Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
File: Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft (raw, json)
Hash identifier: VVBsOW7nKugGK0FLDs4bfIf6iITmBWRaB/Z1rvDveOQ=
Subject key identifier: 29:A6:83:9A:7C:40:C7:A4:2D:25:35:A8:5C:F0:1C:9E:60:03:84:ED
Authority key identifier: 51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
Certificate issuer: /CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Certificate serial: 019A71EE854A2900F6AB353919963E644200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
Manifest number: 0EB8
Signing time: Tue 11 Nov 2025 08:00:48 +0000
Manifest this update: Tue 11 Nov 2025 08:00:48 +0000
Manifest next update: Wed 12 Nov 2025 08:00:48 +0000
Files and hashes: 1: 41DTuek1VatXKqyOZ16zPIzA15c.roa (hash: xDUrI4pP1nTL2y1WCMAWoY6BskvJrsSqrtvmAaoQnEQ=)
2: Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl (hash: 0tK423J0VPsemzwf/lEDIPet0CtMoR3wtokEyhHt1ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:85:4a:29:00:f6:ab:35:39:19:96:3e:64:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Validity
Not Before: Nov 11 08:00:48 2025 GMT
Not After : Nov 12 08:00:48 2025 GMT
Subject: CN=29a6839a7c40c7a42d2535a85cf01c9e600384ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:62:8e:04:8b:57:1d:3e:e1:0d:e4:2c:15:
85:30:47:a8:af:31:24:d1:cd:f3:58:ed:1a:af:74:
7a:0d:71:d1:40:58:41:d9:9a:ec:45:4b:cb:9e:f6:
98:d3:ca:dc:f1:d6:28:cf:3b:be:7b:94:fc:c6:8f:
56:3f:77:68:46:af:93:ed:e0:28:29:3c:78:1e:5d:
f9:e9:37:69:77:c8:ba:02:b9:11:ad:59:ed:53:54:
0b:08:d4:67:d6:9e:91:53:cf:b4:66:d7:b3:80:2f:
76:fd:af:1f:27:1e:38:79:89:c0:8b:c1:1f:dd:66:
4d:7b:25:30:88:17:a4:a1:a8:8e:31:fe:02:44:b2:
a9:5e:c9:ed:67:7e:c5:c7:3d:2b:b7:f4:80:2a:6f:
ee:aa:dd:89:5f:07:36:6a:d2:db:47:27:ef:28:e3:
16:12:c2:c7:f5:52:69:72:96:a2:3c:89:de:78:27:
ef:6e:de:33:e3:1d:5d:57:ce:95:25:df:68:96:62:
58:46:11:85:61:0c:5d:5b:5d:e6:d6:d1:8e:96:57:
81:48:f9:df:70:c8:8d:9f:80:2a:ee:99:18:e9:d7:
43:3e:19:48:31:79:c9:19:25:75:c6:16:19:5b:25:
89:22:ee:1f:09:c7:e0:17:3f:f5:01:b5:1c:2d:fc:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A6:83:9A:7C:40:C7:A4:2D:25:35:A8:5C:F0:1C:9E:60:03:84:ED
X509v3 Authority Key Identifier:
keyid:51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:32:f5:57:c9:04:fd:8a:56:e7:1c:75:1a:ed:3a:e9:da:3e:
24:4c:5c:8d:5f:ae:57:8e:04:8c:55:1a:24:11:6c:23:fb:4a:
f2:e1:f9:fd:14:b9:62:6a:93:19:a2:6c:3b:23:f1:11:ac:63:
d6:86:41:51:12:45:a6:5e:fc:17:a7:5a:45:a3:c6:fe:03:47:
a4:d9:03:10:05:7d:1e:f7:91:3e:50:17:59:db:bc:10:c0:d8:
21:ff:cb:15:85:1b:6c:f9:2e:e8:ad:96:d1:0b:e1:a6:c8:3f:
31:13:21:2e:1c:89:f5:e3:1d:e8:a5:4d:52:2b:31:5f:e3:3a:
96:8d:79:4b:17:da:44:f2:2e:c6:e1:3d:ab:dd:23:b3:4d:38:
9d:63:46:0e:31:2b:ea:70:28:95:38:fd:7c:f6:c4:ca:7c:c7:
57:f5:d4:93:6a:c7:bf:5b:6a:1c:2a:a9:15:06:08:1c:59:4e:
b6:bf:11:e9:c4:af:e0:85:33:21:f7:c8:d9:b7:1b:b4:67:6b:
68:f1:68:a6:2a:18:03:16:b5:63:32:56:3b:71:4c:0c:aa:aa:
62:5b:bc:20:aa:6e:60:65:52:61:d3:2a:34:52:31:ca:a2:4c:
d8:0c:59:74:36:e1:97:69:71:ec:24:60:54:d5:f2:37:74:4c:
3f:22:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:00 2025 by rpki-client