Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: PlhDaMvNoUp80UtojnpO5eu9ew7vShAN1SG6osIBZ3c=
Subject key identifier: 5D:BC:5B:0E:AA:CD:B9:F6:1A:0B:64:1B:AB:DA:98:54:CD:09:93:CD
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 01976D067713F704437FC439834ACCDBFE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 06:00:29 +0000
Manifest this update: Sat 14 Jun 2025 06:00:29 +0000
Manifest next update: Sun 15 Jun 2025 06:00:29 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: QdEAeAQ0pkDR/QkxS3nAyfg/Cvm3W/+xQofcomKCkO8=)
2: aGUQW-NVaHMBg-4QWkhklY8KGK0.roa (hash: bPMaS2I+pHesJBg7bFG+Rdvd7OKl0tnIQrQv2QCj1ts=)
3: fwxt0QHyh3ttD260VFCya7TU-1s.roa (hash: 9i1HvobHCHHVWkd92tpYtwhAF4c8uqpeWhFp9/w1WdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:77:13:f7:04:43:7f:c4:39:83:4a:cc:db:fe:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Jun 14 06:00:29 2025 GMT
Not After : Jun 15 06:00:29 2025 GMT
Subject: CN=5dbc5b0eaacdb9f61a0b641babda9854cd0993cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b7:0a:4d:63:c4:6f:75:f9:42:48:4c:d6:f3:
b5:ae:68:1e:d1:b5:b7:bd:90:45:42:13:a6:3d:0a:
4d:0d:29:64:08:8b:6b:ba:cf:d5:3b:35:4a:7f:83:
16:cb:6e:51:36:23:ab:a7:7d:a0:7f:e1:e0:14:5d:
db:14:01:d6:18:f9:7b:a4:49:14:02:96:61:8c:8b:
93:c5:a4:88:15:14:5d:91:6c:63:6f:25:88:0b:85:
b1:71:f1:03:6f:05:0e:60:47:38:79:61:dd:04:ec:
81:99:19:e1:76:0c:76:c9:b0:fa:44:51:7d:cc:c1:
ad:e7:5e:b4:20:c3:4a:01:75:2a:71:52:82:74:73:
5e:ce:15:a9:1e:48:9a:67:d8:58:f9:1e:65:e1:dd:
87:66:b8:83:33:02:db:cf:3c:8b:b8:52:69:dd:9f:
18:cf:9e:4d:54:ad:29:9f:cf:64:56:1e:62:1e:94:
51:b7:0c:9a:8d:81:12:bd:c7:4a:9d:69:8c:94:4c:
a9:bf:77:37:bb:65:14:5b:96:bb:61:d9:27:cf:28:
2c:d0:3f:c8:33:01:f0:94:e5:c4:76:fe:fd:b5:fc:
dd:03:93:eb:3b:78:56:a4:7a:49:e2:2e:4f:03:d5:
13:68:2c:11:98:89:d9:9c:1c:e0:64:88:05:bd:52:
1e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BC:5B:0E:AA:CD:B9:F6:1A:0B:64:1B:AB:DA:98:54:CD:09:93:CD
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:18:84:49:ed:54:23:48:25:79:3f:a1:39:ba:57:d5:80:23:
5b:22:a3:9f:4d:2e:65:5d:7e:4d:3b:52:a4:19:7d:3f:a1:60:
ed:09:cf:e3:8d:1c:98:49:c7:ff:22:12:08:ce:b9:53:86:fe:
10:1c:be:41:89:5d:30:58:12:15:82:a2:2d:d5:68:48:6f:d0:
79:23:f3:4b:22:79:e2:4a:4e:8f:7f:7a:08:3e:42:55:73:13:
91:c7:41:19:92:68:1f:9f:0b:d4:4d:ee:97:86:f0:64:07:82:
d1:49:ca:9b:88:2b:12:6a:65:1b:72:0d:08:04:88:be:70:5d:
72:0a:7c:73:08:ca:66:29:fb:91:de:23:0c:25:13:68:e4:50:
d7:fe:77:0b:42:5d:26:e0:b3:f8:a4:34:ac:55:54:bf:e4:af:
2a:8f:d3:e5:02:a4:34:8a:47:6c:db:31:d7:ce:39:5e:b1:c3:
fa:58:d1:16:01:aa:00:e7:d1:3a:ce:3b:aa:7a:61:b8:e0:35:
04:fb:f2:15:43:2d:12:3c:a5:94:1f:e7:9e:da:43:97:35:2c:
44:c6:63:d4:c0:cc:81:15:38:42:2a:85:32:dc:d0:c0:ce:83:
1f:47:8c:e1:4f:76:85:e0:07:83:20:37:a1:c3:8d:18:17:fc:
5b:61:bd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:37 2025 by rpki-client