Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: jMkdRJu/uAWyikpJr7PQcQw8lG96izxaZmKfkz6ODWI=
Subject key identifier: AF:47:97:5B:F7:D5:E3:0A:31:DB:A0:92:10:A1:78:61:E8:05:61:7B
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 01976F2C5F6366AD597701368F68075BBCE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 16:01:08 +0000
Manifest this update: Sat 14 Jun 2025 16:01:08 +0000
Manifest next update: Sun 15 Jun 2025 16:01:08 +0000
Files and hashes: 1: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (hash: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=)
2: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: wTLT1xRdPMBYAw5VHRL1B9lkkQRt4dzFzigukd85G7o=)
3: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (hash: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:5f:63:66:ad:59:77:01:36:8f:68:07:5b:bc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Jun 14 16:01:08 2025 GMT
Not After : Jun 15 16:01:08 2025 GMT
Subject: CN=af47975bf7d5e30a31dba09210a17861e805617b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:af:dd:f4:2a:57:24:fd:1b:cd:fc:6c:19:
e9:04:a5:4a:51:19:21:d3:60:7c:00:78:b2:3c:7c:
b6:c1:e1:63:82:af:c8:8b:f5:e8:ba:78:58:44:9a:
2a:c4:81:cf:c7:ea:dd:15:46:b9:bf:a6:43:99:6d:
19:4c:7b:7b:b4:1f:85:8e:de:b9:dd:8d:7f:4e:3d:
20:56:26:1a:3e:d5:98:6a:27:0c:f4:ec:4d:2d:04:
b2:d1:18:f0:6d:75:f6:79:7b:69:b5:d1:e1:cd:51:
bd:24:7f:07:e1:1e:fb:8c:c4:a3:7d:a7:b2:2f:4e:
40:d0:62:24:e5:07:bf:e0:97:ee:9d:a5:65:bf:8b:
fa:fc:60:d8:f2:0c:c7:48:ad:18:4a:45:33:5e:e0:
2e:12:5b:fc:66:a5:98:a2:25:71:2e:72:b0:5f:32:
9c:a0:0c:32:e4:40:72:a4:13:40:8a:ac:c0:80:77:
64:72:ed:b7:a2:1b:26:47:0e:67:74:68:97:1e:05:
d0:4c:26:2b:59:db:07:5a:01:31:03:fb:f1:4c:3c:
a1:71:08:ee:bf:3b:34:ee:e1:3c:d1:65:a0:1a:e9:
1b:19:00:e2:e6:cb:89:5d:e4:74:9a:f1:27:7a:4d:
9f:dd:99:af:86:bd:7a:e6:38:9f:0f:57:ba:8f:96:
98:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:47:97:5B:F7:D5:E3:0A:31:DB:A0:92:10:A1:78:61:E8:05:61:7B
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:00:51:12:3e:05:50:ec:e5:af:3d:ea:96:27:e9:d5:9c:4d:
c8:39:a3:ef:a9:14:e5:35:c7:02:2f:1e:09:e9:26:53:7e:01:
e8:be:69:a8:bf:cf:a5:0b:a8:2b:0b:9e:7b:52:07:77:a3:47:
18:1b:a4:73:8f:ca:cc:46:ec:9e:70:5d:a3:d1:0a:31:04:dd:
37:a6:07:4e:82:ae:0c:34:d1:0a:bd:6c:97:3b:e4:ba:e4:f0:
55:fa:2c:6d:20:04:ae:14:b4:b7:16:46:d6:17:f3:e4:f8:4f:
3a:b0:05:57:27:fc:e1:7f:ce:87:c0:1f:64:f6:ec:9d:71:8a:
83:b7:7d:46:8c:7e:6b:97:69:fa:46:0a:f7:26:59:cf:c0:21:
27:d7:90:8a:7f:50:75:ed:21:77:f9:be:20:f4:e6:5a:e6:2a:
ef:b7:3c:ab:e4:ab:ba:40:b5:36:8b:28:e7:55:69:0a:bf:ba:
4b:8f:3e:ce:3e:2a:50:38:fd:05:be:2a:4f:e2:ce:8b:35:f1:
45:95:55:00:ce:a6:a6:88:33:b5:7d:86:88:c6:3c:9f:24:49:
6f:93:bd:f3:45:02:38:97:84:c4:ba:79:c7:1b:ef:8d:dd:75:
0f:e0:51:b5:7f:30:a8:57:8e:02:80:da:f3:ca:5b:89:38:09:
99:4b:2b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:12:35 2025 by rpki-client