Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
File: UCcYumg5OXxsV-ztbVCVcers7d8.mft (raw, json)
Hash identifier: hyop8em6FJKyXtQHwWQ7eOrRa/UqJkNQx8UaJVa1S5M=
Subject key identifier: BD:C4:19:1B:3F:67:C5:5D:B8:BF:E9:09:A6:23:E6:1C:3B:85:58:0D
Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Certificate issuer: /CN=502718ba6839397c6c57eced6d509571eaeceddf
Certificate serial: 01989411D9C7161A751F682BDD4075740A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 13:00:54 +0000
Manifest this update: Sun 10 Aug 2025 13:00:54 +0000
Manifest next update: Mon 11 Aug 2025 13:00:54 +0000
Files and hashes: 1: UCcYumg5OXxsV-ztbVCVcers7d8.crl (hash: mlLCDnTConvIwhTLB3/yVv/HXqPy26gMfGW1Bs20fhE=)
2: WtJONoz3Ixt7CeZPRU-hgtKyWKs.roa (hash: otXlAL96Q2eQ0JoFnviTH8lX7JlMAqHtqXMBKNXMq+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:d9:c7:16:1a:75:1f:68:2b:dd:40:75:74:0a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf
Validity
Not Before: Aug 10 13:00:54 2025 GMT
Not After : Aug 11 13:00:54 2025 GMT
Subject: CN=bdc4191b3f67c55db8bfe909a623e61c3b85580d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:b1:87:09:de:30:c5:4c:97:c9:b7:88:df:
f0:2f:8d:46:48:19:0a:25:17:70:88:07:78:51:3d:
ad:b2:99:e0:e2:86:6f:7b:65:d5:41:31:55:4c:b5:
e0:41:17:f9:a5:c6:ff:ac:fb:f7:c7:1e:03:be:20:
8e:1b:e0:7f:79:f2:da:11:8c:48:3d:2c:f8:4d:10:
a8:d7:f2:a0:20:c3:98:e2:30:33:ad:93:5f:6e:a1:
ad:5d:32:ee:88:a8:c7:de:4e:b9:31:57:3e:c7:c1:
47:b1:52:ac:a4:b5:b1:f9:de:5a:5f:31:68:37:a9:
17:d6:d0:dd:8b:19:0c:21:b8:51:22:0c:24:aa:e3:
2b:1c:48:bf:00:18:63:5a:d5:fc:d2:22:94:cc:b6:
84:5b:f0:23:5d:c9:94:e1:fe:40:d1:32:a7:2a:73:
34:e7:8a:fb:66:7f:1e:ad:7d:67:38:e0:28:8e:7a:
09:fc:7d:53:79:89:ca:2f:c0:90:03:de:1f:f3:64:
e5:39:3f:3f:e4:32:aa:73:c0:8f:73:06:1b:54:7d:
af:db:5e:75:f4:42:8e:96:3d:b0:50:1e:50:be:25:
b9:1a:2b:70:a9:4d:d8:84:97:0e:84:f8:4f:22:15:
2d:75:26:96:b7:94:bc:90:c8:00:45:32:f1:0e:3b:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C4:19:1B:3F:67:C5:5D:B8:BF:E9:09:A6:23:E6:1C:3B:85:58:0D
X509v3 Authority Key Identifier:
keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ac:dc:14:e9:48:c4:b5:61:4a:4f:85:a0:77:1d:58:c7:6c:
56:64:d8:0a:b0:53:af:db:a9:35:f8:5c:e9:33:89:2c:9d:6a:
e6:1a:88:93:2a:ce:4b:b4:cf:f6:1c:bd:13:c7:2b:27:87:d8:
a1:c8:32:39:ce:08:64:4d:0d:03:b4:79:84:4b:51:5f:17:a6:
c2:2e:df:53:ed:07:ce:cb:0b:92:d5:6f:1d:26:e0:9b:db:4a:
5b:b1:e8:b5:b8:df:76:7d:e2:f4:ad:d8:2f:12:8c:e2:7a:f0:
a3:72:3e:25:70:f5:df:5c:eb:af:9c:01:2b:24:d3:47:59:35:
52:cd:7c:88:db:b2:e3:bc:c3:b7:6d:92:f2:46:7c:ae:c4:0b:
1c:ff:47:bc:1a:10:4d:62:e9:a3:f7:31:3e:55:13:01:e3:80:
6c:a1:5e:40:09:7e:24:cc:e2:ca:e5:7b:f9:0d:ad:3d:a6:fa:
ac:e3:d1:0c:94:90:8d:bd:be:05:2e:c1:8a:82:38:08:eb:6d:
5d:82:37:f1:22:34:0a:54:3e:cc:db:d6:fe:74:2d:82:b2:f4:
c9:3d:4d:ce:4e:83:df:79:1b:24:76:97:d6:fb:d6:72:b2:f2:
4e:65:3c:c5:da:45:6e:91:af:fa:38:bf:e4:ad:44:1e:d6:5b:
f7:9d:82:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:27 2025 by rpki-client