Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
File: UA2xcVBSJTv1I_FAufVjehHV6a8.mft (raw, json)
Hash identifier: fbyT9PtZ/dwh21p0mKdJ34I+Ah/dOAxbaVhNtaABUuk=
Subject key identifier: 67:FD:06:24:C0:E7:B6:BD:72:92:A2:66:84:A8:C8:68:34:66:23:9F
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Certificate issuer: /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial: 01976EF50FF958899C94AA30BD1F13E12E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 15:00:43 +0000
Manifest this update: Sat 14 Jun 2025 15:00:43 +0000
Manifest next update: Sun 15 Jun 2025 15:00:43 +0000
Files and hashes: 1: CYNP6vN-qElEU6kqxQQrlgtjw0E.roa (hash: 50zm/kAB1hENUbgpvzJQwq1lkvUVeWylyOULFWpoN/I=)
2: UA2xcVBSJTv1I_FAufVjehHV6a8.crl (hash: XNfXu77oJRJpZQRjbjmhiERe3OvQ3QPj6yetkup29Mo=)
3: pSWgXuERRm1Au1teAh3DmpY14k0.roa (hash: EnWqTAmFjlN0INK78CFEhUf7qBxCnt1KXQVV4wR/100=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:0f:f9:58:89:9c:94:aa:30:bd:1f:13:e1:2e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
Validity
Not Before: Jun 14 15:00:43 2025 GMT
Not After : Jun 15 15:00:43 2025 GMT
Subject: CN=67fd0624c0e7b6bd7292a26684a8c8683466239f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:5b:dd:9b:d7:a3:d2:b5:91:62:90:d2:f2:
0d:34:d7:49:cc:a4:85:24:84:27:ef:62:b0:d0:dc:
e9:be:5d:ed:b4:45:52:17:16:23:ed:38:10:ed:09:
a8:00:25:f9:07:72:bf:32:bf:43:04:94:6a:cd:d6:
d7:e6:0e:f8:62:d4:64:1f:ab:f9:b0:53:89:e8:4f:
d0:3c:ba:4a:cb:44:c1:b9:95:5f:9e:7d:6d:42:a5:
4e:3f:12:5d:62:24:0d:14:db:2b:93:fc:51:48:18:
25:08:fd:10:b9:3b:1d:4e:d5:ef:66:cc:d0:1f:b4:
a2:16:67:48:19:f4:42:e9:b5:75:a3:25:4d:9d:6f:
39:3e:30:2f:84:c9:29:69:cb:55:11:13:eb:32:5e:
83:03:4b:12:6a:fe:a1:94:ed:4c:fc:fc:56:88:bc:
6e:a4:8d:7b:32:5e:fc:13:79:7d:3d:e8:b3:03:cf:
61:50:0a:8b:80:93:aa:3a:9c:84:4c:3e:84:99:4a:
db:99:ad:f4:5b:81:96:d2:44:5a:29:29:9c:dc:5f:
dc:df:20:d8:c6:1d:59:db:d4:54:86:7f:a1:02:d5:
6b:e1:e3:9d:84:57:6e:cf:57:4c:64:b3:54:ac:e6:
5f:2f:32:f5:77:8b:9f:0a:36:d8:79:63:0b:85:11:
2a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FD:06:24:C0:E7:B6:BD:72:92:A2:66:84:A8:C8:68:34:66:23:9F
X509v3 Authority Key Identifier:
keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:94:87:4c:0e:d7:c5:8b:59:15:ef:07:84:97:7d:fa:85:12:
d5:5a:31:23:91:4d:74:21:69:4e:ac:3b:81:30:04:b4:b0:ea:
e3:b6:9a:39:8e:82:9b:a3:88:54:87:54:dd:2a:28:f1:36:e2:
09:ae:89:a9:59:2f:47:f3:87:de:ef:f8:fa:7b:f6:12:bf:bc:
63:f7:5d:0a:0d:ea:3a:3f:1c:81:f3:66:64:73:78:c9:55:e6:
23:c2:a5:18:a1:ea:11:91:7d:43:36:58:b8:b8:f2:ec:70:7c:
aa:14:89:02:a3:a3:fa:c2:44:3d:73:da:19:41:da:12:27:13:
70:b3:c7:6c:c1:11:44:13:4d:8d:12:1e:d0:5d:6a:87:ec:53:
a8:ad:0c:3f:08:c8:57:b1:76:1b:19:33:ea:f0:f0:01:13:04:
36:8c:6b:8b:cb:d1:82:14:e8:c5:ac:b4:d1:d3:31:17:d6:40:
3e:b2:e6:44:93:a9:ed:cc:29:2d:16:4b:54:68:08:e5:53:ad:
d5:86:4d:b3:c8:f1:28:01:f5:e1:e6:04:f6:5d:b8:b0:84:22:
8a:79:e7:a9:6d:89:2a:c8:82:95:e9:90:fb:fb:cc:65:bf:2d:
41:d2:03:c3:db:07:ec:33:a5:b0:f6:fd:9e:8b:71:42:fa:75:
1e:83:04:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:48 2025 by rpki-client