Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
File: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft (raw, json)
Hash identifier: YotsPIKl6sAPZF75HENvQDFXI4AF2xR+u80Hekog2eE=
Subject key identifier: 46:B7:13:85:9B:C1:F7:FE:31:4C:3A:93:16:A9:0D:13:1C:AB:A6:8A
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial: 01977D1ED601EB53A8F43E1A6A5F9AA62AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
Manifest number: 158C
Signing time: Tue 17 Jun 2025 09:01:02 +0000
Manifest this update: Tue 17 Jun 2025 09:01:02 +0000
Manifest next update: Wed 18 Jun 2025 09:01:02 +0000
Files and hashes: 1: 1-qC_h0BMH68nwZM--m9RrJPfUSU.roa (hash: dGjZPTTJM5HpRM58D6GZPV5SzYmb4kq7Kyp7lE449Zo=)
2: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl (hash: j9Ze4G0d8VrmHSngZwiEGZjj0HzK5bPXPsbs/jM3GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1e:d6:01:eb:53:a8:f4:3e:1a:6a:5f:9a:a6:2a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
Validity
Not Before: Jun 17 09:01:02 2025 GMT
Not After : Jun 18 09:01:02 2025 GMT
Subject: CN=46b713859bc1f7fe314c3a9316a90d131caba68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:6f:59:58:67:a5:c1:47:5e:04:9e:33:a7:
4f:bf:14:50:18:b7:0b:52:f1:45:40:33:56:72:3a:
d1:a6:bb:bf:a7:0d:7a:b7:51:69:21:56:c5:5b:36:
c0:7a:42:15:9b:c8:02:db:eb:50:66:07:fb:ea:80:
86:e3:42:2c:ac:6a:a7:f8:8f:a0:8a:03:8b:68:ec:
44:0c:74:bf:6e:bf:19:64:9c:38:40:63:03:3f:fb:
e1:18:45:e4:63:8d:68:68:12:5e:34:91:b1:b8:df:
a7:3d:7c:fa:05:41:7d:39:c4:84:d6:50:8e:cb:dd:
6b:1d:f4:b6:13:79:64:79:56:ab:27:52:93:fc:0a:
8a:07:db:45:49:d9:a6:fb:c0:e5:a8:a5:24:72:75:
c5:83:91:e8:05:c1:dc:db:40:aa:0a:d2:91:65:5a:
54:03:b0:19:a5:38:57:d0:08:8c:8a:8a:90:55:62:
91:ab:75:b3:c0:6b:27:0e:98:11:f5:17:2d:86:96:
50:2f:06:43:df:c0:19:bd:86:ee:f3:84:2a:22:e5:
2a:b7:02:f5:14:e1:a0:90:6c:ed:e1:7a:6f:bf:9a:
7e:df:43:0a:e7:e1:d7:39:1a:5a:65:32:a8:ab:ab:
de:d2:a4:71:1d:42:5c:5e:f0:e5:f1:e3:0e:7e:28:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B7:13:85:9B:C1:F7:FE:31:4C:3A:93:16:A9:0D:13:1C:AB:A6:8A
X509v3 Authority Key Identifier:
keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ca:9b:49:2e:6c:89:12:40:d7:c6:f1:a0:42:78:29:42:d9:
64:95:14:0b:39:a7:13:2a:bc:1c:7c:c8:bc:bb:df:a3:80:26:
71:f0:f4:e7:ad:54:34:9b:a2:00:bc:fa:16:e2:e4:7a:11:b8:
f2:44:55:ba:76:7e:b8:22:c6:93:74:39:a3:30:4a:ba:f6:35:
3f:30:80:11:b1:0c:ba:6a:fa:03:11:76:87:d4:26:fa:fa:89:
8e:9b:0e:2d:cf:c7:bf:54:27:d5:ff:7a:5c:d5:9b:27:3c:15:
ad:0c:7f:cf:37:b3:02:4f:89:07:90:da:3c:dc:43:cc:0f:32:
23:15:f5:07:47:19:7f:b0:27:a3:4a:fe:db:a4:a2:39:8c:86:
09:72:e3:29:98:a8:93:32:11:fe:eb:07:60:77:87:e3:0b:04:
b8:0e:e2:b4:ab:1c:be:17:1f:91:26:05:ff:08:01:49:e8:42:
b3:41:26:f7:9f:eb:6a:aa:16:98:57:0f:50:84:63:3a:5f:36:
42:5c:92:57:43:4b:95:5c:fc:83:c8:39:0c:f0:20:47:60:93:
43:bc:af:5b:a6:a4:e8:9b:ed:fc:eb:7e:29:fd:8f:07:bd:af:
d5:c8:0e:e4:82:ee:e4:73:6a:89:18:7e:d1:a2:11:09:5e:81:
25:84:e4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:26:31 2025 by rpki-client