Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
File: UKiPmoNBAa34dwN6UcgdEzqpRuw.mft (raw, json)
Hash identifier: EpDKHlmZBsod4omrX5WFZD49+hQCo2lZv3bJ2eWPQY8=
Subject key identifier: 32:4E:72:8C:B8:9B:DD:74:26:CA:71:6A:D1:E4:08:40:B1:CE:1B:83
Authority key identifier: 50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
Certificate issuer: /CN=50a88f9a834101adf877037a51c81d133aa946ec
Certificate serial: 01976EF53CDE6D265E1DCDC9BEC152489739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
Manifest number: 0D1B
Signing time: Sat 14 Jun 2025 15:00:54 +0000
Manifest this update: Sat 14 Jun 2025 15:00:54 +0000
Manifest next update: Sun 15 Jun 2025 15:00:54 +0000
Files and hashes: 1: UKiPmoNBAa34dwN6UcgdEzqpRuw.crl (hash: 1JdMfYyPJfRTUfnZedyQaFZbdtw957Hov+M3YXFHfIg=)
2: kc-RSMe4Oew5F8NEK8PnK5Ztook.roa (hash: RrPN8D12kwMiREonpEUwGrZPp2WKXYrir6fymPU5Gvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:3c:de:6d:26:5e:1d:cd:c9:be:c1:52:48:97:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a88f9a834101adf877037a51c81d133aa946ec
Validity
Not Before: Jun 14 15:00:54 2025 GMT
Not After : Jun 15 15:00:54 2025 GMT
Subject: CN=324e728cb89bdd7426ca716ad1e40840b1ce1b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:51:1c:9c:55:ec:a8:7b:24:8c:ea:f7:f9:
0a:44:d1:25:36:48:f3:4e:8d:86:69:07:f4:3a:5e:
16:9d:1b:10:d8:7e:e2:aa:cb:0b:24:fb:5d:66:8e:
b4:b6:cb:12:cf:a8:98:ed:de:e0:e1:52:b5:cf:59:
3d:6f:7e:4d:73:30:94:1d:58:f0:dd:16:51:e5:b6:
31:99:36:5a:f5:10:b4:85:a8:bf:ed:3d:68:43:aa:
3f:4a:73:50:60:b5:1b:97:19:a6:23:be:52:f6:72:
df:d1:38:61:3b:8d:cc:38:bd:c4:55:58:50:54:54:
d6:fc:e3:44:76:8e:b3:aa:cf:37:31:4c:30:39:75:
8b:7c:77:52:7a:f1:aa:44:0a:a1:88:b2:75:a7:ab:
1f:51:65:93:57:35:7a:85:b6:01:7b:6a:cb:2d:c1:
5c:44:08:c0:e9:eb:6d:69:5b:6a:9f:83:f1:27:1b:
3c:a8:76:6b:8c:79:53:6d:49:ff:23:1f:74:2e:53:
15:90:01:c4:0d:d0:5d:62:1f:15:81:db:cd:e1:85:
38:42:f5:5f:2a:76:2b:67:1c:7f:ed:dd:fa:81:1e:
0a:72:d5:4f:c3:f2:d2:58:7d:9d:77:d0:46:06:0a:
28:6d:51:08:ba:2a:dd:17:e9:27:36:86:03:24:ad:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4E:72:8C:B8:9B:DD:74:26:CA:71:6A:D1:E4:08:40:B1:CE:1B:83
X509v3 Authority Key Identifier:
keyid:50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:20:a1:36:44:1e:50:79:91:70:28:fe:e8:20:85:16:14:d5:
da:fd:06:22:a2:92:83:62:9a:e0:5d:0c:1d:f6:9b:52:73:e2:
53:26:2b:5f:71:34:e4:79:b2:83:a9:32:58:e0:4c:cd:60:76:
05:85:85:e2:ca:fe:cd:4b:bf:7b:df:34:d9:b5:fb:62:10:2f:
08:b7:61:94:02:ec:28:53:ac:09:ba:34:70:0d:aa:cb:f9:b7:
6a:43:c4:9a:dd:e9:e2:17:10:0f:25:7f:ba:af:65:aa:33:e9:
33:07:2c:f6:2c:4d:53:a1:05:21:0c:98:e7:d8:5a:72:b9:0d:
d1:9a:b9:2f:c0:b4:1a:bb:b2:41:05:08:c2:af:99:7d:91:bb:
d5:55:e1:b0:62:55:a1:f5:1a:b1:32:54:1a:a6:fa:a3:25:de:
80:c6:09:2b:33:79:d7:d5:82:57:c7:6a:8a:17:0a:58:47:79:
6a:91:a4:f8:8b:f9:cc:9b:25:d5:52:98:04:fa:85:a6:4e:e5:
0a:2a:bb:51:7f:49:73:19:4f:7e:09:bd:d6:f5:10:09:87:e1:
ce:38:58:f3:35:48:ab:32:9f:7c:40:77:2f:48:9a:98:56:4f:
f7:b5:70:af:73:c7:38:d9:ae:12:a6:11:42:3f:d7:ab:3c:5a:
06:81:cd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:41:32 2025 by rpki-client