Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
File: Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft (raw, json)
Hash identifier: w62zWuf60w79GyBQlt5sQawuOAq5ZwI1yCR8OT3Wc/w=
Subject key identifier: C4:17:27:85:CC:D1:8D:FE:2A:72:0C:24:4F:3A:29:2F:8E:2C:69:DA
Authority key identifier: 51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
Certificate issuer: /CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Certificate serial: 019A5307D9CC51264A219101E967002C7D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
Manifest number: 0EA8
Signing time: Wed 05 Nov 2025 08:00:14 +0000
Manifest this update: Wed 05 Nov 2025 08:00:14 +0000
Manifest next update: Thu 06 Nov 2025 08:00:14 +0000
Files and hashes: 1: 41DTuek1VatXKqyOZ16zPIzA15c.roa (hash: xDUrI4pP1nTL2y1WCMAWoY6BskvJrsSqrtvmAaoQnEQ=)
2: Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl (hash: 1acKPAkucfSX1G0hM2sh7tTZRvLIUfoov/bPAFCBZWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:d9:cc:51:26:4a:21:91:01:e9:67:00:2c:7d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Validity
Not Before: Nov 5 08:00:14 2025 GMT
Not After : Nov 6 08:00:14 2025 GMT
Subject: CN=c4172785ccd18dfe2a720c244f3a292f8e2c69da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:8c:71:73:ba:c8:be:3c:96:29:95:2e:43:
e4:37:b6:1d:a0:91:99:02:7c:ba:e8:ef:12:9c:7c:
e0:87:9a:a7:94:73:d4:a2:16:17:aa:c6:da:c5:d8:
eb:85:91:fd:28:c9:e7:4c:8e:5b:7b:10:da:28:4b:
bb:35:ff:aa:ce:41:1d:54:14:4c:ea:ad:9e:ae:e7:
b3:11:21:36:8f:83:b3:b9:05:46:06:d1:7f:ae:ae:
40:f2:50:a1:51:30:da:42:38:3c:5d:c5:a6:b0:ee:
dd:86:5e:71:9b:1d:05:28:af:27:03:dc:d3:cf:46:
55:13:c7:af:77:8c:f3:0c:cc:b4:c7:83:1c:52:79:
79:8e:d2:6a:ea:44:a6:e8:bf:b3:4b:a4:48:c7:fd:
63:24:d8:b9:8d:ef:17:f6:a2:ae:16:26:08:32:79:
0c:fa:74:f4:09:20:f6:96:24:d1:18:6d:13:5b:62:
b5:61:06:ac:86:e6:78:d0:ad:ae:b3:04:aa:d7:59:
9e:b2:b7:d2:19:56:3d:92:51:8d:5a:b2:10:47:06:
78:c3:04:17:4c:0a:67:ab:c4:b7:98:8d:c5:af:a4:
ba:e5:c6:98:59:7d:69:a8:88:4a:1d:e3:c2:48:47:
41:bc:c2:85:e4:16:63:db:49:4f:14:4b:89:2b:b1:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:17:27:85:CC:D1:8D:FE:2A:72:0C:24:4F:3A:29:2F:8E:2C:69:DA
X509v3 Authority Key Identifier:
keyid:51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d5:1c:ab:8d:bd:62:25:95:35:9d:04:2d:3e:fe:4c:f4:89:
42:7b:79:19:18:89:75:bd:05:e2:b9:95:ba:ec:4c:fa:f4:b2:
36:e9:8c:bf:ec:57:f6:06:99:48:39:88:9f:ac:9b:eb:7e:f8:
08:2b:ae:70:aa:96:4d:51:ad:b9:04:82:d5:f6:61:a0:ba:9e:
54:48:3a:38:0e:b0:55:7c:f8:6c:12:a7:e7:01:5f:af:5c:a0:
df:52:a4:71:05:26:62:fc:ce:6d:88:ac:0d:ab:06:8b:46:4e:
3b:d9:60:5e:21:56:a9:e3:0d:d2:9c:b1:5f:5a:04:20:f2:13:
fa:e0:df:1b:a7:e4:01:47:9a:b9:88:1c:60:2e:a6:8b:a7:66:
13:0f:15:10:66:fc:93:82:a5:67:1a:68:ab:37:e3:0f:25:80:
c1:ea:e1:1c:aa:b0:1e:4c:2c:7f:0f:b6:65:ae:64:de:4b:8b:
84:c7:00:e4:fc:16:bb:fe:de:46:5a:fa:78:ac:73:a7:38:c9:
82:de:7c:cb:b6:53:34:6c:b2:04:9a:d4:72:3e:63:da:cf:fd:
14:32:84:1a:d5:44:77:ca:39:4a:12:ec:2e:f9:cc:ef:fb:2a:
d2:09:35:ea:c9:1d:eb:a0:44:f5:7a:02:fb:0d:3f:1f:0d:cb:
7a:50:a6:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTB9nMUSZKIZEB6WcALH1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZGEzZDMyNTk3YjUwNTE5MzJmNmNhOTE4MmQ0YjlhMmZi
MDViNTYwHhcNMjUxMTA1MDgwMDE0WhcNMjUxMTA2MDgwMDE0WjAzMTEwLwYDVQQD
EyhjNDE3Mjc4NWNjZDE4ZGZlMmE3MjBjMjQ0ZjNhMjkyZjhlMmM2OWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30yMcXO6yL48limVLkPkN7YdoJGZ
Any66O8SnHzgh5qnlHPUohYXqsbaxdjrhZH9KMnnTI5bexDaKEu7Nf+qzkEdVBRM
6q2eruezESE2j4OzuQVGBtF/rq5A8lChUTDaQjg8XcWmsO7dhl5xmx0FKK8nA9zT
z0ZVE8evd4zzDMy0x4McUnl5jtJq6kSm6L+zS6RIx/1jJNi5je8X9qKuFiYIMnkM
+nT0CSD2liTRGG0TW2K1YQashuZ40K2uswSq11mesrfSGVY9klGNWrIQRwZ4wwQX
TApnq8S3mI3Fr6S65caYWX1pqIhKHePCSEdBvMKF5BZj20lPFEuJK7FEqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQXJ4XM0Y3+KnIMJE86KS+OLGnaMB8GA1UdIwQY
MBaAFFHaPTJZe1BRky9sqRgtS5ovsFtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWRvOU1sbDdVRkdUTDJ5cEdDMUxtaS13VzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMjJhM2UtZmNkYi00YTcxLTg5NzYt
MDBhNTQ5ZTFiMWQ3LzEvVWRvOU1sbDdVRkdUTDJ5cEdDMUxtaS13VzFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jMjJhM2UtZmNkYi00YTcxLTg5NzYtMDBhNTQ5ZTFiMWQ3
LzEvVWRvOU1sbDdVRkdUTDJ5cEdDMUxtaS13VzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9Ucq429
YiWVNZ0ELT7+TPSJQnt5GRiJdb0F4rmVuuxM+vSyNumMv+xX9gaZSDmIn6yb6374
CCuucKqWTVGtuQSC1fZhoLqeVEg6OA6wVXz4bBKn5wFfr1yg31KkcQUmYvzObYis
DasGi0ZOO9lgXiFWqeMN0pyxX1oEIPIT+uDfG6fkAUeauYgcYC6mi6dmEw8VEGb8
k4KlZxpoqzfjDyWAwerhHKqwHkwsfw+2Za5k3kuLhMcA5PwWu/7eRlr6eKxzpzjJ
gt58y7ZTNGyyBJrUcj5j2s/9FDKEGtVEd8o5ShLsLvnM7/sq0gk16skd66BE9XoC
+w0/Hw3LelCmOw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:55:57 2025 by rpki-client