Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: ryR3+aKbN9BC/LbxHQzgkxR8KeMyWMrg6kZNFamAtg8=
Subject key identifier: CC:58:EA:63:1D:86:9A:F9:76:E0:DF:7D:A9:95:D8:99:56:B1:66:14
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 0199FDD8B1D227117A57CF7258F9F34EE708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 0AE9
Signing time: Sun 19 Oct 2025 19:01:00 +0000
Manifest this update: Sun 19 Oct 2025 19:01:00 +0000
Manifest next update: Mon 20 Oct 2025 19:01:00 +0000
Files and hashes: 1: 7RyFzAenJrRSfpio3z8gQY_GG64.roa (hash: odUPAcO4Dj6oNdh8N9FSZ9wG/7rei3J3ITe8+2Q8Y5M=)
2: EvrHOXABisdzxPR63-7KbbGB5LA.roa (hash: GvQn3h7lMtpAwRUlfjv3mFbaPpDUmsn0fuhGLOvFT5Q=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: 5NervhfUNsL1u5Lmf/X3yt/gQ+Iy1qyzqgcNlZBMR7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:b1:d2:27:11:7a:57:cf:72:58:f9:f3:4e:e7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: Oct 19 19:01:00 2025 GMT
Not After : Oct 20 19:01:00 2025 GMT
Subject: CN=cc58ea631d869af976e0df7da995d89956b16614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:eb:c7:3e:c9:d4:70:6d:d9:f6:b4:bb:ae:d7:
98:af:b2:fa:4b:89:e4:2f:af:a7:93:8e:d4:bb:5c:
7b:e0:19:bd:18:f9:09:92:f1:00:38:c1:e9:33:ad:
2e:93:70:d7:19:cb:c3:5b:4a:ff:8a:98:f0:36:71:
2b:fb:65:43:ed:26:bf:be:82:11:c9:de:18:ce:08:
4a:e2:82:69:6f:37:79:9d:a7:ac:29:dd:5a:01:d0:
be:9a:38:73:59:d4:80:0e:0b:7b:f0:87:3c:fa:f8:
74:a8:87:f1:85:93:76:ca:69:a7:0c:ec:8d:5c:83:
eb:b0:54:ba:ac:5c:46:c2:51:71:b1:e4:44:de:45:
ed:b6:f3:70:45:fe:1b:a6:9e:32:92:7f:e1:d9:e9:
93:26:3b:86:54:c9:b7:17:46:85:f3:37:5b:09:9b:
13:28:35:31:73:13:25:83:e8:a4:a5:4c:1f:7c:6f:
4d:18:7a:b3:50:fb:ba:76:77:2f:b6:d8:18:0f:bc:
fd:a8:47:e3:af:ca:22:d7:67:99:af:63:1d:c3:f9:
67:de:a1:09:b0:ef:10:ba:50:c9:fe:81:47:0d:4f:
e5:28:11:d3:10:06:10:65:24:22:02:e9:65:dc:ad:
ec:55:f3:96:76:5f:a8:91:4d:12:e8:74:fd:d7:19:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:58:EA:63:1D:86:9A:F9:76:E0:DF:7D:A9:95:D8:99:56:B1:66:14
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d0:b7:df:d0:6d:1b:d7:9c:9f:3b:10:20:04:bb:9f:6a:47:
4d:d7:01:f2:62:ed:da:60:5f:d5:df:cf:52:6b:95:c8:09:2b:
06:31:0c:ee:c7:46:e6:f3:7a:ea:dc:4d:76:ae:78:35:eb:42:
8c:84:cd:15:06:61:c2:40:39:b8:7d:fe:3a:f8:60:e0:b8:93:
28:e8:41:fb:28:3f:b6:f6:e4:c0:d6:60:43:62:f1:be:83:af:
41:ef:a4:2b:3d:67:22:49:42:1c:93:c8:3c:52:56:95:59:bc:
9b:e3:29:36:36:94:92:7e:a6:08:18:25:5a:f3:4e:96:61:ce:
08:0b:bc:2b:77:60:d8:12:98:dd:39:a5:42:5f:e1:b6:cf:2e:
9c:56:c9:9f:95:f4:75:f5:27:4e:74:4b:8c:ba:e4:a9:65:e4:
31:be:c4:0b:7f:a1:59:52:e5:44:44:21:f3:44:cd:6a:e5:f4:
6a:aa:95:fe:8c:b7:aa:1e:c2:20:1e:3b:f9:4b:e2:97:10:a3:
29:47:e3:a1:6b:31:db:87:47:39:79:d8:07:95:8d:f9:62:b6:
ef:21:eb:dc:de:39:69:09:59:96:15:7e:94:06:82:96:e9:a0:
f1:a8:2e:c9:fb:c7:8f:83:c2:1e:47:9c:4d:c6:87:69:88:70:
38:65:bb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:27 2025 by rpki-client