Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: /rOdBqT4HMrk83lK9IbTqgXFKAcXMVWBq3dQ5GZxxtU=
Subject key identifier: 4C:70:66:B9:27:0A:9E:8A:B4:E9:00:17:18:F5:D0:E7:A0:C9:7C:D7
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 0198854353DFB2FA48EF3886FC6CF252C613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 1626
Signing time: Thu 07 Aug 2025 16:00:38 +0000
Manifest this update: Thu 07 Aug 2025 16:00:38 +0000
Manifest next update: Fri 08 Aug 2025 16:00:38 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: /HAq9BpJLQ2JvbFOhiexf49a4YZSMqUeporQMcyNIb8=)
2: aGUQW-NVaHMBg-4QWkhklY8KGK0.roa (hash: bPMaS2I+pHesJBg7bFG+Rdvd7OKl0tnIQrQv2QCj1ts=)
3: fwxt0QHyh3ttD260VFCya7TU-1s.roa (hash: 9i1HvobHCHHVWkd92tpYtwhAF4c8uqpeWhFp9/w1WdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:53:df:b2:fa:48:ef:38:86:fc:6c:f2:52:c6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Aug 7 16:00:38 2025 GMT
Not After : Aug 8 16:00:38 2025 GMT
Subject: CN=4c7066b9270a9e8ab4e9001718f5d0e7a0c97cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:f9:16:fb:e5:9c:83:f8:5d:17:6b:a5:6f:
62:8e:09:f0:19:a3:5d:a2:f0:91:a8:f7:4b:11:a9:
a3:0e:66:1f:1b:fc:45:cd:da:fb:bb:2b:4d:fc:9d:
ea:d0:1d:bf:ec:e1:21:50:30:d9:e9:3d:a4:e8:71:
2f:16:c4:11:3f:57:00:ed:8a:94:a0:10:aa:e1:69:
02:8f:dd:6a:99:57:fc:0f:86:22:c3:1f:82:d1:b8:
ac:9e:79:10:f8:62:2c:01:39:62:14:29:e7:ae:25:
e0:f1:60:f0:df:32:04:f5:0d:ea:c9:d2:71:ac:fd:
9f:95:43:15:20:0c:6a:f6:08:91:bb:90:a1:a0:11:
dc:d3:bd:ad:4f:98:0a:c4:34:20:93:ad:9b:6c:ce:
86:ee:73:da:55:3a:4b:56:6e:7e:2b:9e:44:c9:eb:
29:af:a4:f9:58:72:a8:b6:74:8f:87:a9:7c:ce:76:
a1:a8:b4:df:d7:a7:5e:36:c6:08:43:ff:d3:5c:74:
6c:18:f5:95:c0:b8:6a:6e:d5:cd:de:43:3e:9b:bd:
be:6e:59:6e:ab:fa:5a:77:c1:78:e8:6a:70:0e:84:
fc:06:eb:62:cc:99:8b:e0:98:66:b4:b3:ca:b2:f9:
a8:92:bb:54:cf:c5:da:97:67:5a:90:a0:6f:d7:0b:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:70:66:B9:27:0A:9E:8A:B4:E9:00:17:18:F5:D0:E7:A0:C9:7C:D7
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6b:f4:ef:8d:15:f2:24:92:b6:2b:c2:36:5b:2d:ae:f8:1d:
b8:d0:85:3c:6b:8c:68:fa:b7:26:fa:8b:06:77:0b:aa:30:06:
c3:a6:40:34:eb:60:bc:43:c1:6f:9b:c6:e9:6d:dd:93:a1:c1:
40:00:52:d6:b3:ad:c5:b2:0b:23:b3:9a:6a:8b:60:02:47:a2:
bc:71:13:7c:41:ec:65:97:28:e8:eb:7d:17:07:c3:39:30:19:
74:02:82:78:71:5f:20:08:fa:34:6b:cb:88:63:a0:63:c0:aa:
4f:6d:52:eb:c5:6b:03:ca:37:1f:15:bd:b6:95:30:9f:e6:9c:
96:37:8e:de:85:1e:c9:33:d3:a9:6f:80:9a:ec:6e:bf:97:7f:
51:74:a2:80:94:cb:b9:41:2c:65:e7:f5:1a:d3:17:0b:5e:71:
b3:d1:36:5d:ed:b9:4a:c7:14:21:8c:f5:5a:6f:69:ab:c0:c2:
81:7b:d1:c0:8e:46:da:c3:83:91:75:1d:62:a0:ab:c7:fe:8b:
70:4d:55:43:18:3c:ce:4f:c9:2a:e2:46:aa:9b:f1:16:71:5b:
98:99:29:30:9b:35:df:00:01:a3:0b:2b:5e:3c:2f:f1:2e:07:
4d:f2:9f:5f:57:fe:73:ec:b3:7d:bf:4e:76:98:45:36:90:29:
08:f9:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:37:15 2025 by rpki-client