Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
File: _g_UdpyC_7SSkwQelUnZS9EsGhc.mft (raw, json)
Hash identifier: +HfQt6twDVV/IeIgcejnmZgJ2dK857bgZnZ3358hS8c=
Subject key identifier: C7:97:CE:F0:76:20:B1:DA:56:BC:A4:33:BA:FF:19:EE:8F:B9:05:66
Authority key identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
Certificate issuer: /CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Certificate serial: 0199FB0F46D972DCD3C279CA710B43254AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
Manifest number: 08
Signing time: Sun 19 Oct 2025 06:01:46 +0000
Manifest this update: Sun 19 Oct 2025 06:01:46 +0000
Manifest next update: Mon 20 Oct 2025 06:01:46 +0000
Files and hashes: 1: KiaDjTYmq6Nuv_HakZGoHxO1dPQ.roa (hash: zaJBSu3WJ+4GT8UiOKSzXjTxspUORjdQRRXxILtHbuo=)
2: _g_UdpyC_7SSkwQelUnZS9EsGhc.crl (hash: YNpP/qfh/RRLUBPcjsF1a4bsYWbaAp8BroO9nH3ZwYw=)
3: uhPMNPhZqA_HAHJGGHQJzVsVHKo.roa (hash: 1sUZfTZAirMWw4gpIHAyzWjKdpLh/vSDHu9mudU6a9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:46:d9:72:dc:d3:c2:79:ca:71:0b:43:25:4a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Validity
Not Before: Oct 19 06:01:46 2025 GMT
Not After : Oct 20 06:01:46 2025 GMT
Subject: CN=c797cef07620b1da56bca433baff19ee8fb90566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b0:d6:58:74:e6:d3:b6:53:8e:e9:1e:15:37:
16:64:6a:28:93:05:b2:b1:01:2c:70:92:3f:df:d7:
bf:6f:48:25:25:e6:17:d3:f9:8d:a6:ed:46:bd:b6:
07:bc:fe:c9:53:c9:7a:67:67:ef:83:ae:52:cc:ea:
76:da:60:4a:89:01:dd:97:f8:7b:58:22:9b:9c:60:
02:93:eb:cc:9c:a8:67:ad:90:2b:b4:93:4f:93:02:
5b:5f:27:9e:8b:23:21:6e:d5:df:1a:65:18:60:9c:
47:90:78:31:5f:1b:2e:03:56:a5:de:10:ba:ae:07:
06:58:c1:f9:60:7e:1c:22:6e:ae:fc:ed:db:3f:95:
fe:b6:e7:ab:da:69:e6:d7:22:26:15:15:e6:a5:5a:
22:ea:95:94:26:e3:1b:d9:3a:eb:0f:8a:76:45:af:
d1:94:e3:55:6f:02:09:e2:f3:79:15:55:cf:53:56:
5a:f0:12:d1:a9:1a:35:3c:8d:f7:45:28:20:d0:19:
f1:0b:60:c4:bc:28:d4:93:00:02:5d:66:51:9e:56:
05:a6:7c:c2:43:63:77:cf:8d:79:88:88:5e:e5:83:
91:ad:c1:20:d2:8b:d1:45:7f:d6:ac:12:84:fe:1c:
c9:8b:5b:4e:6f:94:0b:83:2c:99:24:e8:90:5c:12:
02:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:97:CE:F0:76:20:B1:DA:56:BC:A4:33:BA:FF:19:EE:8F:B9:05:66
X509v3 Authority Key Identifier:
keyid:FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:03:b0:da:cc:23:bb:ae:8d:ec:35:79:f1:29:62:ea:43:89:
f6:73:f4:06:3a:f7:5e:31:5f:4f:00:d8:ea:0e:e4:5b:e7:01:
cd:92:fc:1b:8a:4e:94:68:ba:18:91:b5:bd:85:b7:7e:8c:ff:
af:96:75:5e:e2:7a:f4:82:11:e6:fa:9f:e9:60:ac:e4:b9:7f:
14:e2:87:fb:52:68:1d:36:e4:b2:0c:90:1f:cf:c1:61:79:f4:
83:62:26:11:1c:da:f7:be:c2:19:71:10:be:07:ec:fe:12:78:
6a:df:76:53:b2:46:f1:00:4d:b3:4a:34:72:d3:2b:e6:b7:32:
35:b3:d5:16:7f:7b:bc:33:32:76:29:b7:ca:07:0d:32:a0:b2:
3e:a0:6a:bf:64:2a:8d:e0:6b:dd:6b:49:c8:b4:98:7c:91:7f:
ab:d5:0f:33:37:14:7e:6b:5f:5f:1d:59:a8:96:71:97:3d:92:
28:18:87:b5:08:15:5e:62:1c:83:1f:05:b4:2a:7e:00:87:5d:
cc:d0:d8:ed:f3:fb:85:83:c0:f0:41:40:be:4b:49:cf:9d:c9:
a9:7c:38:0e:34:75:47:c2:e2:a3:4e:fe:09:90:a0:40:e1:82:
6b:bf:f2:69:5f:b7:22:1e:4e:cd:52:2b:ed:70:c3:c0:50:56:
ea:d3:35:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:18 2025 by rpki-client