Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: HmGhu1vAcYYOm0VHokfXvOITZm72Ieu6shTifq7k/8U=
Subject key identifier: A2:CA:BE:07:1F:2A:A3:2A:5E:52:51:9E:5B:45:06:9D:0E:A0:98:1B
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 0199FA6A3BE5C85614A95BC487510FF3AA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 0E69
Signing time: Sun 19 Oct 2025 03:01:30 +0000
Manifest this update: Sun 19 Oct 2025 03:01:30 +0000
Manifest next update: Mon 20 Oct 2025 03:01:30 +0000
Files and hashes: 1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=)
2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=)
3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=)
4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: XfWmwTGR4aa0g8vfiJWn7MkAzPY/Q9Wzw4lxFdGZs8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:3b:e5:c8:56:14:a9:5b:c4:87:51:0f:f3:aa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Oct 19 03:01:30 2025 GMT
Not After : Oct 20 03:01:30 2025 GMT
Subject: CN=a2cabe071f2aa32a5e52519e5b45069d0ea0981b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:f7:b5:2c:9e:ae:80:19:1d:a2:41:c2:92:
3f:9d:70:17:97:ab:14:96:e5:07:0e:9d:78:4f:87:
fb:9d:a8:d5:f2:e9:71:b0:ba:64:8d:08:52:43:02:
bf:7d:f5:aa:bd:46:c6:b1:0c:9c:48:65:28:4d:e9:
44:30:ec:1d:91:df:87:94:69:e9:e4:90:e6:12:a3:
17:fe:51:fb:e6:38:33:3d:62:13:71:71:ac:e8:6c:
1b:49:1c:af:c3:da:a1:1c:c2:b4:8e:96:56:0b:b7:
90:66:11:ad:14:ef:cc:bc:aa:91:72:56:4f:96:81:
c1:d6:ca:a6:d8:02:64:06:8a:1f:54:70:54:73:1a:
aa:89:3b:eb:50:14:8e:9c:e0:0d:44:8d:4a:e3:7e:
85:35:d8:e4:13:fb:ed:4e:c3:eb:4e:f9:9d:6b:0d:
ce:c9:9b:b2:3d:24:77:58:43:fa:11:8c:4f:77:5d:
63:ee:97:86:b4:0f:d3:fc:e5:e4:24:62:3d:f6:1a:
39:26:8e:cf:8d:52:cc:b9:a3:60:b0:d3:e4:16:01:
75:80:2c:7e:cb:ee:84:87:ac:52:be:7a:7b:93:ba:
00:79:8d:84:04:39:94:4e:2c:56:2f:75:d6:39:1b:
8a:31:90:5a:52:2b:62:bf:b7:f7:5f:da:cc:b1:ff:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CA:BE:07:1F:2A:A3:2A:5E:52:51:9E:5B:45:06:9D:0E:A0:98:1B
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:34:e7:4f:a2:75:5d:9f:4d:98:60:4c:69:df:02:b8:6b:3e:
a9:13:e3:4a:58:06:8b:b1:e7:aa:17:9e:0a:bc:38:1c:7c:de:
90:ff:b7:e2:e8:fb:58:09:a0:5b:de:47:63:3b:2c:49:77:26:
e2:a5:23:8e:d0:68:35:9f:b9:f3:47:9e:92:04:30:e6:20:72:
2b:6c:74:5e:54:b3:0f:25:ae:b7:3e:34:b2:67:82:5f:48:38:
17:49:41:34:86:60:4f:02:26:67:59:dc:18:d4:80:2a:85:f1:
bc:9d:f8:98:11:70:af:30:6b:3d:4d:d7:4d:38:83:87:b2:80:
c7:f1:6a:c6:de:82:b4:d8:61:e4:40:a2:7e:81:a3:9a:80:ab:
ae:04:21:e6:94:2e:49:8d:ff:ef:7b:f3:ae:62:fe:ac:38:93:
11:84:70:d1:75:a6:0d:b4:d6:67:f8:ec:29:01:58:77:29:7b:
91:72:47:0c:a6:27:8c:e6:14:fd:92:3a:5c:e1:d9:05:bc:47:
a3:17:18:47:41:9f:4a:ab:19:91:ad:f0:17:c5:ee:6c:5e:c9:
7c:b3:48:0f:8b:75:83:22:d6:97:ea:75:8e:f2:83:76:23:f2:
71:f3:bd:96:4d:8a:1b:1d:a5:12:6c:f0:ba:92:22:00:22:dd:
70:e9:79:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:29 2025 by rpki-client