Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
File: udkwX8vVnNpLaPiI32AgSFt06YI.mft (raw, json)
Hash identifier: lMOOiKhnCCPL/YbfE8tYjdfeYuk153uczmQ5Sagdzb8=
Subject key identifier: EE:F0:B6:97:10:3D:D3:E2:24:34:00:A7:5D:EB:1A:73:F8:21:CD:D5
Authority key identifier: B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
Certificate issuer: /CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Certificate serial: 01987298D58E7A3514DF6966C9D5E6E25036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
Manifest number: 0789
Signing time: Mon 04 Aug 2025 01:01:15 +0000
Manifest this update: Mon 04 Aug 2025 01:01:15 +0000
Manifest next update: Tue 05 Aug 2025 01:01:15 +0000
Files and hashes: 1: Ke58ENa77TOZvRtwmJBaIvER2CI.roa (hash: YAwwFY3XBNd2hH15n2h8M26LxyaVgzcjkKLQxfxrMs8=)
2: udkwX8vVnNpLaPiI32AgSFt06YI.crl (hash: b0tFttqb2uVbwuT8jNSVK5DqMMmCsrbZbmTEVj1/YZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:d5:8e:7a:35:14:df:69:66:c9:d5:e6:e2:50:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Validity
Not Before: Aug 4 01:01:15 2025 GMT
Not After : Aug 5 01:01:15 2025 GMT
Subject: CN=eef0b697103dd3e2243400a75deb1a73f821cdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:31:60:4d:7c:56:eb:58:1c:ac:72:1a:87:
26:8a:6f:f8:b7:f0:05:7c:31:1e:6b:8d:a2:37:0c:
c3:7c:a5:e1:c1:c9:a4:0b:f0:50:35:eb:ad:58:c3:
bc:66:f4:0e:c0:d5:6d:ef:05:71:e5:c8:a3:d0:3c:
5d:e1:99:c6:84:02:47:46:a8:33:28:64:aa:fc:e5:
0c:9b:05:0d:62:56:91:b7:80:4a:38:19:b4:91:ca:
d2:8e:90:88:df:7c:fa:8d:1d:cd:68:ca:e2:79:6b:
66:dc:84:4d:46:a2:7a:ae:13:cb:b9:ac:30:ad:08:
f5:93:45:ca:a3:30:78:dd:f2:9f:99:0e:80:d1:dc:
9b:a0:19:97:5c:cd:cf:4b:40:4d:7e:16:89:ed:e5:
80:77:c1:a6:5b:ad:d7:13:19:24:07:d0:29:4e:1f:
40:99:38:10:83:ba:1f:a5:94:85:56:fc:89:a8:e9:
e4:12:f3:5f:50:37:0c:ab:41:78:5c:b0:4c:cb:9d:
3b:55:17:5f:d4:20:56:ce:35:ab:f4:f3:f6:0f:d9:
d7:89:e8:24:84:8e:c5:6d:8f:e3:d6:ce:ea:82:7a:
d3:7f:f2:9c:a9:59:7d:01:00:3b:49:48:24:c7:e7:
f5:d7:e9:cd:43:8a:15:78:ce:c1:be:67:09:4c:e9:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F0:B6:97:10:3D:D3:E2:24:34:00:A7:5D:EB:1A:73:F8:21:CD:D5
X509v3 Authority Key Identifier:
keyid:B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:44:70:bf:b4:9d:6d:08:d2:ce:10:17:49:32:4f:35:59:cd:
9d:81:77:d3:95:f6:3f:bd:67:2f:83:3c:15:d1:dc:b2:10:76:
d6:7b:5b:19:0d:53:2f:7e:b6:20:be:19:1e:d2:7c:dd:d4:2d:
80:37:34:40:8d:5e:2f:da:73:6d:43:a3:a0:71:97:81:e1:b3:
09:61:d2:5c:43:16:c5:0a:ed:24:9a:0e:0a:54:ae:6e:8a:a2:
0b:04:eb:70:56:b9:90:9c:59:0b:9d:da:4e:a3:7e:8d:61:e4:
bf:18:8e:ab:a9:31:d4:72:96:ca:6a:28:ee:28:78:97:6d:dc:
4e:8d:b1:52:ae:ad:1e:82:9e:03:4c:bc:06:d4:d7:07:d8:ee:
bf:35:f1:b5:9d:66:cb:92:52:fa:33:bf:95:65:00:e9:5d:eb:
0e:8a:be:c5:7c:b4:55:8e:2a:ee:5e:f4:f4:67:13:95:be:f4:
f2:2d:36:7f:39:48:94:44:cb:8f:39:78:5b:85:38:43:34:ba:
07:1f:a2:f9:1b:15:d9:3e:fe:73:78:0f:b3:54:c2:28:74:d8:
a0:b2:7f:1b:a6:32:39:85:ec:6e:bd:cd:ef:b3:12:b7:32:1d:
32:f8:1e:90:77:bc:ca:1f:9d:4a:28:e0:86:f9:c2:1b:ac:1d:
e9:8b:f5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:55 2025 by rpki-client