Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File: UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier: h/AEQW/qh4PmduW8lYmyAJCyOWr5EdZYGpVkmOfTNC4=
Subject key identifier: 79:C3:73:E5:07:FE:CE:90:77:87:E3:34:5F:FA:7B:A2:5A:AD:D5:73
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer: /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial: 0198D472AEE165EB4EB6F79D54F164300641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number: 0695
Signing time: Sat 23 Aug 2025 01:02:22 +0000
Manifest this update: Sat 23 Aug 2025 01:02:22 +0000
Manifest next update: Sun 24 Aug 2025 01:02:22 +0000
Files and hashes: 1: PdctoMgTw2-Nt4ZPBmRXGu0XZPo.roa (hash: n9lnP0LlXaq1mXYcdy8fdP94AepAw+KQCy1tAj0j/P8=)
2: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: /Mx2e4Kz6348sOGsGVDCOwVGz5iLrxptpSxgmlkhp68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ae:e1:65:eb:4e:b6:f7:9d:54:f1:64:30:06:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
Validity
Not Before: Aug 23 01:02:22 2025 GMT
Not After : Aug 24 01:02:22 2025 GMT
Subject: CN=79c373e507fece907787e3345ffa7ba25aadd573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:bc:18:55:48:ae:0c:ab:c0:59:71:b3:27:
28:f1:1a:36:5c:12:d5:ed:16:87:a9:9f:8d:58:6e:
6b:18:cb:17:b1:bf:b6:47:08:d3:c5:9d:67:17:72:
ea:bb:20:77:f7:4e:6a:b1:a3:bd:80:9b:d9:cd:75:
e2:21:9d:69:df:66:97:62:ea:72:b5:78:e3:92:ef:
92:66:64:46:4f:44:59:de:7b:2b:da:4c:a8:cb:9d:
d6:89:08:5e:a9:6c:d1:ea:dd:70:92:5c:cc:37:22:
7d:d6:52:50:48:db:46:16:83:88:ce:09:37:e1:f8:
24:91:7a:4f:53:46:79:ed:08:af:d6:a2:4b:9f:cc:
9c:da:49:c6:9c:b8:a3:90:f3:09:b1:28:09:c8:2d:
b8:97:9c:4c:77:20:11:a7:3f:8f:92:10:ca:02:1e:
2a:5b:8f:4b:e8:15:cc:39:d3:58:6c:d5:f5:d9:43:
ee:25:51:ad:1c:65:f5:b9:ae:e3:d9:f8:0b:11:f6:
cb:0f:e2:3a:39:a3:0d:df:f3:af:52:cd:4c:7f:45:
d7:69:71:46:63:95:c9:e1:ad:4f:cd:f1:c7:1b:aa:
df:44:29:04:35:6e:c0:dd:44:f2:13:01:f8:99:30:
30:93:87:48:0d:96:12:bd:8a:17:2a:91:34:db:67:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C3:73:E5:07:FE:CE:90:77:87:E3:34:5F:FA:7B:A2:5A:AD:D5:73
X509v3 Authority Key Identifier:
keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:23:26:31:38:82:2e:8d:13:78:d9:9e:5b:fa:35:a0:6b:bf:
24:cb:01:13:f8:2c:47:78:f9:f7:9b:89:2c:e6:a4:5e:b7:96:
10:75:57:b7:12:8f:a3:f6:58:73:56:0b:d9:a1:bb:bd:93:a2:
da:a4:dc:8a:98:1a:12:5d:78:76:da:31:6c:d8:06:72:dc:4c:
b0:d6:7f:0f:cf:1b:08:88:1e:cf:e0:eb:89:70:ee:17:62:a8:
83:2b:84:af:99:db:42:1f:34:5d:48:5c:06:27:ae:56:4f:81:
33:db:97:e0:c1:ab:9a:62:b1:8a:75:24:0f:c0:87:85:a9:0c:
a4:02:9d:c8:a1:55:cf:20:76:b8:fd:77:f1:7c:76:38:50:f9:
a1:74:dd:64:f4:15:b5:54:b9:69:8f:05:60:4a:d1:a2:8c:2f:
23:1a:1c:df:42:4d:35:aa:54:94:8d:99:c7:68:d6:c1:eb:d8:
83:ac:f8:c1:0d:f6:54:cd:21:2c:7c:a0:72:89:60:d9:09:bb:
8a:1d:fd:61:6f:e4:c5:a9:c7:f6:d4:a8:8e:d8:23:a5:9a:91:
e8:9e:7b:a8:5d:34:39:94:0f:b5:86:ac:2e:13:fc:ed:da:a4:
fa:b7:6c:cf:db:aa:c0:c8:27:16:ff:15:74:4f:f3:80:f8:f1:
18:39:9f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:05 2025 by rpki-client