Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File: UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier: a2Pfutq/JlXTXT3S1dVlxIqWMBIYSPFBFmxOEeYG0Vw=
Subject key identifier: CE:E3:96:EA:33:7A:B0:4F:12:3A:8B:DC:8F:D6:62:91:66:77:94:94
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer: /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial: 019A71B8AF2C700F6E519AC773B08E0EE01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number: 076B
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: PdctoMgTw2-Nt4ZPBmRXGu0XZPo.roa (hash: n9lnP0LlXaq1mXYcdy8fdP94AepAw+KQCy1tAj0j/P8=)
2: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: t1q20bD6npn6r6IXVdlGY2EkkQeqAwcvzalVv6jt0MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:af:2c:70:0f:6e:51:9a:c7:73:b0:8e:0e:e0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=cee396ea337ab04f123a8bdc8fd6629166779494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:3e:8d:cf:b6:ee:6c:66:7e:10:ed:14:ae:
a7:12:0d:a2:4a:e0:47:96:75:db:59:8e:b2:58:29:
6e:1d:03:08:ae:76:45:d5:8b:01:13:c0:d4:2e:b0:
0f:44:1d:3c:a9:22:14:9b:ea:a7:a8:89:58:e8:e9:
69:5b:20:e1:6f:9a:ea:4b:e3:2f:81:5e:27:f5:32:
4d:6d:f9:31:ae:a9:91:dc:bf:52:a8:d0:20:f5:b7:
f2:af:03:5f:a6:bc:dd:43:3f:42:06:a6:4b:d7:4b:
49:d4:15:fd:af:99:03:7d:49:0d:22:be:43:63:79:
3f:d0:aa:68:80:a3:15:54:7e:a6:f9:e1:b3:6b:bc:
9a:95:a2:35:17:04:6c:74:d4:81:30:db:0c:a4:56:
1b:15:1b:96:98:02:86:58:c3:f6:78:f7:91:01:27:
33:74:f3:fd:cb:f0:ae:bd:8f:5e:f1:d9:f6:96:ac:
93:a0:f9:c4:b1:fe:54:8d:8f:d7:a3:ab:1b:b7:91:
d9:3d:61:1c:1e:55:d5:9e:10:36:e5:1e:69:76:0b:
a4:57:6c:33:b9:97:96:03:db:2b:0c:db:63:15:94:
d3:5c:54:46:36:43:d0:e6:98:ef:9c:c5:7b:f6:ab:
c2:d7:84:45:95:69:1a:cb:db:4e:25:5c:64:6b:64:
39:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E3:96:EA:33:7A:B0:4F:12:3A:8B:DC:8F:D6:62:91:66:77:94:94
X509v3 Authority Key Identifier:
keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:44:14:4f:37:8e:40:ed:ca:b7:d6:4e:2a:e1:bc:a0:95:c9:
e0:60:5e:cb:25:bb:4d:cd:c8:ed:43:a4:f6:0c:23:7e:98:59:
12:85:00:eb:3b:4c:1f:f2:1b:f0:73:88:11:f6:f8:87:2a:c3:
2a:72:32:4e:b1:15:44:ad:4f:ae:60:2b:fd:4a:b8:bc:56:35:
24:52:c0:7f:95:b8:be:0d:5e:fa:0d:fe:80:e2:53:87:f4:7e:
39:1a:b6:5c:71:94:52:2b:1a:f6:48:79:66:fa:63:50:90:6e:
8b:1c:d9:58:e7:c1:1c:68:ab:81:bf:03:fa:2c:64:76:ec:6c:
ce:8f:a3:d0:64:9f:a7:52:be:a7:48:82:7d:4d:f3:15:ca:80:
0b:15:9f:9e:1e:dd:d4:18:6b:56:ee:c7:e4:ef:f2:a4:41:52:
7b:50:71:54:68:c7:62:ee:d2:8f:ad:18:d0:fa:56:22:ad:2d:
c4:80:4c:df:4f:01:04:9c:fa:43:ba:eb:a1:f6:a2:d0:c9:72:
9e:ca:91:5b:ff:af:05:f9:62:48:33:d8:13:8b:12:28:8b:da:
a4:f4:b1:f0:46:92:7e:0c:36:6c:85:e4:ad:31:76:5b:54:4e:
f7:c1:9e:4a:f5:89:1e:dc:05:1d:0e:9f:8e:8b:dc:e2:cf:df:
5b:68:bc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:26 2025 by rpki-client