Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
File: udkwX8vVnNpLaPiI32AgSFt06YI.mft (raw, json)
Hash identifier: HEJg/BNjlr8cDANyO1Jw4CwUdobCIHDe6DLDSAVhbU8=
Subject key identifier: 9E:79:1E:B4:AE:19:9D:51:36:78:A7:55:B7:7E:2F:BA:28:1F:31:D3
Authority key identifier: B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
Certificate issuer: /CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Certificate serial: 019749314B47D138AB28E8EA7A935AF3C44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
Manifest number: 06EF
Signing time: Sat 07 Jun 2025 07:00:56 +0000
Manifest this update: Sat 07 Jun 2025 07:00:56 +0000
Manifest next update: Sun 08 Jun 2025 07:00:56 +0000
Files and hashes: 1: Ke58ENa77TOZvRtwmJBaIvER2CI.roa (hash: YAwwFY3XBNd2hH15n2h8M26LxyaVgzcjkKLQxfxrMs8=)
2: udkwX8vVnNpLaPiI32AgSFt06YI.crl (hash: 2sddn9wGCc/rqSpITE7kyGKof/OldTP8EwDRqu4Q5CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:4b:47:d1:38:ab:28:e8:ea:7a:93:5a:f3:c4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Validity
Not Before: Jun 7 07:00:56 2025 GMT
Not After : Jun 8 07:00:56 2025 GMT
Subject: CN=9e791eb4ae199d513678a755b77e2fba281f31d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:d8:53:37:53:6b:b4:53:bf:6a:a0:95:c0:
1f:8d:c2:31:db:5f:ce:3f:a6:0e:7a:ee:4e:f8:f6:
09:ec:81:ac:75:43:51:f4:0b:b1:aa:42:75:95:3e:
dd:5b:e8:46:e3:42:c6:8f:8f:e3:0b:fb:67:4f:f8:
11:95:2c:9a:a7:51:15:01:98:14:bf:3f:9b:ee:e5:
0d:fa:38:f5:48:e0:b3:e6:b1:4b:d3:b7:66:63:d9:
7e:31:f4:82:43:d0:2b:20:a3:09:3f:7c:5c:1c:bd:
e1:75:b1:fb:88:26:ea:87:a6:18:3a:c0:08:be:f4:
a0:0a:b9:fe:12:a1:6f:e9:19:e0:63:08:ad:b7:bf:
42:7e:9e:ab:3a:9b:57:9a:4e:b4:ea:02:98:da:ef:
51:44:b6:f3:ea:c5:71:3f:45:d8:1b:11:16:0f:11:
05:e5:b6:bf:c1:5a:ea:1f:6c:3b:15:15:25:7d:a3:
1d:28:62:a8:ab:dc:ad:d4:6f:4b:6b:3b:fe:2b:ed:
d6:1e:88:cb:7f:a6:9b:e0:f4:c8:05:1a:47:10:69:
66:d2:2d:43:b3:7f:f2:55:36:29:e8:5f:54:6b:e9:
48:62:ec:a5:0a:c6:66:bb:9d:2b:17:75:15:82:af:
2e:67:80:f5:e2:7a:8a:b9:4a:00:c8:d7:52:4f:ba:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:79:1E:B4:AE:19:9D:51:36:78:A7:55:B7:7E:2F:BA:28:1F:31:D3
X509v3 Authority Key Identifier:
keyid:B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b5:9c:73:5f:fc:0f:61:3c:04:3a:a8:6b:86:f6:bb:41:29:
8f:12:d3:0d:7f:ec:45:59:29:f0:6d:da:80:db:14:94:ca:b9:
40:73:11:eb:47:b6:fe:c5:7c:46:9a:71:56:8e:da:26:f2:d0:
a6:5d:ba:82:6b:03:67:ae:de:6b:42:f3:d5:32:e5:cd:1f:75:
e0:17:dc:dc:12:12:5b:80:2c:9d:4c:d5:b4:5c:5a:e9:e5:40:
9c:42:7c:14:74:d1:85:ab:55:18:15:a2:31:42:5d:c4:14:79:
66:8f:ef:61:95:70:f0:c0:f8:66:d6:3f:00:02:82:e3:f4:d3:
8a:8a:36:18:7d:96:08:45:a2:fd:3f:05:68:a2:7b:d3:b5:0b:
c2:4f:7b:74:97:48:66:c1:af:69:32:29:7d:ce:2b:75:7b:b0:
e8:92:82:ee:c4:a1:39:15:9d:57:c9:44:6d:cd:b8:d3:1e:0d:
1f:51:66:3a:f8:2d:cf:ff:1a:ea:ee:18:0c:56:04:05:3f:d3:
82:5a:e6:ee:77:82:0b:fe:26:b2:20:1f:05:61:3e:66:1c:b9:
c5:84:6e:a7:3e:60:b0:04:0d:6c:08:43:c6:22:1d:88:42:b7:
80:c4:d5:ab:7a:cf:7d:96:bd:cc:0c:2a:58:3d:39:4e:28:8a:
6d:4c:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:05 2025 by rpki-client