Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File: UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier: hl9riT38xLO2B34dMk+iuKkXcaUk0YJO31WGqqv7gXA=
Subject key identifier: D8:88:4B:B7:46:80:09:A8:E6:8D:20:4A:4F:89:2D:A1:96:11:AA:63
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial: 01976F63010082695A95DFE5A5C060649CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number: 145A
Signing time: Sat 14 Jun 2025 17:00:48 +0000
Manifest this update: Sat 14 Jun 2025 17:00:48 +0000
Manifest next update: Sun 15 Jun 2025 17:00:48 +0000
Files and hashes: 1: 0fnHFCseCp-dowzjSO_W0ajo1TU.roa (hash: 6EWDnuvDaw8wNIkQ3MlMpyUilwRHG1UBmr10Bi9Kodc=)
2: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: LVwVzVhjD0ubN59ah+Znnly1A4D1bivTsTwLpwUqdqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:01:00:82:69:5a:95:df:e5:a5:c0:60:64:9c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Validity
Not Before: Jun 14 17:00:48 2025 GMT
Not After : Jun 15 17:00:48 2025 GMT
Subject: CN=d8884bb7468009a8e68d204a4f892da19611aa63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:13:b9:a3:53:df:27:36:1a:67:24:03:44:
89:4f:21:46:84:48:23:df:a7:fb:69:74:cb:82:d5:
82:45:2e:a7:7a:51:7f:7b:aa:7d:8e:e3:a5:6e:ea:
51:57:dd:fe:33:5c:63:e8:d9:4a:5b:f4:d1:9d:97:
bf:1e:06:46:f7:8a:33:05:c4:27:a1:a6:72:98:7c:
f9:5c:9f:ef:81:ec:34:38:34:cc:9b:9c:90:9f:40:
90:db:f5:4c:42:ab:9c:1f:e0:8b:9e:16:83:cd:50:
a0:32:f5:9d:08:02:80:dd:0e:58:5a:2f:f7:17:98:
55:b4:b0:d7:b3:e8:07:e0:09:18:03:9c:f7:b7:20:
3e:23:cb:1d:92:20:65:00:3b:9b:2f:30:3e:23:47:
1e:c2:f8:3f:d6:e2:b6:b5:db:10:30:fd:22:8a:d5:
64:1b:ed:50:03:a1:35:4c:6a:f4:41:9e:9b:9b:cd:
97:06:ee:74:87:15:65:9a:ef:d9:ed:01:0f:9d:cd:
d4:b9:fb:90:a1:7c:5b:51:73:19:d9:80:4c:a1:6a:
20:52:b9:1f:1f:6b:a4:8a:6a:e3:3d:ab:df:0b:19:
99:5c:6f:ca:be:e3:da:29:ee:68:07:cf:06:2e:04:
5e:2c:86:da:93:ec:4d:84:7c:fb:bb:80:2e:72:f1:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:4B:B7:46:80:09:A8:E6:8D:20:4A:4F:89:2D:A1:96:11:AA:63
X509v3 Authority Key Identifier:
keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c5:d8:37:38:4e:ec:43:aa:aa:91:f3:d0:52:e3:33:4c:c4:
45:57:c3:07:a6:42:b9:d3:d6:dd:45:f3:51:10:20:e8:60:98:
f2:8f:4d:08:4a:af:36:10:11:ae:e2:e4:cb:75:e1:17:26:7a:
48:c7:05:56:45:14:12:70:67:44:09:5e:f1:6f:ce:3a:77:b4:
26:da:9d:7c:2b:60:20:a6:96:77:39:12:8c:8b:3e:e4:8f:25:
d1:74:d4:22:95:43:cf:fe:c3:4f:0b:ce:30:25:71:cb:ce:49:
b7:f1:1a:b2:f1:60:ab:b1:8d:a7:cb:c4:1e:f7:f2:89:9e:eb:
cc:31:db:4e:a1:8e:a4:5e:88:64:6e:a9:11:dc:36:ca:a9:67:
8a:1c:f7:6e:ac:9e:e6:1e:dc:f2:39:dc:2b:e3:52:b4:16:ec:
5d:2f:b7:ad:99:2a:01:1a:7a:f2:00:1e:15:4c:c6:ea:e3:d3:
c9:02:f5:56:d2:98:a5:b1:0d:8f:3e:88:62:9e:cb:49:dd:b7:
2b:49:5e:60:e8:1a:f9:92:53:35:80:51:f6:89:4f:ad:2d:13:
2f:db:5b:d8:d9:75:1a:ef:57:be:9c:8e:fa:44:1b:ec:25:73:
8c:7f:c2:9c:c9:97:80:45:be:93:45:43:f2:ba:3e:84:a2:ce:
e8:64:af:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:07:04 2025 by rpki-client