Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
File: uDtc22Xsxb10bYt0mCgxptjcEFM.mft (raw, json)
Hash identifier: B6wJkcYV9YQ3+fVRr5eXd5hthzHgEogd7tc8xQW9tl4=
Subject key identifier: D3:5D:44:9C:80:48:D0:2D:B5:D6:30:5D:F5:4D:D5:8C:8F:24:41:D4
Authority key identifier: B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53
Certificate issuer: /CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053
Certificate serial: 019A22898D8747FEA7934335B09065369B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
Manifest number: 0F74
Signing time: Sun 26 Oct 2025 22:00:31 +0000
Manifest this update: Sun 26 Oct 2025 22:00:31 +0000
Manifest next update: Mon 27 Oct 2025 22:00:31 +0000
Files and hashes: 1: N3q6u0fJAm5cfueMeHqWslOkGeg.roa (hash: PA7XmdPesUmpMNoT7zqJAR9d7u3yrzJY6Ip8rCLxobU=)
2: uDtc22Xsxb10bYt0mCgxptjcEFM.crl (hash: Axu+1ykceqKF+flKi++jAZU0M4nbg46eEW5iEAM3YMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:8d:87:47:fe:a7:93:43:35:b0:90:65:36:9b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053
Validity
Not Before: Oct 26 22:00:31 2025 GMT
Not After : Oct 27 22:00:31 2025 GMT
Subject: CN=d35d449c8048d02db5d6305df54dd58c8f2441d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:52:97:f0:7b:e5:31:c4:23:83:43:64:ac:
f8:42:29:b9:c8:1c:f1:f6:53:a3:7b:d8:70:36:df:
d6:8e:bd:3f:bd:95:d7:63:3c:a0:1f:62:e5:d9:05:
e6:fc:04:b8:26:80:20:86:4a:45:ae:30:8a:d4:36:
56:0a:82:86:0c:f9:31:7d:d3:aa:c9:eb:96:77:c1:
a6:38:ac:b6:c1:93:2a:e5:eb:9a:fd:73:61:c5:7d:
d0:97:6a:18:26:fe:c9:13:6c:33:a6:95:94:6f:f3:
e7:36:5f:ab:f4:15:3f:01:2c:9c:0b:82:82:70:22:
17:4f:a2:c1:9a:be:31:98:4c:3b:d6:8a:40:8d:26:
fa:88:44:c4:62:9d:37:af:1b:e2:f7:3d:9c:f6:dc:
c7:a9:e6:63:14:5b:bd:c1:f5:18:f2:5c:e8:3c:8b:
a5:7f:d4:4e:ca:75:a9:32:29:30:96:84:84:61:c4:
ae:57:b3:9a:1a:30:de:9f:51:30:a7:7e:c5:1d:0d:
85:2a:d1:4b:ed:5e:fd:fc:a6:ef:03:eb:ff:d4:2e:
03:a9:75:01:eb:f8:2a:24:35:5d:8f:c6:bd:ca:7e:
7a:8b:2b:58:73:06:91:9f:f7:2f:98:cf:6b:b1:de:
8f:6b:2a:b8:bd:7a:3f:2b:8b:0c:29:88:1e:ea:83:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5D:44:9C:80:48:D0:2D:B5:D6:30:5D:F5:4D:D5:8C:8F:24:41:D4
X509v3 Authority Key Identifier:
keyid:B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:24:1e:65:94:4f:34:49:f1:8d:cc:a0:e9:d9:37:a0:a0:44:
02:38:c5:cc:1d:23:be:44:90:6b:5f:6c:42:b2:7c:83:8e:9b:
56:f0:90:bd:45:84:57:56:15:ab:31:30:ae:6c:e3:c0:b8:b0:
cc:3f:e3:24:8b:e2:0f:f6:e9:36:8b:b4:e1:80:22:4b:60:af:
74:7f:b5:a1:f7:b7:02:58:66:05:42:d4:93:36:85:3d:4e:ad:
a4:14:9c:75:cd:42:a2:d3:dd:80:73:fc:21:44:ed:9a:79:8b:
f2:b0:c6:99:3c:8b:e5:9a:dc:30:ed:7e:27:be:7c:5c:c4:76:
cb:76:15:98:93:29:c3:8f:c4:54:46:a2:d5:e1:2b:6e:42:e4:
6d:c9:8a:28:f6:ae:22:b7:80:d6:0e:5c:ce:23:a3:75:5c:7f:
f5:e8:80:11:61:74:06:68:20:28:42:0b:30:08:8c:fc:c5:54:
f2:d3:b8:6c:2c:42:77:8f:88:e2:8b:6b:b6:77:b9:e8:a7:ae:
8f:93:cf:2e:e2:be:73:53:1a:fb:df:72:0c:63:9b:91:c5:6d:
1a:57:4a:63:5e:20:f0:72:e6:bf:06:a3:f0:e7:e1:99:e6:8a:
12:2b:04:ea:91:e3:71:1e:fd:a3:e4:c2:1e:01:51:df:6b:d3:
49:df:ca:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:25 2025 by rpki-client