Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
File: UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft (raw, json)
Hash identifier: YOA1m6Tb5B9bjAR+NO821DhIKf1NB/Za0OZIAdeQieo=
Subject key identifier: BE:BC:B9:64:81:53:CE:A8:61:F0:9E:31:68:EC:43:E2:8A:86:C5:DA
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Certificate issuer: /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial: 01987D8A40FC49F5BE22A8E4A8F1930F9DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 04:01:09 +0000
Manifest this update: Wed 06 Aug 2025 04:01:09 +0000
Manifest next update: Thu 07 Aug 2025 04:01:09 +0000
Files and hashes: 1: 9m785MXZwp0BQtk_jk4fp9A4qB0.roa (hash: u+8J+4zJtWHS217NkWrzbcfb0E+Zj0l1Wu1mFSLU2lI=)
2: UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl (hash: bf79AN+NpShIcJPz4IqOctm4Lr+9AjUPaF0KbG/Pvnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:40:fc:49:f5:be:22:a8:e4:a8:f1:93:0f:9d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Validity
Not Before: Aug 6 04:01:09 2025 GMT
Not After : Aug 7 04:01:09 2025 GMT
Subject: CN=bebcb9648153cea861f09e3168ec43e28a86c5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:d1:05:3e:61:42:75:7f:36:d4:a7:22:f6:
56:c3:6e:4c:b3:61:be:0e:f6:f0:cb:d2:0f:7f:74:
0e:0d:06:a9:ce:12:c4:45:cd:b9:27:9f:58:f7:e6:
82:19:8e:3b:36:ae:c4:0e:87:31:32:ba:b5:61:39:
b0:05:e0:36:23:83:2c:fb:01:bb:3e:a2:91:e4:34:
df:07:b6:af:93:e6:50:ad:6c:6d:93:c4:01:7b:b8:
3e:e8:5c:8d:e3:98:61:1c:7e:20:11:9a:88:2f:d5:
85:b7:10:cb:64:d1:e9:be:59:87:6a:60:4c:46:fe:
54:39:f4:88:1d:9e:8d:89:d9:51:bf:eb:fd:eb:ad:
c9:58:ff:88:3a:b7:c0:61:55:99:79:c2:17:64:32:
46:8a:6c:32:46:59:0c:e1:1a:74:e0:f1:5a:6b:be:
c5:13:00:2f:d5:b9:08:d4:29:b6:24:f3:b6:4c:eb:
b3:8e:5e:51:1f:af:c3:ce:72:33:53:b6:c6:31:40:
ac:27:2e:8f:11:18:b4:3f:fe:aa:77:18:7f:38:17:
9a:af:ae:13:02:94:ed:96:5c:4e:a9:32:49:16:8a:
55:3c:92:4d:e7:88:d5:3a:0a:f6:24:d8:b1:ff:82:
62:29:27:1b:73:27:8e:4d:5b:41:6b:3f:08:f5:a1:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:B9:64:81:53:CE:A8:61:F0:9E:31:68:EC:43:E2:8A:86:C5:DA
X509v3 Authority Key Identifier:
keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0a:4e:7b:fa:82:be:d3:84:aa:5c:d5:70:12:1e:9d:01:c4:
51:b8:1a:bd:2c:a1:d6:3e:e3:fc:83:30:56:1f:3f:9b:ba:b9:
c6:4d:ca:d8:be:98:96:c9:5e:24:9c:d3:f6:4b:1c:c4:09:e9:
f4:90:a9:5a:20:b5:6f:83:0c:fb:34:2e:42:cf:99:29:a8:73:
1f:dc:39:83:6f:50:3e:0d:4a:b2:4e:26:c9:10:0a:f3:71:4b:
f8:3d:25:5b:73:69:13:25:d1:1f:2f:31:f8:e3:87:25:2d:86:
7f:3e:55:cd:6e:a8:25:87:68:07:27:2c:57:9f:67:d4:71:d3:
e9:66:58:88:69:2e:91:09:fa:a5:e7:4d:d2:d9:e2:d7:c9:29:
9c:10:dc:63:23:b5:68:36:f2:1c:ea:74:5a:79:60:40:b1:b4:
ad:0c:25:38:8b:c5:bc:15:18:fc:c0:57:94:c4:c0:91:f8:eb:
51:8a:b9:64:4f:26:0b:f9:e1:2d:52:bf:0b:4d:09:b8:25:34:
59:80:30:6a:f3:18:dc:33:79:08:ad:b6:16:3d:92:45:b2:88:
d1:2d:dc:10:e5:53:99:f9:7c:3a:1c:2f:97:a1:98:9a:44:20:
8e:44:b3:8b:d2:60:04:48:9d:5b:92:2b:0a:94:d4:bd:c8:d2:
0f:b5:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:08 2025 by rpki-client