
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: KgqEPx8cVHfbwxlOLpihzBqqz4SwQhZN445xR6Jdex0=
Subject key identifier: FD:A0:2C:49:EB:44:7E:C9:04:35:48:7E:66:C3:0D:77:2E:9E:62:1B
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 01988166BF390C0CF3F3936845EF2318662A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 0551
Signing time: Wed 06 Aug 2025 22:00:51 +0000
Manifest this update: Wed 06 Aug 2025 22:00:51 +0000
Manifest next update: Thu 07 Aug 2025 22:00:51 +0000
Files and hashes: 1: 0EbACDVL2fDivnf5KUiVukCW6AM.roa (hash: 2EVhZ0rS+lj6U3ajXAU+8FEPpDbqGDvioQB8YdIkUmc=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: ehGv0Tj5ZUPb1A7qEZEPz99aWqk98wwnn/nayF/1nLQ=)
3: mqm7Jg5-zPabxGFXHWcZsQaK2dY.roa (hash: /oBnHrhig1strh5pSaVLSZyr3E+b/5bhNvAnJC6HiAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:bf:39:0c:0c:f3:f3:93:68:45:ef:23:18:66:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Aug 6 22:00:51 2025 GMT
Not After : Aug 7 22:00:51 2025 GMT
Subject: CN=fda02c49eb447ec90435487e66c30d772e9e621b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c0:2a:f1:c2:33:08:d1:e0:ff:da:b3:b0:8d:
e8:c7:22:2f:79:cd:15:dd:b7:05:1f:3e:6b:99:c8:
ba:51:41:99:3f:f0:38:e0:c5:e8:58:4e:5c:ce:a3:
b9:46:ad:0a:60:99:68:af:e4:20:6c:ec:fd:e4:b0:
4b:0a:aa:1b:46:14:3d:cd:88:ed:b9:27:12:85:4a:
46:51:0c:7c:29:f9:7f:54:c4:dc:8b:09:4a:e1:93:
f5:5f:64:71:16:27:70:db:04:88:be:b4:9e:35:2b:
9d:f9:eb:1e:9d:30:79:2b:c0:df:62:ff:43:4a:6b:
c4:94:ce:13:99:36:41:98:f5:f1:cf:0c:b3:ea:dc:
a7:d3:52:6b:f5:41:47:1a:61:70:c7:c6:90:c7:bf:
46:7d:10:3e:61:18:76:9f:41:31:de:d1:94:29:45:
50:aa:47:b2:9f:53:dc:1d:75:8e:21:02:84:31:c4:
47:3f:d3:2d:28:e1:3d:62:80:3d:6e:57:a4:52:fc:
75:ee:dc:2d:a8:d3:09:fb:12:b6:9a:c1:c1:b8:21:
85:c6:c9:72:0d:73:75:bc:78:f7:62:e8:ff:af:c0:
a3:c8:3e:31:1a:db:67:15:14:da:f2:97:02:b9:76:
94:6d:fa:dd:ef:50:a2:4a:d1:6a:23:18:6b:bd:5e:
34:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A0:2C:49:EB:44:7E:C9:04:35:48:7E:66:C3:0D:77:2E:9E:62:1B
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:18:9e:51:9d:c4:ab:96:30:c1:8c:d3:1c:5d:9a:37:61:e4:
ec:1e:70:7a:22:10:1b:a2:0d:a4:fa:97:97:00:26:6a:e8:03:
77:c2:86:f0:78:49:84:05:d7:b8:bb:56:ed:ce:56:0c:7f:b3:
90:dc:41:2e:1f:93:22:f6:d9:a2:a9:93:7e:c2:e4:78:be:41:
ee:6e:a7:38:43:23:26:f8:2e:3d:75:63:86:7d:d9:33:2c:a8:
8c:67:29:8c:15:f1:c6:0d:3e:74:22:22:13:5d:5b:8e:de:61:
5e:05:f0:a6:9b:76:9e:3c:b5:b2:2d:83:99:33:f2:43:a2:86:
5b:6b:55:33:68:27:3b:95:4e:9d:f3:fa:f0:59:fc:cc:4b:a9:
a2:56:83:81:e3:e1:be:10:d2:7a:dc:36:cb:97:49:54:d7:f4:
4b:d2:5a:6f:5d:16:f5:2e:c9:85:fd:ad:49:86:4d:39:da:a1:
8a:95:1e:6c:8a:cd:33:eb:40:f0:73:dc:30:34:cc:4f:ce:29:
a5:48:02:e7:ce:72:78:66:56:e2:40:45:ce:5c:a2:e8:f4:04:
bc:a6:53:85:11:f5:e1:cd:5f:1c:29:bb:e4:31:ea:38:02:65:
d1:10:3b:af:dd:35:07:8b:6b:dc:a4:44:db:78:99:ac:11:9c:
9d:9a:8f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:21:31 2025 by rpki-client