Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
File: udkwX8vVnNpLaPiI32AgSFt06YI.mft (raw, json)
Hash identifier: sd8otYGxngsujrha+WfpxS4FkHjzins1GCz3bGm5XJo=
Subject key identifier: 2B:5B:C3:58:C6:E7:CF:24:67:82:8A:9D:F9:C4:1A:42:2C:4A:CA:E7
Authority key identifier: B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
Certificate issuer: /CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Certificate serial: 0198D515BF7AD8C265EF08ECF39A1176D812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
Manifest number: 07BC
Signing time: Sat 23 Aug 2025 04:00:28 +0000
Manifest this update: Sat 23 Aug 2025 04:00:28 +0000
Manifest next update: Sun 24 Aug 2025 04:00:28 +0000
Files and hashes: 1: Ke58ENa77TOZvRtwmJBaIvER2CI.roa (hash: YAwwFY3XBNd2hH15n2h8M26LxyaVgzcjkKLQxfxrMs8=)
2: udkwX8vVnNpLaPiI32AgSFt06YI.crl (hash: sXVcDLW+ta59x+yiykjrbUovr74uQu2EAQj3SU80HiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:bf:7a:d8:c2:65:ef:08:ec:f3:9a:11:76:d8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Validity
Not Before: Aug 23 04:00:28 2025 GMT
Not After : Aug 24 04:00:28 2025 GMT
Subject: CN=2b5bc358c6e7cf2467828a9df9c41a422c4acae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:5b:24:37:07:ec:3d:4a:ce:85:45:30:55:
fb:7b:79:fc:12:c9:c8:d8:17:96:17:d8:f7:94:6b:
dd:b5:01:ba:b0:45:f4:80:3f:c7:fe:d3:fe:2c:1d:
00:95:11:6a:0a:f2:19:08:e6:d5:be:5d:a4:3d:46:
70:64:9f:c5:f2:b3:b7:d9:4e:14:8c:be:ef:ea:7b:
46:47:8a:3d:cb:84:e0:0e:b7:09:dd:60:8d:86:4b:
0d:ed:9a:c7:06:96:ce:e1:19:82:74:25:f4:38:39:
44:c7:f8:6f:82:58:ae:a1:cf:e9:f7:50:3f:36:3b:
c7:23:0c:26:89:98:b3:34:90:bc:b4:be:91:e5:68:
d5:c2:4d:77:c2:ed:c6:df:88:38:3d:51:f9:5f:22:
19:14:18:d7:84:35:a9:25:a1:c0:fc:29:c8:02:69:
c5:d7:76:07:99:08:c2:70:cb:79:fb:34:aa:d7:15:
1b:99:b7:e2:13:ff:a6:36:cb:16:36:f6:21:90:ee:
a1:7b:16:67:55:b2:94:33:89:54:49:e9:f4:ae:d6:
cd:83:f8:01:6b:00:cb:d6:d7:b2:d3:61:7a:6c:a1:
40:8b:0b:bd:34:38:a2:95:d1:0c:7a:64:27:f8:0f:
d4:11:16:7c:fb:46:34:92:2d:a9:a2:2d:4b:1e:b8:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5B:C3:58:C6:E7:CF:24:67:82:8A:9D:F9:C4:1A:42:2C:4A:CA:E7
X509v3 Authority Key Identifier:
keyid:B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:43:d7:6e:f5:a8:9e:e5:55:1b:93:89:87:0c:52:65:6c:be:
55:c1:c3:57:61:92:aa:a1:7e:8a:e5:54:2e:7b:41:e3:5e:97:
dd:c5:78:6e:89:59:f8:62:64:90:b7:4b:3a:6a:a5:dc:2a:cd:
e9:24:fc:0a:58:cc:20:7a:82:90:c6:00:b4:a8:3b:73:f0:1a:
a3:57:3c:38:7f:62:e1:e3:3c:ae:c2:12:ca:eb:f4:84:87:d7:
a7:fd:39:f9:46:93:0b:11:1d:dc:5c:6e:79:0f:c9:48:2c:b1:
30:24:1a:67:6c:a7:fa:5f:f9:b2:b5:0d:b3:d0:78:5c:03:9e:
21:e8:23:f7:7b:97:7c:f5:8c:7d:eb:5c:f7:c9:7f:98:e2:35:
1a:dd:91:0c:47:b5:d1:7f:4d:41:0a:e6:68:ce:bb:76:ad:85:
83:1b:0d:ba:aa:51:97:33:8e:a4:81:48:20:83:9a:4e:e2:c7:
4b:43:be:6c:e9:0c:4d:89:bc:60:e4:99:88:1e:79:eb:6d:90:
42:d3:f4:fc:93:9d:d8:cf:bb:8b:9d:ff:04:ba:52:7f:10:03:
4b:2f:e7:34:d0:0e:df:50:53:4d:c6:bf:ca:46:7f:3d:0f:a0:
72:a5:dd:6e:de:60:75:dd:56:05:50:ec:f4:22:b0:5b:56:38:
a1:de:29:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:46 2025 by rpki-client