Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
File: udkwX8vVnNpLaPiI32AgSFt06YI.mft (raw, json)
Hash identifier: ZtWmIDYy0pqQUt0NYT6X7bPos55MociBGCxdYr222Us=
Subject key identifier: 67:6D:12:D2:4E:0C:BE:19:2E:23:D7:73:F5:F3:7B:1B:53:98:AF:70
Authority key identifier: B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
Certificate issuer: /CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Certificate serial: 01976BF492F1FAEBC96D09D5C6184B9424F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
Manifest number: 0701
Signing time: Sat 14 Jun 2025 01:01:19 +0000
Manifest this update: Sat 14 Jun 2025 01:01:19 +0000
Manifest next update: Sun 15 Jun 2025 01:01:19 +0000
Files and hashes: 1: Ke58ENa77TOZvRtwmJBaIvER2CI.roa (hash: YAwwFY3XBNd2hH15n2h8M26LxyaVgzcjkKLQxfxrMs8=)
2: udkwX8vVnNpLaPiI32AgSFt06YI.crl (hash: fw9Cd8z7NB5oBxMnwSXockA2a9V0h672bWap49tbWKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:92:f1:fa:eb:c9:6d:09:d5:c6:18:4b:94:24:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Validity
Not Before: Jun 14 01:01:19 2025 GMT
Not After : Jun 15 01:01:19 2025 GMT
Subject: CN=676d12d24e0cbe192e23d773f5f37b1b5398af70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:3e:4d:e7:53:2c:a7:5a:95:29:43:99:1d:
36:2c:7a:58:a4:f0:b3:ed:a8:f5:79:4d:10:e4:00:
5a:c4:d6:24:b3:9a:ec:e2:81:2f:07:99:b5:06:47:
eb:20:bb:70:d8:6c:17:ab:d1:f5:d0:07:9c:8d:4d:
09:f0:fd:32:fc:bf:29:f7:02:88:6d:31:60:d3:10:
ae:02:5c:87:86:0d:66:98:98:74:24:f5:74:96:87:
0b:79:55:9b:fd:49:7f:44:4c:f3:07:55:f3:e9:0e:
ca:32:71:40:2b:4d:ef:d8:fc:4c:77:f4:f9:95:61:
d1:c8:17:64:28:de:df:57:e9:fa:f7:c6:df:ad:bf:
38:96:cd:98:a2:85:53:ab:ed:d6:1b:95:36:82:3e:
f4:5e:56:b6:3b:47:c1:f6:5d:2f:37:de:7e:3b:fd:
86:4e:18:dc:c8:75:59:32:23:22:48:86:6b:56:08:
b9:1e:31:33:27:bb:ed:f6:92:43:25:4a:82:e1:87:
3b:c7:f1:fe:dc:3b:df:ef:30:e2:ef:87:08:b0:fd:
82:da:8a:f8:19:d5:97:27:5c:80:49:16:29:1d:f3:
07:2e:ae:47:84:84:92:ce:c1:f2:ff:42:8f:c5:b4:
a9:23:38:4b:dd:b1:00:4b:cf:6d:2e:5f:bb:21:53:
6f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:12:D2:4E:0C:BE:19:2E:23:D7:73:F5:F3:7B:1B:53:98:AF:70
X509v3 Authority Key Identifier:
keyid:B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e5:1c:c9:f2:59:d4:b8:ca:f8:fe:c6:96:4e:e7:bd:f5:11:
c2:2b:dc:6d:ca:fe:b9:8a:31:85:92:93:0e:66:a4:1e:a9:ef:
22:f0:22:b1:d5:ee:6b:36:87:20:2d:fb:12:36:1a:9f:24:97:
21:80:66:1f:55:b2:b5:3a:69:3b:a3:85:54:b4:55:ec:e6:1f:
15:25:a3:bb:ff:5a:5a:b3:01:6d:0e:28:67:8f:12:5b:ba:04:
46:e5:21:8b:95:6f:63:98:9c:7c:b6:93:b3:29:9b:0d:5b:ca:
f3:30:f2:78:58:14:83:eb:6b:2c:cf:85:e4:cd:73:1d:93:1a:
05:aa:9c:ce:b0:ab:cf:7f:28:9b:bb:b6:70:4b:a0:fe:70:ca:
a8:c3:5f:08:74:a8:7a:40:9b:cf:24:4f:10:45:dc:3f:45:e9:
dd:29:dd:13:31:eb:9b:c5:dc:b8:e6:b1:17:0e:b9:38:7d:ae:
25:7f:b8:e5:c2:a6:f0:0a:8a:27:3d:04:3f:dc:94:64:40:85:
fe:aa:cd:c5:4c:cd:db:d2:25:d2:97:d7:d0:ac:d2:dd:b9:11:
ae:f0:11:34:82:05:af:ca:92:d1:3e:39:14:96:05:ec:63:88:
a1:fe:5f:22:37:83:03:87:cf:2f:63:ef:22:77:7b:8d:a9:9f:
a0:69:91:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:21:32 2025 by rpki-client