Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File: UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier: EnL2b5EbcDvBGJKmB3T8enyvxKcG9IpZ8/ZMYwyRHgs=
Subject key identifier: 03:79:4F:06:13:97:C5:80:CC:DF:71:16:73:43:AE:24:0D:3E:93:A1
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 01988BB38699B1D845034A22BCF431D1D806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number: 1575
Signing time: Fri 08 Aug 2025 22:00:54 +0000
Manifest this update: Fri 08 Aug 2025 22:00:54 +0000
Manifest next update: Sat 09 Aug 2025 22:00:54 +0000
Files and hashes: 1: FEtsoc8GhVwS-itqE7wFwW_E2l0.roa (hash: wzhGlUkDAVqaCjdqlX0sPOVL6b9f0X/6vMu8NbyqVQo=)
2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: Yf+639QaIBNezI1IESk8E7dJsrhyzy27QnF94i5Bwqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:86:99:b1:d8:45:03:4a:22:bc:f4:31:d1:d8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Aug 8 22:00:54 2025 GMT
Not After : Aug 9 22:00:54 2025 GMT
Subject: CN=03794f061397c580ccdf71167343ae240d3e93a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:41:92:bd:9e:9d:0c:ca:d3:88:52:ea:d0:
5d:f6:54:1c:ad:c8:73:a0:73:0f:97:3b:b1:cf:f5:
3c:8f:62:df:b3:7f:98:41:9a:99:41:b5:cc:98:60:
15:90:c0:0d:a2:89:be:59:68:10:6f:6e:fb:7b:a0:
e7:2e:6a:54:4a:c2:08:d2:05:b0:f3:7e:dc:da:c6:
b0:58:c2:68:5c:68:20:54:83:20:5a:b9:0c:79:24:
d7:c3:73:ae:30:7c:c1:d5:bc:a0:01:2b:2e:42:ac:
fc:75:84:a9:df:fe:ed:a9:54:ef:a1:a1:3c:85:ce:
7a:5e:76:99:8e:d1:98:3c:c6:8d:23:ea:af:8f:bc:
df:c3:ca:a0:25:53:28:5c:3b:e5:77:80:ad:04:d9:
50:cd:e8:b8:49:47:60:21:3b:b5:f5:3f:9f:2a:d7:
f3:86:20:fd:d6:92:36:d5:17:bb:6e:18:99:42:db:
b1:38:50:87:05:38:42:80:72:4f:a3:45:f0:74:33:
c6:1e:4b:e6:dd:12:35:3d:29:2a:ea:09:3d:33:a2:
44:d8:d6:82:a3:06:39:a0:29:f2:f8:bc:65:57:70:
69:78:d4:91:7b:6e:44:34:6f:c4:e0:8a:54:cc:1c:
26:d2:b1:a3:ec:d7:94:d2:6f:44:da:a2:a2:6a:48:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:4F:06:13:97:C5:80:CC:DF:71:16:73:43:AE:24:0D:3E:93:A1
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:db:48:40:2b:5e:7e:30:a2:1a:7a:08:b9:ce:25:bb:9a:6b:
01:f6:62:00:b4:00:80:15:eb:65:9c:7b:45:ea:ed:8a:0f:37:
dd:5c:4e:97:cf:96:07:0f:36:e8:66:ca:8b:7a:b8:61:ad:9d:
d3:8e:80:32:26:44:53:12:71:f1:8d:48:1c:b8:70:7f:5d:56:
9e:19:f9:9b:ba:a6:6f:98:a6:41:9f:bc:d3:aa:40:02:e6:1c:
54:4d:67:ba:d6:e1:45:ac:82:1b:f9:13:36:06:a8:a2:b8:de:
1f:00:84:81:2c:de:5d:1d:cd:c4:52:a4:cb:9e:a7:7d:b2:34:
ad:38:dc:7c:62:d9:d1:b4:6c:16:37:41:4b:61:71:ec:6d:83:
41:7a:f4:ad:78:0c:ca:d0:24:34:76:23:cb:af:c6:48:7c:c1:
b4:df:b6:de:ad:05:63:24:35:30:fa:60:b9:ed:ba:00:71:e5:
1a:73:6c:7d:a7:23:f9:3a:7e:9e:3e:77:c6:46:5c:94:3e:ac:
03:97:98:13:48:3e:e8:f8:14:30:34:e6:16:69:1c:66:ae:4f:
ab:31:13:4d:70:d8:ce:8c:47:b8:75:1f:1c:51:6f:10:d4:b6:
5b:d4:a2:14:3d:06:78:f7:f1:3f:93:bf:cc:3f:da:65:51:be:
2a:bc:48:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:46:55 2025 by rpki-client