Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
File: Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft (raw, json)
Hash identifier: uI8RfIVv3FQjaVZUxAp0qS6jkeW8JSK28yLhblFjn2o=
Subject key identifier: D3:FD:9A:1B:EA:B2:76:19:7B:3A:B9:B9:83:08:03:BE:59:10:DB:52
Authority key identifier: 51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
Certificate issuer: /CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Certificate serial: 019872CFE3DA280F665AA668C3147CE149AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
Manifest number: 0DAF
Signing time: Mon 04 Aug 2025 02:01:23 +0000
Manifest this update: Mon 04 Aug 2025 02:01:23 +0000
Manifest next update: Tue 05 Aug 2025 02:01:23 +0000
Files and hashes: 1: Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl (hash: QW6qks9gyzrM8J2pDAXI5+tCmg0vaN3T9lVLQGgas8U=)
2: mjbrv8dV-mIT7_28FQYeIF2tc5Y.roa (hash: 9NS9LnbdoLNr2dkro0L8OB2u3Er8Jl5oontPY7h5sGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:e3:da:28:0f:66:5a:a6:68:c3:14:7c:e1:49:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Validity
Not Before: Aug 4 02:01:23 2025 GMT
Not After : Aug 5 02:01:23 2025 GMT
Subject: CN=d3fd9a1beab276197b3ab9b9830803be5910db52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:52:ca:b6:18:d8:7f:1b:ed:c2:b5:23:f8:
09:8e:69:31:bb:3f:fa:b0:df:64:ef:42:ca:af:ff:
60:f9:0f:51:49:11:f2:29:58:9d:40:c2:ed:d4:34:
1d:e3:f9:2d:3d:9f:a1:6b:cf:dc:47:16:be:f1:d8:
c8:a9:81:1e:86:ef:08:74:69:e5:6e:24:c6:cd:22:
22:f7:d2:51:c5:8f:95:13:f2:56:60:e2:43:19:4d:
e5:64:4f:48:d4:50:82:33:17:8d:58:ba:4b:d9:b5:
34:2a:f1:95:53:1f:72:70:24:b8:ec:ca:85:05:a6:
7f:85:a5:4a:81:ab:fb:fb:c3:19:a5:f1:b4:4f:fc:
0e:45:ba:e3:8d:9d:97:1a:9c:13:31:c3:08:9c:c2:
9e:f9:fa:d7:6c:b5:e4:e4:06:c1:14:4f:ca:f0:40:
23:63:e4:d1:e5:86:52:7a:21:1b:29:16:24:d5:6f:
43:a8:73:92:6f:b8:72:f3:cb:32:1c:d5:9a:fd:84:
86:97:f4:64:b6:f3:eb:76:e2:3f:46:45:79:c4:6c:
23:be:b0:a8:25:cd:50:08:03:5b:e3:3e:63:2d:ca:
27:0d:de:4d:13:88:e5:93:e0:ea:5a:c1:11:e8:1e:
e3:e6:72:47:10:c9:33:a7:a9:31:a6:24:5c:2f:52:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FD:9A:1B:EA:B2:76:19:7B:3A:B9:B9:83:08:03:BE:59:10:DB:52
X509v3 Authority Key Identifier:
keyid:51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3a:d5:59:9c:03:f3:47:ed:d7:9a:8e:e9:5e:e1:0a:2b:b2:
83:54:77:f5:e9:13:84:25:34:2f:15:61:04:b6:ad:4c:71:81:
a4:89:5b:de:12:fd:a4:81:05:4a:87:c3:e9:2d:1a:bd:31:68:
25:6d:14:5e:aa:e3:f5:c6:a5:ea:c0:dd:2f:97:80:ed:52:86:
af:14:82:a2:ca:6a:d3:d6:45:91:07:66:cb:53:5f:58:28:2e:
e8:f5:78:41:27:57:65:2f:76:79:7f:df:aa:62:23:ad:22:be:
6b:95:c7:35:a1:e6:54:4d:47:4e:f2:be:ef:1c:6d:b3:32:97:
04:df:d9:8c:4a:f8:d2:34:6c:9d:9a:18:ec:09:93:4f:a6:fb:
e3:ea:16:7d:5a:8c:17:c7:a4:e8:85:35:0c:42:eb:70:d9:06:
14:ce:38:ac:4b:81:66:a1:b6:61:b5:f3:4d:00:c9:80:43:13:
f7:ec:6a:d7:50:bd:a2:7d:ec:6b:ef:2e:d2:46:c7:f4:b6:9a:
a9:1e:c0:16:69:eb:26:7a:cd:1b:34:25:98:81:ef:a6:4d:35:
f1:2e:c5:4c:a7:9e:86:b0:80:75:09:fa:62:3e:2d:c9:a7:38:
fb:96:ab:65:d0:88:bf:7f:a8:e1:24:15:4e:b2:90:a2:35:b5:
24:b5:9e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:29 2025 by rpki-client