Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
File: UKiPmoNBAa34dwN6UcgdEzqpRuw.mft (raw, json)
Hash identifier: NnKQlBUuvejAp3rusYJ1yUtUOIgOdXqhy/huX9KknIs=
Subject key identifier: 7A:FC:73:1A:65:3A:F5:2D:C3:E6:EC:D1:08:C6:A5:EF:B4:07:53:A0
Authority key identifier: 50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
Certificate issuer: /CN=50a88f9a834101adf877037a51c81d133aa946ec
Certificate serial: 0198835510BF334F9BF7643FF60F2346B4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
Manifest number: 0DAA
Signing time: Thu 07 Aug 2025 07:00:46 +0000
Manifest this update: Thu 07 Aug 2025 07:00:46 +0000
Manifest next update: Fri 08 Aug 2025 07:00:46 +0000
Files and hashes: 1: UKiPmoNBAa34dwN6UcgdEzqpRuw.crl (hash: cBFJwY4BAnPAXR5QpUkwEUUJL+BWNx3v6nuJKWQgMv8=)
2: kc-RSMe4Oew5F8NEK8PnK5Ztook.roa (hash: RrPN8D12kwMiREonpEUwGrZPp2WKXYrir6fymPU5Gvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:10:bf:33:4f:9b:f7:64:3f:f6:0f:23:46:b4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a88f9a834101adf877037a51c81d133aa946ec
Validity
Not Before: Aug 7 07:00:46 2025 GMT
Not After : Aug 8 07:00:46 2025 GMT
Subject: CN=7afc731a653af52dc3e6ecd108c6a5efb40753a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:0e:25:5c:2d:18:79:8f:3e:21:dc:4e:35:
61:02:68:32:fa:e5:41:64:51:a4:f1:8b:58:65:33:
16:31:b4:a2:8b:d1:a9:f1:21:c0:9d:15:6c:36:ac:
c6:fb:3f:2f:90:2e:d5:6f:10:e6:f3:61:47:f7:31:
4e:14:24:cf:ec:0c:6d:bc:f2:f7:e5:7a:f1:9a:3c:
96:b6:6b:6d:74:ec:91:9f:1c:3e:d0:c3:de:a5:47:
0f:9f:f0:e9:54:d4:04:3b:34:8d:72:0e:ef:79:16:
c7:51:f8:e1:ed:1c:fc:ee:ca:f3:f1:17:a5:c7:df:
93:90:e3:b1:87:a7:1b:71:af:68:2f:c8:8f:d2:3a:
6f:f2:41:79:66:3b:38:8b:ae:24:1a:ee:e3:a3:b2:
c3:9a:08:49:65:ef:37:f5:3a:0d:90:07:a0:1a:56:
7b:55:4a:ed:72:1d:3a:19:ae:c7:3c:6d:40:26:93:
9d:09:a5:eb:2f:28:85:9f:99:c7:8c:a4:f2:5c:ce:
1c:10:11:8d:1e:60:2d:10:07:80:85:aa:3c:e8:e0:
84:47:14:4d:bc:be:27:9a:05:e7:9b:dc:b5:aa:45:
ca:fa:a8:51:ba:8f:7d:d3:e1:27:77:b9:b1:72:90:
d0:c5:35:43:28:39:5c:00:e5:7e:35:fc:8d:f6:12:
03:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FC:73:1A:65:3A:F5:2D:C3:E6:EC:D1:08:C6:A5:EF:B4:07:53:A0
X509v3 Authority Key Identifier:
keyid:50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f8:c9:46:5c:47:ea:0c:c1:7a:7b:e1:5a:34:77:25:aa:13:
90:36:a0:53:35:5e:cc:9a:32:be:88:cf:07:48:4a:be:32:24:
01:12:6b:76:e2:d6:be:3f:30:f6:df:17:1d:6c:de:81:83:19:
dc:5d:f3:d7:50:9c:da:a5:5a:08:36:d3:76:3e:c3:f2:24:b1:
49:4f:51:0a:67:43:e1:25:20:38:fc:1b:b2:d3:2b:2e:6b:c5:
13:f3:64:f2:73:f5:5c:22:e1:97:db:cf:15:1a:e2:fd:67:de:
d5:c0:e2:8b:a5:e4:ab:a4:10:15:68:55:21:8a:20:e9:17:65:
cd:20:87:db:9b:2e:f0:d6:54:b5:5c:02:3f:41:65:d2:00:b0:
b1:ac:3c:c0:62:bd:b9:49:a6:ff:e8:9f:35:04:67:a8:ba:23:
10:09:f5:c1:49:66:fa:34:cf:3b:f0:4b:fb:d6:f8:19:be:2c:
7d:6b:4b:3b:fd:a7:90:24:ae:9f:a3:26:82:f9:80:0d:9b:f9:
eb:10:63:e6:94:34:28:de:e6:b0:3e:37:66:9e:c0:f4:04:12:
fe:2f:0d:d9:20:82:73:e9:ab:c0:76:a8:05:1f:95:72:a0:73:
d8:f6:82:9d:6d:6c:74:c3:72:0d:94:b8:58:6c:cd:86:58:50:
c0:4e:43:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:28:13 2025 by rpki-client