Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: rVPnWLLJwkMWPsqOGbwBTPLiZkpWGIT+Y259Tw8FqjY=
Subject key identifier: 85:73:9E:7F:25:47:EA:E4:91:80:C6:0C:C0:D7:0A:F6:79:CA:58:C6
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 0197C2A532AA0FED48ED41B5B901C7499E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 0D43
Signing time: Mon 30 Jun 2025 21:01:35 +0000
Manifest this update: Mon 30 Jun 2025 21:01:35 +0000
Manifest next update: Tue 01 Jul 2025 21:01:35 +0000
Files and hashes: 1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=)
2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=)
3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=)
4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: zi6TUiQ/xdrmL+1yqaBI55RKXivGU6MnKosTrG5dCac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a5:32:aa:0f:ed:48:ed:41:b5:b9:01:c7:49:9e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Jun 30 21:01:35 2025 GMT
Not After : Jul 1 21:01:35 2025 GMT
Subject: CN=85739e7f2547eae49180c60cc0d70af679ca58c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:eb:83:01:ca:7a:73:f0:97:50:89:7c:28:09:
74:33:03:db:2e:61:6f:39:84:16:e0:2b:49:10:ba:
33:31:e2:4a:75:ac:10:f1:e8:9a:9d:1b:f6:dd:28:
e9:0e:88:04:c7:70:46:da:cf:f9:a0:11:05:70:a1:
b3:1d:2b:23:37:5a:ff:51:fd:e5:21:58:41:10:11:
6f:6d:eb:16:99:38:71:52:16:6d:29:e6:2e:86:5e:
3e:2a:2c:6c:2f:74:88:7f:41:3e:e0:d7:39:63:82:
dd:95:c5:b5:12:87:7c:0c:e7:32:f9:ae:9a:52:24:
89:0a:2f:a8:58:3c:a3:39:77:54:eb:90:5d:b8:ea:
28:bf:3c:fa:03:0c:b4:93:3a:fe:21:ff:fc:96:dc:
64:61:96:f7:ae:48:c9:5f:18:57:89:aa:4e:6f:c2:
e5:eb:83:97:9f:9a:f9:0a:c7:11:96:38:32:0c:cf:
73:42:49:d3:69:30:d4:44:ac:95:08:2f:f7:a1:f8:
ce:11:b1:f1:66:3d:f6:78:ef:7e:97:9c:aa:ea:6e:
36:9b:9b:47:b9:98:22:e5:a0:02:07:26:fd:48:77:
11:c7:d3:92:38:88:fb:6d:93:6b:a3:3b:00:d6:18:
4f:64:5e:39:88:29:e8:63:6b:77:51:d7:22:b8:9c:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:73:9E:7F:25:47:EA:E4:91:80:C6:0C:C0:D7:0A:F6:79:CA:58:C6
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:01:95:fb:a3:10:cb:d3:68:cd:2f:4b:f0:35:ce:0f:35:fd:
ba:85:f8:64:5e:4a:d9:cf:b2:f8:4d:cd:e9:ec:7d:ff:36:9a:
60:8b:73:9d:fe:41:28:7d:77:ad:32:d3:3c:5a:bd:f3:97:74:
c5:a0:6b:a3:ce:32:f0:d0:02:b0:ac:32:cf:9d:5b:d9:7f:ec:
c6:e4:a2:96:34:b7:7e:e3:5d:ec:41:71:e6:fe:7e:fc:9c:a4:
ec:da:c8:42:20:3f:ca:bc:08:fd:3d:2a:f1:12:4c:ce:f4:33:
ef:a8:f6:1f:3b:7a:11:6d:04:f9:ee:db:6d:4c:47:2a:7d:47:
78:d3:b5:04:3a:dd:3c:60:d5:01:95:6f:a6:e0:d6:ed:91:bc:
37:b4:06:26:af:e9:00:8c:b0:ec:25:e4:25:08:69:84:ff:1d:
ed:3a:66:c8:6d:b0:5d:60:96:21:b7:5e:7b:7c:a8:63:87:4e:
c1:15:df:d0:a5:95:eb:8b:c6:57:aa:10:a0:7b:f9:f4:59:b0:
e8:a4:e4:6c:b2:0e:97:63:1a:9c:dd:1b:b7:57:54:6d:8b:2f:
0c:32:b4:0a:38:e1:01:e7:82:27:81:7b:8e:c7:92:fe:87:50:
4d:b2:dd:d2:4a:46:f5:7a:a1:0d:de:0c:92:72:41:c9:43:f4:
ba:7e:f4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:06:26 2025 by rpki-client