78:75:d1:a3:6f:16:a6:ca:3f:a1:
fb:c6:1c:7c:96:4f:4a:66:50:87:1f:11:ac:d2:5a:64:a5:3d:
ce:57:59:b8:21:0a:c8:e0:19:39:47:b9:61:e9:9c:83:8b:36:
15:4c:6e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:18:59 2025 by rpki-client