Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: rK76riAinMhQcDYIHgcMeZCis7uDCuqMydyFnHmihR8=
Subject key identifier: 25:A7:C9:2B:B9:56:71:26:17:0A:66:76:3B:47:9A:13:96:D6:2B:B6
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 0197711B2BC7C103ABF86BF5172158366EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 04C4
Signing time: Sun 15 Jun 2025 01:01:35 +0000
Manifest this update: Sun 15 Jun 2025 01:01:35 +0000
Manifest next update: Mon 16 Jun 2025 01:01:35 +0000
Files and hashes: 1: 0EbACDVL2fDivnf5KUiVukCW6AM.roa (hash: 2EVhZ0rS+lj6U3ajXAU+8FEPpDbqGDvioQB8YdIkUmc=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: iWGRPaQEZZzCpkdMT0f/oesg936GHiEQGaGVnS5IWq4=)
3: mqm7Jg5-zPabxGFXHWcZsQaK2dY.roa (hash: /oBnHrhig1strh5pSaVLSZyr3E+b/5bhNvAnJC6HiAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:2b:c7:c1:03:ab:f8:6b:f5:17:21:58:36:6e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Jun 15 01:01:35 2025 GMT
Not After : Jun 16 01:01:35 2025 GMT
Subject: CN=25a7c92bb9567126170a66763b479a1396d62bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:28:e1:ba:6c:96:1a:e8:e5:bb:ed:56:60:
1b:9e:04:cb:f6:18:1a:dd:28:b7:68:21:30:19:c4:
06:d8:71:03:e7:dd:4f:9f:19:48:1a:b1:c6:41:6b:
07:b2:9e:12:dd:4c:27:10:77:00:5c:43:73:87:21:
f5:8d:ae:50:90:b1:5a:dd:0d:4c:71:ba:6f:f6:b6:
de:ae:4c:a3:42:e9:ea:4d:d0:1b:2a:c9:b7:04:42:
a1:f3:79:48:16:41:90:6c:77:b1:d6:e4:ab:75:e4:
d0:27:f9:b3:0c:f6:19:95:8b:33:93:9e:e3:38:89:
ab:e0:6a:d9:a5:ff:4e:cc:bb:56:7a:7e:84:a8:b5:
1f:15:e0:ed:9b:c4:50:32:d4:4a:d1:b2:b7:cd:11:
9c:1b:91:06:4e:5d:1b:76:9f:5b:92:8c:8d:e7:7c:
67:90:7b:97:c4:66:9f:f7:75:03:6f:7a:73:6f:73:
d8:13:3a:fc:af:2b:b1:3f:53:b1:23:9a:4a:7b:0a:
6a:06:4e:01:f1:d9:a2:d9:8f:6b:fe:52:bb:50:fa:
27:55:1c:61:e7:2c:f3:12:37:20:56:50:36:e4:0c:
6f:f7:e5:99:6c:c0:2d:5e:ab:62:25:29:5a:6b:b4:
81:c2:b6:f8:ce:33:9a:71:64:e4:9f:22:9e:79:79:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A7:C9:2B:B9:56:71:26:17:0A:66:76:3B:47:9A:13:96:D6:2B:B6
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:72:e8:70:ed:e8:fa:1d:17:ae:da:6e:ec:6f:14:ac:ae:d4:
7b:01:af:b1:e6:fb:5b:b5:aa:b3:76:a6:be:e5:be:d4:51:68:
b0:26:f9:ed:47:4f:97:25:cf:22:98:f4:28:00:39:bc:b9:aa:
ef:2e:69:b2:bd:c0:d2:e4:f8:39:68:70:af:c7:ca:92:e8:2f:
37:2c:d2:2d:af:92:00:da:46:49:7b:be:39:a2:c1:68:04:1f:
01:c7:27:71:c6:63:eb:0b:9b:ef:11:17:bd:dc:44:5f:90:63:
a5:de:aa:ff:e0:f7:80:b0:c4:ba:f6:43:72:05:0c:e1:ca:94:
3d:b8:d9:23:29:d3:0c:e7:e9:32:c8:48:e4:f4:0d:9b:65:e7:
17:75:54:5d:77:f5:ef:02:90:4d:2f:5a:f5:0c:d1:7d:2a:c6:
2e:d5:4c:a2:38:4c:93:fe:35:75:f7:9e:7b:a0:58:3a:5d:82:
ac:1c:91:27:da:41:0c:27:a7:95:e9:58:97:4b:15:0b:4f:64:
e3:7b:f0:7b:5c:54:48:0d:f0:28:46:98:7b:fe:bc:85:84:8a:
52:42:26:98:ea:eb:f0:fb:7f:2e:5b:47:8b:74:b5:93:a4:11:
69:1f:7e:cd:5f:5c:76:df:f1:39:b2:f6:f3:47:d0:95:16:94:
37:d6:ff:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:08:02 2025 by rpki-client