
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
File: UDUgXD0BcT-di1sA41OWGbIzUjI.mft (raw, json)
Hash identifier: K8NnXgC9oZuKFNLvVvt45al8WtA7BOExtRyrd1rY7qw=
Subject key identifier: C0:0D:50:8E:80:CE:88:61:78:E9:1B:A8:11:C7:97:61:E4:D1:B5:75
Authority key identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
Certificate issuer: /CN=5035205c3d01713f9d8b5b00e3539619b2335232
Certificate serial: 0199FC2184F5AC5A2267429E476C9AAFF1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
Manifest number: 0EAB
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: J1PA5zhc5yqV3-JBl0JRvNFdZ4Q.roa (hash: FL+ey6+/QlF2eMruVQ9t4rwcUImoiKltUkjApQ8aP7k=)
2: UDUgXD0BcT-di1sA41OWGbIzUjI.crl (hash: UppmlLo2z8dxcxbJoapj6c/LWz/CzTYNPjTSuCqb9Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:84:f5:ac:5a:22:67:42:9e:47:6c:9a:af:f1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5035205c3d01713f9d8b5b00e3539619b2335232
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=c00d508e80ce886178e91ba811c79761e4d1b575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:06:6e:b1:fb:70:fd:66:02:8d:c3:84:ea:
c0:1f:5b:84:11:3e:6f:6e:c3:e4:04:4f:5f:7b:8a:
14:52:e0:e8:bd:5d:8f:2e:b3:2f:f4:47:ec:6f:ad:
ad:2b:85:00:eb:eb:28:cf:68:6a:b8:2a:72:1e:50:
0c:71:87:cb:3f:5a:88:b8:10:93:59:8f:93:09:53:
05:23:f4:43:07:31:6e:8c:51:14:dc:76:c2:53:99:
fa:20:cd:bb:65:08:97:87:fc:d7:61:76:39:de:4b:
d2:11:64:1e:6a:bf:9e:63:04:9d:0c:11:a5:b7:72:
8e:98:0f:86:55:10:24:b6:72:ae:fb:a4:c1:d2:35:
b5:8a:f7:c2:87:01:3d:b9:6d:62:bc:d8:ac:41:db:
5a:a5:e7:14:eb:55:25:5f:b3:5e:f9:97:06:50:55:
d7:9b:50:45:4e:02:28:57:71:28:d4:0c:56:8d:71:
bd:50:bf:9f:4c:08:19:8f:dc:50:c4:ed:69:56:67:
4f:00:ee:76:db:8e:2a:d2:98:0a:a6:3a:54:c7:ad:
9b:26:64:2a:5d:65:21:30:d9:65:c6:64:30:f4:f7:
1b:df:8e:31:62:61:34:80:3c:b7:8b:d2:16:aa:1b:
38:cc:6a:93:a0:40:93:08:93:d1:b6:06:0b:87:24:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0D:50:8E:80:CE:88:61:78:E9:1B:A8:11:C7:97:61:E4:D1:B5:75
X509v3 Authority Key Identifier:
keyid:50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:75:b1:3b:6c:53:69:59:07:64:94:81:15:0e:04:a1:10:e7:
7b:09:3d:da:d5:04:ab:0f:db:08:34:d1:a8:2a:2c:0d:76:fd:
29:48:0e:7e:34:e1:eb:56:b0:a1:7e:a3:41:7b:2e:21:a5:b7:
8b:c4:3e:e7:1e:64:5d:45:16:cd:a2:a3:41:9b:21:39:85:38:
c3:05:a1:09:4d:55:8e:db:63:bc:35:7f:58:62:b6:0e:68:a0:
a1:a6:fa:4f:52:14:a6:2a:82:71:da:af:0e:54:77:21:2f:dc:
30:6e:35:89:39:a3:a1:db:15:ed:84:a2:1f:31:56:16:60:d5:
d0:bc:e8:55:f9:cc:71:37:e9:a7:14:ad:4e:20:40:db:53:d4:
2b:11:01:ea:5b:05:1f:6a:dd:dc:25:27:a1:fb:86:74:b9:35:
ee:f0:7e:06:14:cd:23:e2:ae:be:67:03:73:13:b6:8a:d8:18:
f7:ad:7e:b5:4c:2b:58:fc:56:97:1d:84:d6:60:1f:db:23:c3:
7e:ab:64:75:a5:15:aa:1a:bb:72:a7:6c:6e:7e:a9:4b:d6:0d:
6d:91:82:75:ff:ec:42:de:92:f8:a0:df:a9:a5:6a:a1:dc:96:
32:16:9e:20:7b:48:f7:43:0d:0a:47:22:ac:e3:0a:75:53:cc:
16:60:fc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:42 2025 by rpki-client