Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
File: udkwX8vVnNpLaPiI32AgSFt06YI.mft (raw, json)
Hash identifier: rUBskpBJgNmWYBY5dQcrl6ixtQBT6svNBrXP4rrrms8=
Subject key identifier: CA:66:D9:03:AC:F8:6A:D4:83:1D:4D:97:E1:86:20:9B:56:2F:F7:08
Authority key identifier: B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
Certificate issuer: /CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Certificate serial: 0199FC8F3A48C38B029CF4077A9D18ACAF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
Manifest number: 0855
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: Ke58ENa77TOZvRtwmJBaIvER2CI.roa (hash: YAwwFY3XBNd2hH15n2h8M26LxyaVgzcjkKLQxfxrMs8=)
2: udkwX8vVnNpLaPiI32AgSFt06YI.crl (hash: far5AkHRBROBksUZugkaR/3Lrx5C1fSN3B8+JN1reLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3a:48:c3:8b:02:9c:f4:07:7a:9d:18:ac:af:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=ca66d903acf86ad4831d4d97e186209b562ff708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:06:31:64:c5:5c:ad:53:1c:1f:14:49:74:
98:13:43:2e:1c:bd:eb:ff:09:fb:ee:6f:1a:e2:0a:
6c:11:63:0c:16:ec:0e:e9:20:19:3c:de:e9:69:d1:
8f:38:5b:a6:55:0e:81:fa:13:ae:e7:ad:42:87:21:
0a:d5:8a:d5:d1:8f:55:5d:e0:ac:fe:7f:d1:cb:d0:
3a:71:ad:5a:d4:ee:74:b8:2a:44:ef:71:a5:84:66:
13:e9:c0:2d:8a:53:a5:1c:9d:41:f5:1a:d0:3f:23:
4b:b1:75:82:eb:c0:c7:a9:af:1b:7f:fb:36:50:57:
f1:3d:3c:bb:19:bb:e4:7c:c7:00:dd:a8:42:d2:55:
bf:f7:95:48:0c:cb:cd:f9:a9:9f:26:b6:ec:1e:65:
2a:62:59:9d:ea:cc:f4:6b:0e:20:6a:79:54:74:51:
da:54:3b:a0:7a:ed:98:17:28:b2:e1:6a:96:2e:18:
f3:91:9d:20:ca:62:30:a4:91:16:c8:a5:ed:52:6a:
7c:b9:5b:91:2e:47:e6:40:cb:a0:d1:f4:84:3c:f3:
be:36:19:c7:7e:b3:0e:63:ee:8b:37:ea:18:f0:cc:
52:3f:12:fd:50:64:e7:fc:69:cb:8d:b8:52:b2:81:
0d:a2:c3:af:9a:b9:ae:09:7d:f2:95:1a:75:9b:b0:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:66:D9:03:AC:F8:6A:D4:83:1D:4D:97:E1:86:20:9B:56:2F:F7:08
X509v3 Authority Key Identifier:
keyid:B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b6:1e:ff:04:19:5b:54:ad:d0:a8:44:bb:42:e7:17:14:73:
30:a1:dc:6b:bb:53:9e:60:58:b5:8d:55:c8:ae:e6:61:23:be:
0f:bc:be:40:b7:0b:eb:c3:14:66:51:d5:e9:b3:73:23:3a:3a:
b9:ed:09:d8:a4:74:aa:53:dc:94:94:38:36:b4:d6:ac:3f:99:
33:eb:2b:03:21:82:d3:3b:ef:9a:71:36:ad:c2:92:1f:83:23:
50:bb:d7:b5:46:ec:ca:eb:24:db:e5:75:41:87:42:0a:ec:f8:
d8:f1:70:6b:f6:ae:c0:1d:70:11:10:b9:a7:c3:48:16:7b:09:
1a:1b:a1:4b:8a:cc:87:8a:77:ea:22:47:32:52:e9:c8:b9:84:
ca:6f:6f:0e:cf:b3:4c:15:1f:48:18:58:4a:0c:b6:c4:f0:b3:
4a:41:43:db:81:67:99:38:ad:b7:19:14:49:80:02:c2:a2:15:
26:ba:4d:bf:5f:1e:c7:24:6d:7f:2f:7c:ad:63:39:fd:1d:3a:
c6:82:be:a8:25:00:8c:6b:23:54:55:5a:16:53:20:d0:b7:03:
a2:95:28:c2:79:17:f5:0b:32:ca:d6:2a:33:c1:01:63:1a:eb:
5c:ca:bd:7f:56:f3:d6:fe:d1:61:82:00:0e:1c:54:4d:db:57:
04:b7:20:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jzpIw4sCnPQHep0YrK8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZDkzMDVmY2JkNTljZGE0YjY4Zjg4OGRmNjAyMDQ4NWI3
NGU5ODIwHhcNMjUxMDE5MTMwMTA4WhcNMjUxMDIwMTMwMTA4WjAzMTEwLwYDVQQD
EyhjYTY2ZDkwM2FjZjg2YWQ0ODMxZDRkOTdlMTg2MjA5YjU2MmZmNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZwGMWTFXK1THB8USXSYE0MuHL3r
/wn77m8a4gpsEWMMFuwO6SAZPN7padGPOFumVQ6B+hOu561ChyEK1YrV0Y9VXeCs
/n/Ry9A6ca1a1O50uCpE73GlhGYT6cAtilOlHJ1B9RrQPyNLsXWC68DHqa8bf/s2
UFfxPTy7GbvkfMcA3ahC0lW/95VIDMvN+amfJrbsHmUqYlmd6sz0aw4ganlUdFHa
VDugeu2YFyiy4WqWLhjzkZ0gymIwpJEWyKXtUmp8uVuRLkfmQMug0fSEPPO+NhnH
frMOY+6LN+oY8MxSPxL9UGTn/GnLjbhSsoENosOvmrmuCX3ylRp1m7BO2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpm2QOs+GrUgx1Nl+GGIJtWL/cIMB8GA1UdIwQY
MBaAFLnZMF/L1ZzaS2j4iN9gIEhbdOmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xOWYzN2ItNDQ2Yy00OTEwLTljNmYt
MWQwOWM3OWIyNTQwLzEvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xOWYzN2ItNDQ2Yy00OTEwLTljNmYtMWQwOWM3OWIyNTQw
LzEvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrYe/wQZ
W1St0KhEu0LnFxRzMKHca7tTnmBYtY1VyK7mYSO+D7y+QLcL68MUZlHV6bNzIzo6
ue0J2KR0qlPclJQ4NrTWrD+ZM+srAyGC0zvvmnE2rcKSH4MjULvXtUbsyusk2+V1
QYdCCuz42PFwa/auwB1wERC5p8NIFnsJGhuhS4rMh4p36iJHMlLpyLmEym9vDs+z
TBUfSBhYSgy2xPCzSkFD24FnmTittxkUSYACwqIVJrpNv18exyRtfy98rWM5/R06
xoK+qCUAjGsjVFVaFlMg0LcDopUownkX9QsyytYqM8EBYxrrXMq9f1bz1v7RYYIA
DhxUTdtXBLcgbw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:23 2025 by rpki-client