Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
File: UDUgXD0BcT-di1sA41OWGbIzUjI.mft (raw, json)
Hash identifier: S6h2QxIT8djNQJ5bfRLLVb/DwxfgweYyNQ0qdU2MwzA=
Subject key identifier: 6F:5F:BC:A1:C3:A8:79:2A:A8:02:59:C3:F5:58:44:1D:90:D0:1B:02
Authority key identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
Certificate issuer: /CN=5035205c3d01713f9d8b5b00e3539619b2335232
Certificate serial: 0199315A859D6EAFEDF185833B0B4E1AA710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
Manifest number: 0E42
Signing time: Wed 10 Sep 2025 02:00:40 +0000
Manifest this update: Wed 10 Sep 2025 02:00:40 +0000
Manifest next update: Thu 11 Sep 2025 02:00:40 +0000
Files and hashes: 1: J1PA5zhc5yqV3-JBl0JRvNFdZ4Q.roa (hash: FL+ey6+/QlF2eMruVQ9t4rwcUImoiKltUkjApQ8aP7k=)
2: UDUgXD0BcT-di1sA41OWGbIzUjI.crl (hash: iuiAQwwCdm/NSojbIeC4bJfk0jAcZb6m7BlIj0luKMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:85:9d:6e:af:ed:f1:85:83:3b:0b:4e:1a:a7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5035205c3d01713f9d8b5b00e3539619b2335232
Validity
Not Before: Sep 10 02:00:40 2025 GMT
Not After : Sep 11 02:00:40 2025 GMT
Subject: CN=6f5fbca1c3a8792aa80259c3f558441d90d01b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:31:a4:59:54:22:90:2a:8c:1c:99:28:65:
4e:8f:2f:66:06:72:f0:37:09:7e:08:62:4a:98:17:
21:bf:1b:68:cb:08:5b:22:a9:12:45:26:b2:45:c8:
24:50:83:a5:7a:46:13:13:1f:93:58:12:36:e6:86:
03:48:5c:88:19:8e:80:23:05:8c:d5:db:81:15:db:
c2:be:0b:1a:63:2d:83:55:35:df:d7:c8:ae:09:4a:
75:9c:79:37:8e:8a:a9:6e:0f:b4:e0:33:e0:94:68:
e4:bd:ec:8d:7e:d7:f4:02:08:9f:ad:61:b2:7c:fe:
d1:79:c3:29:e0:33:be:65:a6:d5:94:1e:f8:bb:21:
5e:d9:bd:c8:a2:64:b7:0a:52:28:e3:47:dc:eb:9f:
09:3a:22:c1:95:f5:0b:65:f8:43:a5:e5:ac:0b:11:
ad:1f:ee:35:30:0b:31:e1:d1:4b:2a:76:2e:54:09:
0e:3c:6c:6c:c0:12:f1:2b:00:ba:9e:e8:ff:50:19:
7a:ed:41:bb:cb:c4:2f:8d:1b:87:80:8b:5a:1d:19:
55:ca:00:bd:c0:ed:32:5a:c9:a6:c5:1b:bd:b1:9f:
73:a4:46:6f:d3:29:90:9e:01:43:20:e3:72:0a:55:
35:35:12:b9:b5:ae:9f:de:7d:ac:ab:8a:9b:8c:a3:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5F:BC:A1:C3:A8:79:2A:A8:02:59:C3:F5:58:44:1D:90:D0:1B:02
X509v3 Authority Key Identifier:
keyid:50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:62:6f:21:2a:55:e1:67:6b:2d:cb:c2:f1:59:36:a8:fb:59:
7e:2d:a7:bf:75:de:57:6d:36:85:49:16:a5:6f:30:72:3e:d7:
31:2f:fb:ba:2b:a9:e0:a5:09:34:bf:bf:34:47:09:74:eb:df:
af:97:a3:a5:da:5c:a7:e2:ba:21:56:48:2d:47:7b:12:3f:00:
cc:d4:9e:ed:bf:9a:70:f1:18:ea:0a:73:73:a4:c9:c9:54:46:
82:39:71:25:52:3e:07:3c:90:f3:00:5c:92:c2:48:60:19:4d:
bf:23:52:9c:c5:86:4f:39:25:e0:37:52:b1:68:5a:01:61:c0:
83:7f:2a:c5:02:8c:a9:23:04:20:10:bd:10:6a:db:f3:30:f8:
48:e0:a6:b4:0c:0e:36:f0:20:58:a1:76:f4:f5:5d:49:32:f5:
55:33:02:7b:15:12:eb:1a:fc:6a:9a:3e:89:4c:16:56:af:c3:
a2:fe:3a:13:8f:1e:a6:c7:47:fa:52:7d:03:5d:6a:43:a3:e5:
7c:21:a5:05:0d:15:ec:6e:74:27:43:80:96:38:02:dd:66:a0:
72:34:5a:81:b9:6b:aa:ff:d2:3a:53:71:ef:75:da:c3:e9:58:
c0:53:ee:20:4c:98:89:1e:d0:7f:1f:da:9b:f0:33:98:f4:a8:
fd:a7:04:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxWoWdbq/t8YWDOwtOGqcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMzUyMDVjM2QwMTcxM2Y5ZDhiNWIwMGUzNTM5NjE5YjIz
MzUyMzIwHhcNMjUwOTEwMDIwMDQwWhcNMjUwOTExMDIwMDQwWjAzMTEwLwYDVQQD
Eyg2ZjVmYmNhMWMzYTg3OTJhYTgwMjU5YzNmNTU4NDQxZDkwZDAxYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaQxpFlUIpAqjByZKGVOjy9mBnLw
Nwl+CGJKmBchvxtoywhbIqkSRSayRcgkUIOlekYTEx+TWBI25oYDSFyIGY6AIwWM
1duBFdvCvgsaYy2DVTXf18iuCUp1nHk3joqpbg+04DPglGjkveyNftf0AgifrWGy
fP7RecMp4DO+ZabVlB74uyFe2b3IomS3ClIo40fc658JOiLBlfULZfhDpeWsCxGt
H+41MAsx4dFLKnYuVAkOPGxswBLxKwC6nuj/UBl67UG7y8QvjRuHgItaHRlVygC9
wO0yWsmmxRu9sZ9zpEZv0ymQngFDIONyClU1NRK5ta6f3n2sq4qbjKMpdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9fvKHDqHkqqAJZw/VYRB2Q0BsCMB8GA1UdIwQY
MBaAFFA1IFw9AXE/nYtbAONTlhmyM1IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVURVZ1hEMEJjVC1kaTFzQTQxT1dHYkl6VWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85N2I5YzEtYzFkZS00MWFjLWE5Y2It
MTYwMmQ2YWQxNDFhLzEvVURVZ1hEMEJjVC1kaTFzQTQxT1dHYkl6VWpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85N2I5YzEtYzFkZS00MWFjLWE5Y2ItMTYwMmQ2YWQxNDFh
LzEvVURVZ1hEMEJjVC1kaTFzQTQxT1dHYkl6VWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGJvISpV
4WdrLcvC8Vk2qPtZfi2nv3XeV202hUkWpW8wcj7XMS/7uiup4KUJNL+/NEcJdOvf
r5ejpdpcp+K6IVZILUd7Ej8AzNSe7b+acPEY6gpzc6TJyVRGgjlxJVI+BzyQ8wBc
ksJIYBlNvyNSnMWGTzkl4DdSsWhaAWHAg38qxQKMqSMEIBC9EGrb8zD4SOCmtAwO
NvAgWKF29PVdSTL1VTMCexUS6xr8apo+iUwWVq/Dov46E48epsdH+lJ9A11qQ6Pl
fCGlBQ0V7G50J0OAljgC3WagcjRagblrqv/SOlNx73Xaw+lYwFPuIEyYiR7Qfx/a
m/AzmPSo/acE5A==
-----END CERTIFICATE-----
Generated at Wed Sep 10 10:04:37 2025 by rpki-client