Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File: UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier: HBWwymVD+2E2gMQwEjiINpUIGU+qnd4yJMISzQp1wDA=
Subject key identifier: A7:6D:40:54:3A:05:53:12:45:F7:8A:CB:58:4A:78:67:0B:5B:FE:1D
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 01976A05FFE7EBE9A7D3A35BF190CBA207D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number: 14DF
Signing time: Fri 13 Jun 2025 16:01:07 +0000
Manifest this update: Fri 13 Jun 2025 16:01:07 +0000
Manifest next update: Sat 14 Jun 2025 16:01:07 +0000
Files and hashes: 1: FEtsoc8GhVwS-itqE7wFwW_E2l0.roa (hash: wzhGlUkDAVqaCjdqlX0sPOVL6b9f0X/6vMu8NbyqVQo=)
2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: GFuyzY5gSJYA4bOQEblwsxBIdMAP4TBH7ZlXFM3sZCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:ff:e7:eb:e9:a7:d3:a3:5b:f1:90:cb:a2:07:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Jun 13 16:01:07 2025 GMT
Not After : Jun 14 16:01:07 2025 GMT
Subject: CN=a76d40543a05531245f78acb584a78670b5bfe1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:e5:24:0f:0a:75:25:94:df:89:31:fe:b3:
d7:3f:87:57:93:81:ff:60:30:fa:ed:19:3a:5a:ac:
0b:15:8a:bd:3d:60:d8:95:52:23:1f:a8:f0:6d:ac:
b4:f7:39:9c:46:f7:ba:f0:09:2b:1d:0d:2c:61:65:
8b:35:1c:3a:08:08:8a:da:b5:7c:b2:1d:a8:b9:fb:
09:50:35:0d:7e:b8:80:27:ad:e1:0c:91:82:3b:17:
b5:e6:aa:48:41:2b:37:79:9f:49:8c:d4:71:a7:57:
da:a1:07:a9:c2:10:6c:67:d4:af:6c:09:23:61:ed:
c0:18:62:a8:94:b1:3b:c0:75:93:3d:15:6b:c9:02:
4f:14:be:30:3e:66:76:5b:c2:86:d9:3d:a5:1d:bc:
72:06:d4:4a:5b:7e:c4:f4:78:de:c2:ae:1b:f3:47:
18:3d:a0:e6:4d:16:d7:91:6d:78:f3:28:16:70:62:
05:7b:4f:15:d8:ef:1c:0c:81:5c:39:0b:74:af:f8:
19:97:fd:b3:ab:61:05:f9:09:13:43:54:ed:38:70:
b4:36:ef:d4:78:90:7c:32:0d:2e:0d:2e:02:c8:bb:
40:8a:b6:68:d1:e4:39:20:b3:1a:3b:68:aa:2a:58:
47:5b:67:7c:fd:c3:d7:bf:4d:85:ce:8d:51:20:63:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6D:40:54:3A:05:53:12:45:F7:8A:CB:58:4A:78:67:0B:5B:FE:1D
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:66:73:b2:9e:92:f0:96:cb:75:6b:77:33:5a:df:7f:77:b7:
6b:ba:8c:ff:c9:f2:fb:da:87:f4:ce:fe:14:4a:94:f2:15:6d:
58:67:ff:82:91:79:b1:19:d8:7a:e2:fa:06:cd:85:95:cc:ca:
ba:40:bc:80:3f:78:63:02:ab:3b:85:77:67:e7:62:af:26:cb:
1e:fe:47:bc:3e:4a:d5:78:91:20:db:ea:1b:4e:5a:66:25:5f:
60:a8:82:7c:9d:64:02:09:8f:d1:58:33:7e:78:3c:c6:c5:f3:
b3:4e:f1:31:b5:dc:cb:2d:45:84:ec:ef:d5:74:54:cd:cb:fc:
29:2d:30:f5:f1:56:de:be:a5:5e:9e:57:7c:58:a6:b4:29:a3:
28:56:21:30:92:02:7d:3b:70:2d:e6:e1:d9:0c:5a:9d:a6:37:
b1:7f:39:8f:b7:90:fa:88:7c:c6:99:5d:ac:18:93:57:e1:74:
6c:ed:ff:f2:18:04:d5:31:7d:79:df:3b:76:be:82:ad:8b:e6:
ae:76:88:53:0a:7c:1d:db:eb:9a:d9:8a:9b:75:f3:61:3b:06:
5f:bd:a0:58:eb:10:c5:ac:66:1d:31:db:bb:df:3b:0f:13:d8:
02:08:84:41:85:cd:ea:c1:d1:f3:34:a1:29:11:c1:81:e8:39:
9d:fe:be:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:58:48 2025 by rpki-client