Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
File: UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft (raw, json)
Hash identifier: zgjLcIySvfoIj5VBcfqcxmN227ty2URMaBZjNYFRJT8=
Subject key identifier: DD:43:C6:2E:F8:1B:D8:79:36:92:14:C8:8C:E9:DE:B7:67:90:7F:4E
Authority key identifier: 50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
Certificate issuer: /CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Certificate serial: 0199345BB527D00B384C0E1519BDCDF135E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
Manifest number: 0A34
Signing time: Wed 10 Sep 2025 16:00:49 +0000
Manifest this update: Wed 10 Sep 2025 16:00:49 +0000
Manifest next update: Thu 11 Sep 2025 16:00:49 +0000
Files and hashes: 1: UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl (hash: +r+VbOmvafE6hGxlCv4oyqD8NMRkvD7sIiLtKFYrwOM=)
2: rB2uaCwrLsHd8QP3gzLrvvAfPiA.roa (hash: rFl9lkx1744U+43ipMxs7m2ICQoiTAYXwAH+fMGwgoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:b5:27:d0:0b:38:4c:0e:15:19:bd:cd:f1:35:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Validity
Not Before: Sep 10 16:00:49 2025 GMT
Not After : Sep 11 16:00:49 2025 GMT
Subject: CN=dd43c62ef81bd879369214c88ce9deb767907f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:c5:41:1b:88:c1:30:21:37:49:10:8b:79:
6f:6e:1c:59:02:37:95:5a:56:99:a4:f1:a7:6b:28:
83:04:7c:a0:64:64:3f:f6:30:58:73:73:12:ff:26:
c5:fd:26:17:cf:21:8b:82:4c:5d:5f:9a:de:51:43:
a8:cd:14:1e:de:97:cb:48:c2:53:5b:aa:da:e1:37:
83:cc:bd:24:28:8a:e2:e8:a0:ce:de:95:c2:fd:f2:
fd:6d:18:8c:5e:47:66:78:bc:41:c4:29:87:29:c6:
66:d1:5f:a5:6d:bd:e0:69:92:e5:d4:c8:08:03:7a:
3f:86:43:aa:45:18:2f:d0:85:ad:a6:79:74:a5:2b:
39:c9:da:ac:57:6b:a2:19:a7:13:a7:cd:e9:49:51:
be:7d:ef:fb:be:48:2d:2e:3d:2d:af:14:31:04:b2:
dd:d6:27:d0:d3:3e:39:8f:34:a0:52:18:10:b1:85:
16:8d:cf:9f:e5:ba:df:72:f7:07:02:4f:d2:34:f0:
d3:33:b9:c3:54:59:66:46:b4:85:47:4a:69:ba:77:
d1:50:0e:d4:ce:65:74:c8:42:0a:47:11:22:54:84:
14:fb:7f:c2:c7:3d:63:81:50:59:53:6e:c0:13:42:
cf:3d:20:30:17:13:25:e9:7c:18:7a:3a:14:4e:17:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:43:C6:2E:F8:1B:D8:79:36:92:14:C8:8C:E9:DE:B7:67:90:7F:4E
X509v3 Authority Key Identifier:
keyid:50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:47:f2:c5:e7:c1:4e:9e:11:61:8e:53:35:5a:6f:da:0b:a0:
25:80:21:b8:96:27:d5:95:e2:ea:04:73:25:9b:82:df:8b:1c:
75:d7:b5:07:52:fc:50:ac:27:ea:14:fb:29:cf:5e:8f:5b:2b:
be:a0:b6:8d:70:7a:71:e4:f0:56:86:86:66:17:c7:c7:2c:89:
89:8d:fa:41:36:fb:17:d7:d2:bc:e3:69:04:3a:fc:b3:53:02:
77:45:8d:cb:ab:e1:29:e9:8d:28:e1:3b:60:42:7d:fb:b1:e9:
0b:7b:d2:d6:9d:db:8b:0d:fd:ce:45:8e:f3:91:ec:c6:54:b8:
0c:02:b1:8a:79:b7:85:69:6a:e5:12:e8:95:67:ca:0a:5c:ae:
3c:84:12:7e:bf:cc:1a:dd:29:3c:7f:c8:bb:c4:23:72:c6:37:
80:6d:bc:3f:03:f0:28:57:2c:66:9f:36:c5:e6:6c:d3:33:4a:
9e:56:df:f7:7e:07:8a:01:8d:e7:38:f2:4f:2a:d4:5a:ad:d3:
cb:cc:04:b7:01:00:67:95:03:9d:33:ea:66:c1:e6:99:51:94:
3b:19:cb:b0:04:f8:71:2f:e3:de:7e:ae:4a:6a:fc:53:d7:30:
a1:38:66:e6:a0:fc:da:24:26:43:65:38:d3:d8:ea:e1:31:37:
4f:30:e5:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0W7Un0As4TA4VGb3N8TXoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwM2Y3M2ZlZmU5ZGJkMTY1NjE0Mzc1YTE4YTM0Y2RjZmI0
YTMxZWUwHhcNMjUwOTEwMTYwMDQ5WhcNMjUwOTExMTYwMDQ5WjAzMTEwLwYDVQQD
EyhkZDQzYzYyZWY4MWJkODc5MzY5MjE0Yzg4Y2U5ZGViNzY3OTA3ZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ/FQRuIwTAhN0kQi3lvbhxZAjeV
WlaZpPGnayiDBHygZGQ/9jBYc3MS/ybF/SYXzyGLgkxdX5reUUOozRQe3pfLSMJT
W6ra4TeDzL0kKIri6KDO3pXC/fL9bRiMXkdmeLxBxCmHKcZm0V+lbb3gaZLl1MgI
A3o/hkOqRRgv0IWtpnl0pSs5ydqsV2uiGacTp83pSVG+fe/7vkgtLj0trxQxBLLd
1ifQ0z45jzSgUhgQsYUWjc+f5brfcvcHAk/SNPDTM7nDVFlmRrSFR0ppunfRUA7U
zmV0yEIKRxEiVIQU+3/Cxz1jgVBZU27AE0LPPSAwFxMl6XwYejoUThcnawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1Dxi74G9h5NpIUyIzp3rdnkH9OMB8GA1UdIwQY
MBaAFFA/c/7+nb0WVhQ3WhijTNz7SjHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUQ5el92NmR2UlpXRkRkYUdLTk0zUHRLTWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kZDU0M2QtZDFmNS00ZjQ5LTg5MGYt
NTk0NGQ4ZWMyNzNjLzEvVUQ5el92NmR2UlpXRkRkYUdLTk0zUHRLTWU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kZDU0M2QtZDFmNS00ZjQ5LTg5MGYtNTk0NGQ4ZWMyNzNj
LzEvVUQ5el92NmR2UlpXRkRkYUdLTk0zUHRLTWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEfyxefB
Tp4RYY5TNVpv2gugJYAhuJYn1ZXi6gRzJZuC34scdde1B1L8UKwn6hT7Kc9ej1sr
vqC2jXB6ceTwVoaGZhfHxyyJiY36QTb7F9fSvONpBDr8s1MCd0WNy6vhKemNKOE7
YEJ9+7HpC3vS1p3biw39zkWO85HsxlS4DAKxinm3hWlq5RLolWfKClyuPIQSfr/M
Gt0pPH/Iu8QjcsY3gG28PwPwKFcsZp82xeZs0zNKnlbf934HigGN5zjyTyrUWq3T
y8wEtwEAZ5UDnTPqZsHmmVGUOxnLsAT4cS/j3n6uSmr8U9cwoThm5qD82iQmQ2U4
09jq4TE3TzDllA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 00:58:26 2025 by rpki-client