Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: QtweHJTSQf9/avsTCAPaWYLtnqypJ0ieAM/hkTSY8Sg=
Subject key identifier: 3E:CB:4A:05:3E:19:19:E6:10:CB:15:E3:A4:63:58:63:38:D2:44:6C
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 019774F796B6C70CBE737956102C7FBD1452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 095A
Signing time: Sun 15 Jun 2025 19:01:12 +0000
Manifest this update: Sun 15 Jun 2025 19:01:12 +0000
Manifest next update: Mon 16 Jun 2025 19:01:12 +0000
Files and hashes: 1: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: umRliRGS2IbD+MMULnH7GTKirWnEaZxk5SdlZ9g+apo=)
2: sq5AEY7QJIys2vGMgSgXE7FeRjY.roa (hash: aCGTeZMaEctcz9l1gB+wzw0eDWMxaeU9DQux69bQvFE=)
3: uDBXK8T_CYBhR7j4qUX3KNaOzNA.roa (hash: l69OGXgxbADqBf3n8PsE9PC3wGQv9qukdYrOEUN64Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:96:b6:c7:0c:be:73:79:56:10:2c:7f:bd:14:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Jun 15 19:01:12 2025 GMT
Not After : Jun 16 19:01:12 2025 GMT
Subject: CN=3ecb4a053e1919e610cb15e3a463586338d2446c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:42:9c:e4:17:fa:59:9e:c1:ea:f3:32:ce:
45:2a:09:ab:02:51:81:a6:15:d3:37:95:79:3c:59:
7f:2b:9c:2d:df:d2:0e:3d:d1:08:89:c8:3d:4e:61:
a0:b1:06:e7:23:b0:4c:4d:5a:e1:9e:7d:25:92:51:
92:52:44:f8:f3:99:90:a4:87:2b:99:09:62:02:e7:
84:9b:3d:7f:db:75:8d:94:2e:55:9d:38:04:7e:b2:
99:20:6e:10:51:55:76:6f:a5:73:c6:bc:6a:e2:01:
6a:6c:44:d2:08:a3:c4:3a:30:1f:23:31:1b:1f:4c:
bc:77:a7:9b:92:ef:2a:74:9e:07:fa:48:f4:82:63:
fc:52:61:cf:29:0f:54:aa:a3:4a:35:30:83:56:35:
5c:5e:3d:96:ad:55:c1:e8:4d:4b:60:1c:e6:97:15:
4a:b9:72:2f:d5:27:07:ad:05:f4:c9:66:be:8e:aa:
74:bf:e0:bc:e6:23:6e:ba:0b:2d:5e:2a:0f:31:1b:
c5:04:8e:46:e8:74:fb:3c:d5:2a:b1:e0:d9:11:c4:
3c:82:dd:d2:5a:d6:ff:5d:0b:5f:f9:8d:f9:20:13:
fa:84:0b:85:1d:7d:2e:d0:53:72:6e:a7:42:86:f2:
09:ca:a7:10:8e:da:e9:ab:39:55:73:de:6f:0a:26:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CB:4A:05:3E:19:19:E6:10:CB:15:E3:A4:63:58:63:38:D2:44:6C
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:af:1c:0d:b7:da:19:61:21:56:9e:cf:74:1b:92:5a:90:b2:
4b:d6:d8:db:76:24:43:f3:42:43:35:b4:2d:9d:a3:62:74:2e:
e9:52:65:e2:17:dc:14:92:29:96:9f:75:90:15:93:eb:99:8c:
a9:ec:e6:52:78:6f:13:e5:b3:ba:2d:92:ae:38:fa:b1:b5:46:
3f:30:39:22:e1:d3:a0:91:84:1d:97:7b:c0:d9:1d:50:5e:65:
cc:0f:1a:dd:00:cd:6c:c7:12:01:41:02:2e:b7:41:2f:20:cb:
73:46:a6:39:46:b0:fc:1d:a8:47:38:05:82:71:e4:73:94:ce:
d5:fd:46:58:51:c7:d2:ae:54:84:b1:e4:5f:d8:1e:76:9c:ac:
fa:d6:35:05:bc:fd:79:76:3d:61:74:63:39:23:41:9f:df:27:
6a:5a:82:b3:80:f2:c0:27:db:2e:e0:7a:c5:b1:40:c0:d7:90:
34:e7:35:60:dd:12:3d:6c:66:93:c8:ee:2b:4b:03:e9:ef:28:
64:25:88:a9:9c:0b:95:d5:2b:0f:a4:d2:4f:4a:22:db:30:92:
fd:e5:1e:c5:ad:66:b8:ee:72:a9:dd:42:8f:b1:7d:74:bd:82:
79:d7:6a:40:e0:b2:96:5a:a8:1a:b5:2d:3d:58:fa:23:a5:54:
6b:11:a5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:25:25 2025 by rpki-client