
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.mft
File: UMrU5Xdbox7K4ibRBG89waEEgU0.mft (raw, json)
Hash identifier: RV3uVtvuVBDi+QyG2MMCOlFyBvyyxUIYAZRQG6xaEOc=
Subject key identifier: FE:3B:D4:D4:A0:D6:83:BB:5C:2B:FC:A6:C0:7D:27:53:C6:BE:43:7D
Authority key identifier: 50:CA:D4:E5:77:5B:A3:1E:CA:E2:26:D1:04:6F:3D:C1:A1:04:81:4D
Certificate issuer: /CN=50cad4e5775ba31ecae226d1046f3dc1a104814d
Certificate serial: 019882E791DC5A38930D2D3A2CEB09273E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMrU5Xdbox7K4ibRBG89waEEgU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.mft
Manifest number: 05B4
Signing time: Thu 07 Aug 2025 05:01:10 +0000
Manifest this update: Thu 07 Aug 2025 05:01:10 +0000
Manifest next update: Fri 08 Aug 2025 05:01:10 +0000
Files and hashes: 1: UMrU5Xdbox7K4ibRBG89waEEgU0.crl (hash: Uxd3B4BoPSevHsnMAXLsrFVW8Xrav/GmHMBIGwhTjdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMrU5Xdbox7K4ibRBG89waEEgU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:91:dc:5a:38:93:0d:2d:3a:2c:eb:09:27:3e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50cad4e5775ba31ecae226d1046f3dc1a104814d
Validity
Not Before: Aug 7 05:01:10 2025 GMT
Not After : Aug 8 05:01:10 2025 GMT
Subject: CN=fe3bd4d4a0d683bb5c2bfca6c07d2753c6be437d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:d6:a3:18:9a:45:2e:aa:7e:b2:81:99:ea:
cb:42:83:9c:6d:bd:33:f4:c7:d9:0f:a5:19:40:24:
0b:96:56:19:41:78:b0:d4:cc:30:c1:91:8d:bb:f7:
b0:9e:8d:3a:fc:2c:a2:26:1d:62:c0:21:30:81:d8:
02:cf:9d:0a:c9:71:8f:16:d9:81:67:ab:19:ee:4a:
99:b0:ae:8c:1e:3c:e5:fb:bc:b9:95:aa:ec:5b:a9:
32:cd:b3:9a:7a:a7:1c:7b:37:6c:ed:4b:e6:57:5e:
2a:17:a4:06:0d:dd:8e:76:6b:4e:78:e0:60:be:63:
68:95:46:1c:41:db:3b:9c:c4:0a:7e:eb:b1:c4:96:
15:bb:fd:1c:55:30:82:24:32:5d:46:42:01:ac:75:
36:24:f8:17:88:53:7b:10:c0:59:a1:95:b7:52:49:
87:96:f8:dd:a7:2c:f9:0f:bb:44:9d:03:99:9a:b4:
44:87:eb:1a:4d:09:22:5d:f0:fe:d0:bf:b4:54:67:
61:a6:88:6d:8e:d9:c3:fc:fd:2f:84:12:09:79:3c:
6b:28:62:b2:59:23:dd:89:40:9c:23:a1:b2:97:d6:
bb:3d:61:cb:8b:b0:fd:0c:81:5e:e4:5d:de:55:e0:
4e:50:23:c3:7d:a4:99:bd:05:53:a1:0d:6a:e7:90:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3B:D4:D4:A0:D6:83:BB:5C:2B:FC:A6:C0:7D:27:53:C6:BE:43:7D
X509v3 Authority Key Identifier:
keyid:50:CA:D4:E5:77:5B:A3:1E:CA:E2:26:D1:04:6F:3D:C1:A1:04:81:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMrU5Xdbox7K4ibRBG89waEEgU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:27:34:80:d4:76:7c:bd:f4:f6:52:98:ec:cf:85:9f:1a:e7:
c4:ed:03:e9:57:c0:6c:b4:ac:03:24:93:08:0b:a3:4d:f5:d4:
11:4a:33:15:ec:04:51:83:fe:39:6a:38:36:f2:a0:9d:ca:98:
ad:d8:bc:6c:33:45:12:f2:96:b5:1c:9c:ea:39:01:41:5b:5e:
87:85:8c:53:2a:12:71:25:e8:93:11:43:77:89:c9:97:1a:3f:
e5:e0:37:26:68:37:3c:ec:c5:01:3d:10:27:a4:dd:fd:c5:2e:
2f:dc:82:48:17:5d:97:5d:4e:fb:fb:72:8b:ef:f6:15:fe:d6:
1e:88:ca:25:3a:d6:89:aa:d3:32:a3:de:bf:ed:f5:1d:d1:59:
b2:c3:88:e5:71:56:12:b8:74:bb:59:57:29:31:dc:cd:2d:cc:
82:c9:54:90:32:a2:28:87:91:53:8b:57:be:e3:6b:7e:f1:55:
f9:56:e7:17:d0:b1:a3:78:3d:e0:c7:33:88:49:ab:dd:b9:5d:
49:37:15:2a:8a:1c:c8:64:0b:c4:d0:25:1a:38:3b:6c:9f:f6:
27:ed:40:c5:2a:d6:0b:58:eb:28:80:47:2b:d2:f9:23:71:5d:
a4:85:69:1e:31:68:f8:3c:f7:1b:3e:35:fe:94:50:a0:ae:2b:
79:4f:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:16:52 2025 by rpki-client