Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
File: UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft (raw, json)
Hash identifier: 8+TlFCQGbUMSxSB8MznUDe19vbIan2z5uCCOSxxsXCg=
Subject key identifier: F1:46:C3:49:96:47:6A:C7:8F:F5:78:96:D0:E3:79:4C:27:B7:23:0A
Authority key identifier: 50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
Certificate issuer: /CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Certificate serial: 019A23D38D3AF487FE8EBD50B538E463E806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
Manifest number: 0AB0
Signing time: Mon 27 Oct 2025 04:00:58 +0000
Manifest this update: Mon 27 Oct 2025 04:00:58 +0000
Manifest next update: Tue 28 Oct 2025 04:00:58 +0000
Files and hashes: 1: UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl (hash: MbuUAl0iDhZFQD70XSfaW0ICW2khTEyVc0L6RQ9Lziw=)
2: rB2uaCwrLsHd8QP3gzLrvvAfPiA.roa (hash: rFl9lkx1744U+43ipMxs7m2ICQoiTAYXwAH+fMGwgoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:8d:3a:f4:87:fe:8e:bd:50:b5:38:e4:63:e8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Validity
Not Before: Oct 27 04:00:58 2025 GMT
Not After : Oct 28 04:00:58 2025 GMT
Subject: CN=f146c34996476ac78ff57896d0e3794c27b7230a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:b3:98:3a:2f:82:6e:38:14:35:40:2a:22:
9e:1b:65:47:e5:6e:54:c1:e0:7d:76:ad:ff:df:47:
b4:69:04:cf:0c:76:82:76:71:45:8e:54:48:e8:60:
24:15:18:f0:ef:c5:65:54:ae:3a:06:33:b2:fa:10:
d1:21:dc:a0:eb:88:61:b4:11:98:66:17:8d:fd:3c:
11:55:b9:b7:09:03:dc:c1:e5:3e:12:f2:c5:32:af:
96:1f:cf:db:cb:24:a9:f5:da:d9:90:c4:6c:49:4e:
8c:9a:2f:fc:94:85:fe:4d:94:1f:c4:f7:a7:1f:84:
9c:79:13:20:71:d8:bd:36:32:f1:2c:64:36:85:13:
ae:a0:6f:bf:8d:8d:a7:11:59:06:54:4b:8d:49:4b:
b1:fd:18:56:7c:af:dc:44:61:53:2a:80:27:9a:b6:
9f:8e:26:a4:00:4c:21:74:34:4b:4e:70:ef:f9:d4:
52:f1:0d:73:4a:57:88:d3:d3:51:b3:96:d7:a7:f2:
84:60:19:44:6f:4d:0a:6f:75:53:09:d8:61:d1:2f:
91:fd:b7:91:2a:dc:48:d6:f4:46:5b:91:cd:e9:08:
23:11:70:cc:79:92:ca:90:85:55:21:de:86:f4:53:
58:bf:13:ae:50:8c:b9:be:9e:ec:a2:02:0e:7d:63:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:46:C3:49:96:47:6A:C7:8F:F5:78:96:D0:E3:79:4C:27:B7:23:0A
X509v3 Authority Key Identifier:
keyid:50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9d:ec:7e:1a:37:52:59:f1:87:61:ea:68:de:f8:5b:5b:7c:
6b:66:2d:a5:73:43:2b:b5:d1:29:13:be:1a:e9:2a:43:85:fd:
a6:7b:59:34:45:6b:df:c7:8e:03:40:10:2a:7e:ce:dd:70:60:
8f:10:50:d6:e0:1c:fa:31:8f:93:5a:2f:a0:3a:b0:ef:7a:8d:
84:f0:2a:4e:1a:74:e2:b6:46:35:00:19:2e:53:7c:3f:65:4f:
b9:e8:7e:b8:c9:4a:3d:b5:87:8a:90:8e:94:54:0d:58:f5:dd:
0a:3d:eb:d8:6a:83:fc:db:cb:23:69:8f:ad:5b:ea:e6:1e:3d:
f5:19:bf:01:b4:a2:dc:51:68:9a:0a:aa:05:e7:1f:c9:3b:e2:
69:a1:7c:04:aa:a2:f9:e1:a5:23:a5:10:7f:7c:15:f0:7f:eb:
20:80:5e:78:5a:a5:77:cd:29:d9:d5:8b:88:67:a0:56:46:d1:
82:d8:84:0d:00:d9:d9:26:8d:9a:1f:42:19:55:d2:c4:69:c5:
a3:02:d0:7a:c1:94:58:b6:3f:d0:61:c4:c7:68:b7:9a:b4:37:
dc:a0:21:4a:14:b8:d3:ca:d2:c7:f1:e8:c9:08:1f:56:57:c8:
57:64:e9:42:eb:41:0d:a5:e6:c6:65:db:6d:be:12:52:fe:39:
5b:fb:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 13:42:56 2025 by rpki-client