Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
File: _g_UdpyC_7SSkwQelUnZS9EsGhc.mft (raw, json)
Hash identifier: h7scNRdb/iIu3UZTjtBHu11+4vBHVdKHMsaJ0V3fESk=
Subject key identifier: 7D:1D:76:E8:7E:3A:AE:DA:54:67:F3:4C:56:15:96:7E:EA:C2:6B:C4
Authority key identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
Certificate issuer: /CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Certificate serial: 019A296780101EC8CBA49C5EA95238322B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
Manifest number: 20
Signing time: Tue 28 Oct 2025 06:00:40 +0000
Manifest this update: Tue 28 Oct 2025 06:00:40 +0000
Manifest next update: Wed 29 Oct 2025 06:00:40 +0000
Files and hashes: 1: KiaDjTYmq6Nuv_HakZGoHxO1dPQ.roa (hash: zaJBSu3WJ+4GT8UiOKSzXjTxspUORjdQRRXxILtHbuo=)
2: _g_UdpyC_7SSkwQelUnZS9EsGhc.crl (hash: zxuoNN+9Ge48gvvsGcd1vpwnSxj6+sPjAxXrPGOyCoQ=)
3: uhPMNPhZqA_HAHJGGHQJzVsVHKo.roa (hash: 1sUZfTZAirMWw4gpIHAyzWjKdpLh/vSDHu9mudU6a9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:80:10:1e:c8:cb:a4:9c:5e:a9:52:38:32:2b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Validity
Not Before: Oct 28 06:00:40 2025 GMT
Not After : Oct 29 06:00:40 2025 GMT
Subject: CN=7d1d76e87e3aaeda5467f34c5615967eeac26bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:a1:56:92:3b:76:9a:15:23:ba:c0:9e:00:
0c:54:c2:8c:92:a5:90:c4:cb:da:c9:d5:e9:3b:72:
60:7c:b3:04:47:27:18:27:fc:fc:25:4b:e2:00:44:
05:85:9c:23:27:62:fb:fc:52:a8:ea:26:45:90:67:
ef:c8:b3:c3:16:e6:de:08:27:6c:70:23:bd:86:89:
73:71:71:7e:2e:38:25:39:5f:9c:16:01:6f:37:bc:
2e:7b:9c:32:58:6b:8b:a3:e9:bb:ae:dd:99:c7:23:
04:be:5a:ce:89:90:1a:2c:9c:46:af:20:17:da:58:
57:f0:35:e5:1d:8b:2a:0a:63:3b:68:4b:4e:2b:34:
7a:04:e2:31:87:2c:80:21:b3:6c:44:53:f3:98:6c:
d2:28:fd:1f:e5:ae:c3:27:be:30:18:d7:6a:b0:b3:
d3:65:7b:be:9e:c6:c3:28:c7:44:5e:3b:09:3d:c5:
26:25:c0:95:7f:27:9c:cf:ea:81:f1:98:b9:f8:12:
c4:24:72:e2:ea:b3:68:8e:f8:d2:14:27:23:c2:3b:
28:a7:05:f0:8b:f3:53:39:97:be:86:9a:34:9c:90:
49:0b:3d:bd:87:de:45:4f:c1:3a:09:26:39:5b:34:
05:1f:65:08:4f:50:1a:57:cf:1c:a8:0c:9b:54:be:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1D:76:E8:7E:3A:AE:DA:54:67:F3:4C:56:15:96:7E:EA:C2:6B:C4
X509v3 Authority Key Identifier:
keyid:FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0c:86:6f:a7:de:be:b1:71:ce:06:6b:53:c2:81:60:e5:4a:
e9:11:86:c4:ba:a9:02:e4:37:8d:cf:8e:e7:f0:fa:5d:4f:2e:
d3:c5:50:df:31:b8:1e:4a:23:9e:0c:b8:29:07:5e:70:db:58:
d8:93:f3:be:3f:18:5b:0d:22:86:af:4b:e1:67:8e:57:5c:61:
57:2e:fd:c9:2d:c7:80:46:eb:c1:9c:ce:d6:3c:75:47:21:de:
43:35:f6:06:f0:4b:8c:09:2e:44:e5:1d:05:fc:cf:99:64:2a:
39:8d:b5:19:b5:6b:2c:da:e8:9f:c4:ef:74:45:2a:91:6a:f0:
f6:d8:95:de:ac:7c:07:e8:fc:cb:a5:34:61:49:c8:ea:c7:cf:
4e:7a:87:6e:d9:11:4f:fa:9f:01:4f:93:7f:54:05:e0:d4:5c:
ba:1a:10:a7:dd:e6:f5:8d:50:9b:b8:b5:98:91:65:07:b7:d1:
e8:9c:38:cd:0f:e2:f0:bf:6d:7b:05:c8:db:45:bc:93:f5:e7:
a5:66:8b:06:80:2e:5c:51:76:45:71:01:10:ce:e7:76:f3:7d:
c2:cf:8d:e8:ae:4a:65:6f:e1:da:82:11:c9:6e:54:33:81:8c:
c5:19:96:5d:b7:cc:9d:21:e8:51:db:4b:09:36:fd:8c:95:a2:
07:b8:ba:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 15:58:59 2025 by rpki-client