Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
File: udkwX8vVnNpLaPiI32AgSFt06YI.mft (raw, json)
Hash identifier: zVsZDNEKx57shwmjrAiWYsFeP2SM1jzNmnvxLqwlnSE=
Subject key identifier: D5:61:AB:C1:73:B1:10:52:0B:23:76:A4:50:0F:87:3F:4D:8F:C7:A3
Authority key identifier: B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
Certificate issuer: /CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Certificate serial: 0197B745AC4E778CE928FF81BA58FE2A5C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
Manifest number: 0728
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: Ke58ENa77TOZvRtwmJBaIvER2CI.roa (hash: YAwwFY3XBNd2hH15n2h8M26LxyaVgzcjkKLQxfxrMs8=)
2: udkwX8vVnNpLaPiI32AgSFt06YI.crl (hash: ryv6YbfW7QQIoU+fcvB50HVLf1Ydex4QthztY8mkCxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ac:4e:77:8c:e9:28:ff:81:ba:58:fe:2a:5c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=d561abc173b110520b2376a4500f873f4d8fc7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f3:b9:a0:c1:2e:b1:01:7c:49:f2:42:0d:29:
63:a2:66:01:7f:a3:aa:75:6c:bd:fd:ea:db:9d:7c:
71:f7:1e:69:ce:e8:f9:a1:32:e2:4d:b8:fe:a4:93:
93:95:5e:27:83:57:40:59:82:bb:1e:dd:40:52:a2:
6d:86:ab:73:02:91:b9:39:40:cc:69:bd:d5:f9:6d:
4d:68:7b:51:7b:10:ba:e3:c2:19:8c:ba:63:a7:13:
99:42:80:d1:6b:10:8c:bd:1a:4f:ca:62:2e:08:09:
07:e4:d0:c7:73:e6:22:e7:5d:03:6a:f3:4c:f2:6f:
70:88:da:60:b3:cd:62:a4:1e:96:65:04:51:c1:3c:
ec:15:27:39:8b:ae:4c:9e:99:d7:de:dd:b8:82:83:
58:60:c1:19:09:07:26:d2:63:09:4a:05:e5:16:ff:
3c:a5:55:99:e3:85:b9:8e:32:80:98:62:1c:b7:bf:
5b:51:42:fa:03:16:90:a2:fa:b8:f1:88:e1:94:ae:
9b:d4:fb:00:39:84:99:05:d6:74:5e:af:23:14:1f:
1b:3e:15:cb:64:b8:8b:e1:80:54:ea:34:62:a9:ac:
e6:06:b6:8f:7d:26:b1:f1:52:8b:21:0c:ab:d8:b8:
e7:44:cf:8c:77:c7:33:f5:cd:0a:bf:a4:42:e6:63:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:61:AB:C1:73:B1:10:52:0B:23:76:A4:50:0F:87:3F:4D:8F:C7:A3
X509v3 Authority Key Identifier:
keyid:B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:56:34:00:73:33:59:92:35:52:da:e0:fc:50:54:b9:7e:ce:
b5:25:9f:a3:66:89:e9:9c:7e:09:85:40:2a:98:83:0f:db:b9:
59:b4:39:39:fe:a7:ff:8f:cc:d4:27:4b:24:3a:b7:d1:a4:55:
8c:98:c8:8f:61:43:c1:8c:2f:74:2d:08:54:0a:d9:05:b2:92:
77:b1:e6:fb:18:13:2c:6e:3f:a8:a0:94:74:c7:7b:c7:8b:46:
5b:28:8e:44:63:23:3d:0f:15:54:85:5d:ed:1c:25:d0:c7:98:
30:7d:9a:26:71:62:bc:fc:3b:44:39:b5:85:2f:fd:44:7a:42:
ad:61:70:fc:d3:f6:8f:7c:0f:34:95:1b:10:ca:9e:2b:d4:6a:
ff:f1:28:7f:da:14:a7:5a:5a:4f:96:93:cc:d9:a8:71:8c:e1:
89:3d:cf:ed:81:50:52:63:c8:de:a7:61:f1:6f:ff:ba:5a:15:
3d:7f:71:c4:6a:60:53:d0:d0:5b:7c:dd:71:77:2d:3b:9d:ea:
0b:6a:71:38:2d:bf:cc:0c:4f:91:b7:ca:c1:aa:10:04:2b:2d:
6e:42:91:b6:be:76:53:67:a2:29:b1:63:aa:b5:df:77:5b:ab:
c1:67:94:19:4b:ca:3b:ce:2e:0c:75:ba:ed:59:2a:a2:de:1a:
82:85:f8:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RaxOd4zpKP+Bulj+KlwaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZDkzMDVmY2JkNTljZGE0YjY4Zjg4OGRmNjAyMDQ4NWI3
NGU5ODIwHhcNMjUwNjI4MTYwMTI1WhcNMjUwNjI5MTYwMTI1WjAzMTEwLwYDVQQD
EyhkNTYxYWJjMTczYjExMDUyMGIyMzc2YTQ1MDBmODczZjRkOGZjN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PO5oMEusQF8SfJCDSljomYBf6Oq
dWy9/erbnXxx9x5pzuj5oTLiTbj+pJOTlV4ng1dAWYK7Ht1AUqJthqtzApG5OUDM
ab3V+W1NaHtRexC648IZjLpjpxOZQoDRaxCMvRpPymIuCAkH5NDHc+Yi510DavNM
8m9wiNpgs81ipB6WZQRRwTzsFSc5i65MnpnX3t24goNYYMEZCQcm0mMJSgXlFv88
pVWZ44W5jjKAmGIct79bUUL6AxaQovq48YjhlK6b1PsAOYSZBdZ0Xq8jFB8bPhXL
ZLiL4YBU6jRiqazmBraPfSax8VKLIQyr2LjnRM+Md8cz9c0Kv6RC5mMMtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVhq8FzsRBSCyN2pFAPhz9Nj8ejMB8GA1UdIwQY
MBaAFLnZMF/L1ZzaS2j4iN9gIEhbdOmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xOWYzN2ItNDQ2Yy00OTEwLTljNmYt
MWQwOWM3OWIyNTQwLzEvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xOWYzN2ItNDQ2Yy00OTEwLTljNmYtMWQwOWM3OWIyNTQw
LzEvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1Y0AHMz
WZI1Utrg/FBUuX7OtSWfo2aJ6Zx+CYVAKpiDD9u5WbQ5Of6n/4/M1CdLJDq30aRV
jJjIj2FDwYwvdC0IVArZBbKSd7Hm+xgTLG4/qKCUdMd7x4tGWyiORGMjPQ8VVIVd
7Rwl0MeYMH2aJnFivPw7RDm1hS/9RHpCrWFw/NP2j3wPNJUbEMqeK9Rq//Eof9oU
p1paT5aTzNmocYzhiT3P7YFQUmPI3qdh8W//uloVPX9xxGpgU9DQW3zdcXctO53q
C2pxOC2/zAxPkbfKwaoQBCstbkKRtr52U2eiKbFjqrXfd1urwWeUGUvKO84uDHW6
7Vkqot4agoX44A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:59 2025 by rpki-client