Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: 8Lk2h15lgtEJOHiWOGIxa1BOnEWEjUm53RgENgTvyBg=
Subject key identifier: 11:A2:89:B9:01:9F:95:23:7B:D5:55:3B:E8:A6:E3:04:F9:40:3D:15
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 0198D4E063CD074B311A0EF16EC0F4D120E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 0DD1
Signing time: Sat 23 Aug 2025 03:02:12 +0000
Manifest this update: Sat 23 Aug 2025 03:02:12 +0000
Manifest next update: Sun 24 Aug 2025 03:02:12 +0000
Files and hashes: 1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=)
2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=)
3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=)
4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: UigS45gdD8AY5jm7sVHlvLjjZnSftLXOjvZvcVyVZ2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:63:cd:07:4b:31:1a:0e:f1:6e:c0:f4:d1:20:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Aug 23 03:02:12 2025 GMT
Not After : Aug 24 03:02:12 2025 GMT
Subject: CN=11a289b9019f95237bd5553be8a6e304f9403d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:0a:6d:7c:00:9a:9b:69:0e:aa:fc:c4:e9:
9f:37:63:ac:39:f4:71:70:a1:68:d2:da:2b:cc:bc:
0c:b1:61:36:a8:2d:f1:42:0e:b0:7f:61:ff:b6:aa:
35:05:68:a8:90:c1:55:02:eb:dc:2d:d9:4a:fc:ac:
36:c6:69:fd:7e:78:92:4f:cd:b5:b1:ad:f8:c4:7d:
e3:9c:01:59:c6:24:f8:cd:a1:00:47:de:30:e4:88:
fa:11:57:d0:60:08:41:1a:ba:3d:2d:d3:3f:7d:4b:
62:35:ec:50:8c:a7:9a:96:f8:74:5b:bb:67:71:c7:
19:4e:b5:93:d3:a0:4a:1b:c5:f5:a8:ec:54:86:e7:
e8:b7:05:24:99:f0:7f:37:b4:b5:7c:41:f2:a3:42:
8e:09:1f:b8:30:18:9b:a3:42:e9:8c:0d:55:df:22:
cb:3e:98:3e:da:8f:9a:c7:f2:56:83:a3:67:4f:cc:
1b:be:dd:4f:4c:65:d0:c3:f7:15:8c:79:d8:4d:01:
b9:00:b0:02:cf:32:1f:3a:45:2e:88:e1:65:59:63:
ff:82:7e:c0:c0:a8:09:32:cb:33:30:6c:8d:bf:4c:
9b:6e:29:91:ff:a1:35:59:40:3c:42:bd:d2:02:96:
35:3b:41:b5:bf:79:39:e1:5f:b2:f1:ea:92:15:2a:
e8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A2:89:B9:01:9F:95:23:7B:D5:55:3B:E8:A6:E3:04:F9:40:3D:15
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9e:21:62:75:24:24:f1:ac:1c:b8:11:4c:84:34:60:5b:e4:
e4:a7:15:87:61:6b:41:e8:f2:5a:e2:f5:89:49:86:63:b1:d0:
0b:53:51:d0:e2:63:6e:fb:7b:85:50:ac:69:80:7e:c4:74:6b:
34:b6:d2:5b:03:e7:88:a4:0a:58:56:98:b4:c1:2d:1f:2d:ce:
8e:e1:ff:53:a6:91:00:6e:19:ad:f4:55:b5:0f:d3:38:fd:99:
be:81:4b:2a:89:27:36:26:d3:90:1a:c5:11:e0:c7:45:a2:61:
8e:d8:b1:ba:2e:e1:57:eb:1a:06:f4:ff:6b:59:97:2c:35:e0:
1d:49:ac:06:63:4c:75:30:83:77:9d:e4:8e:b7:5f:52:67:0e:
24:d8:28:79:c2:2f:c3:81:3e:e0:99:b9:8f:b5:75:b6:69:02:
c2:eb:8c:d5:8a:69:92:f3:7d:75:7c:01:00:ed:bc:67:88:0e:
0e:dd:f2:11:4c:0c:eb:8f:77:94:83:52:cb:f4:68:5e:db:7e:
f9:02:2e:c6:fb:c8:9e:e8:0a:34:ad:53:e4:08:09:06:ff:ab:
4f:a4:dd:76:3c:dc:c8:98:96:b5:07:31:38:90:33:ef:63:84:
39:94:80:46:4f:da:2e:ce:e2:66:3a:7b:5a:a8:8f:f1:08:2d:
ad:2b:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:00 2025 by rpki-client