
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: fbHHwZgcbwcAfnpDUUtxPPRlj0yR5VKwgofDTdkWKoY=
Subject key identifier: 00:D4:5C:D9:9A:F6:1B:F9:30:95:D1:E6:79:B5:4C:F3:1C:B0:49:0C
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 01976EF551B1CD2CB5EDB144E0B0CFEA3D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 11B7
Signing time: Sat 14 Jun 2025 15:01:00 +0000
Manifest this update: Sat 14 Jun 2025 15:01:00 +0000
Manifest next update: Sun 15 Jun 2025 15:01:00 +0000
Files and hashes: 1: E_VTiATzUgc2DhxvquhHUq4XjMM.roa (hash: QY5XIJ7ljEf/JGfsfFT7Yois/7EOyZU9vkUnS75efNE=)
2: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: LTBibNboPDzTNVcyyBYVjnXPLBx6Fq62AVpGwIoN9CQ=)
3: wCetPnuHXvivZcvg-nB5WG2XhQ4.roa (hash: 4Yh74lr3J9wyGwv+2vpPjVGwW6ZzDVQ5vG1BmfHb1Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:51:b1:cd:2c:b5:ed:b1:44:e0:b0:cf:ea:3d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jun 14 15:01:00 2025 GMT
Not After : Jun 15 15:01:00 2025 GMT
Subject: CN=00d45cd99af61bf93095d1e679b54cf31cb0490c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:77:61:e1:e0:82:7a:a0:7b:b8:3b:1c:fe:
49:6a:28:2e:ff:20:b1:b9:84:ef:ef:9f:08:83:df:
b0:8c:44:c5:83:92:e4:01:5c:51:ac:4d:1f:61:9a:
3c:c2:fc:09:76:11:5e:b9:8f:2d:94:ea:13:fb:e3:
50:10:1a:aa:c2:46:2a:d9:2f:9b:c1:24:c9:41:6b:
ec:ec:92:15:07:19:42:74:d3:7b:5d:91:1b:8e:29:
04:09:2d:5b:92:6a:c9:5b:e1:d8:9a:5c:f5:59:cc:
fb:8c:ab:c6:76:b7:1e:a5:f5:15:60:5a:d2:61:af:
9e:27:47:b9:2d:f3:73:ff:f7:ee:16:07:a4:ae:c5:
b5:5c:15:d3:e3:9a:20:b8:5b:b5:7d:a5:1f:0f:31:
67:d6:f9:1d:3f:77:67:99:2c:1b:28:38:94:b2:d5:
f9:c1:47:8d:dc:45:e3:da:d6:99:73:8b:a7:6f:90:
49:26:11:26:cc:6c:40:c7:50:52:85:b0:28:d7:01:
1c:00:e5:42:36:42:fc:79:9e:07:04:5b:2e:5f:26:
95:78:86:99:b7:58:20:1b:a9:6f:d2:13:68:9a:5a:
ef:c0:7c:95:7f:ac:17:b2:ae:33:45:b8:6c:b4:5c:
9b:64:ee:ee:3d:fb:3b:6c:32:c1:97:a1:6c:bb:06:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D4:5C:D9:9A:F6:1B:F9:30:95:D1:E6:79:B5:4C:F3:1C:B0:49:0C
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:af:11:88:6a:f1:58:df:89:77:b8:37:91:57:91:11:ee:86:
9c:2c:3b:82:4a:0a:9f:07:c4:14:07:ab:2c:14:e2:92:3c:ca:
bf:b0:f6:6a:9e:e9:b1:f5:87:a3:a9:43:84:39:75:e0:b7:8d:
c7:88:52:a6:bc:1a:15:5e:69:02:0b:fa:62:de:8b:a5:2b:b9:
af:58:6d:a0:2c:73:a9:00:fd:b2:f3:c2:ea:9a:5d:11:88:b9:
8c:3d:77:f0:bd:5e:ac:a4:ab:38:bd:89:02:b6:24:3e:e3:56:
e6:9d:db:54:34:13:fc:bd:4e:20:0e:fd:3e:53:58:a8:7a:05:
74:f5:c1:ce:1b:0b:a3:32:c9:2a:a4:b8:6a:28:31:1e:e4:83:
01:88:53:c9:14:4e:aa:af:6a:b8:b2:c1:2b:a0:23:b4:21:ca:
2e:a0:b4:da:4b:e1:f1:86:bf:bb:6f:78:23:2f:df:df:aa:f4:
bb:3d:e0:7c:15:18:03:f9:f0:65:70:44:cc:90:a1:9b:09:e7:
f8:bb:2d:4e:17:2c:2f:80:3d:1f:a8:c7:87:d7:18:f8:dd:94:
a5:11:61:92:71:98:3a:e4:74:e0:de:c6:bf:67:4a:46:04:fa:
89:10:59:21:a2:78:35:44:61:4b:c4:f1:c9:dd:15:cf:8d:35:
b0:b0:05:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9VGxzSy17bFE4LDP6j0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTQyZmJhMGMxN2I0MzkxZTMyOTZjNDM0YjVmZmYyM2E4
MjliNmUwHhcNMjUwNjE0MTUwMTAwWhcNMjUwNjE1MTUwMTAwWjAzMTEwLwYDVQQD
EygwMGQ0NWNkOTlhZjYxYmY5MzA5NWQxZTY3OWI1NGNmMzFjYjA0OTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jh3YeHggnqge7g7HP5Jaigu/yCx
uYTv758Ig9+wjETFg5LkAVxRrE0fYZo8wvwJdhFeuY8tlOoT++NQEBqqwkYq2S+b
wSTJQWvs7JIVBxlCdNN7XZEbjikECS1bkmrJW+HYmlz1Wcz7jKvGdrcepfUVYFrS
Ya+eJ0e5LfNz//fuFgekrsW1XBXT45oguFu1faUfDzFn1vkdP3dnmSwbKDiUstX5
wUeN3EXj2taZc4unb5BJJhEmzGxAx1BShbAo1wEcAOVCNkL8eZ4HBFsuXyaVeIaZ
t1ggG6lv0hNomlrvwHyVf6wXsq4zRbhstFybZO7uPfs7bDLBl6FsuwYxpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADUXNma9hv5MJXR5nm1TPMcsEkMMB8GA1UdIwQY
MBaAFFBUL7oMF7Q5HjKWxDS1//I6gptuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgt
NWU5Nzg3YjZhZWFhLzEvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgtNWU5Nzg3YjZhZWFh
LzEvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWq8RiGrx
WN+Jd7g3kVeREe6GnCw7gkoKnwfEFAerLBTikjzKv7D2ap7psfWHo6lDhDl14LeN
x4hSprwaFV5pAgv6Yt6LpSu5r1htoCxzqQD9svPC6ppdEYi5jD138L1erKSrOL2J
ArYkPuNW5p3bVDQT/L1OIA79PlNYqHoFdPXBzhsLozLJKqS4aigxHuSDAYhTyRRO
qq9quLLBK6AjtCHKLqC02kvh8Ya/u294Iy/f36r0uz3gfBUYA/nwZXBEzJChmwnn
+LstThcsL4A9H6jHh9cY+N2UpRFhknGYOuR04N7Gv2dKRgT6iRBZIaJ4NURhS8Tx
yd0Vz401sLAFPA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:07:21 2025 by rpki-client