Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: MeqAeXe1S0UCJL9P83gd/cOx4lKfFnP7xFhDjCeekdY=
Subject key identifier: 68:3E:15:56:41:47:F4:20:9E:1C:9B:A4:73:44:A4:97:20:3C:38:FD
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 019A51514AAA4E279F15378EA4D26C5D3657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 0E96
Signing time: Wed 05 Nov 2025 00:01:13 +0000
Manifest this update: Wed 05 Nov 2025 00:01:13 +0000
Manifest next update: Thu 06 Nov 2025 00:01:13 +0000
Files and hashes: 1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=)
2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=)
3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=)
4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: kdqTtODF6z+2OpWWKE/RDjehgr+0gdGLaxAVE1NB2pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:4a:aa:4e:27:9f:15:37:8e:a4:d2:6c:5d:36:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Nov 5 00:01:13 2025 GMT
Not After : Nov 6 00:01:13 2025 GMT
Subject: CN=683e15564147f4209e1c9ba47344a497203c38fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8b:b4:93:f6:4b:3c:21:42:a2:5d:26:d4:1e:
04:26:a2:7f:f9:e2:10:0b:be:90:61:f6:f8:63:06:
08:8d:66:b4:2c:73:69:f4:51:44:d3:ef:c9:8a:35:
8b:49:09:cd:08:42:af:e8:4b:2f:08:ae:34:bf:c1:
24:9b:da:ca:1c:b1:aa:f1:5d:db:94:23:e6:6f:82:
d7:78:a1:10:e4:b7:98:ba:60:a3:64:68:a6:56:f2:
e7:e1:15:a7:97:f1:fc:3a:70:50:9a:70:7c:69:f7:
75:78:90:5b:8e:58:bc:ae:5f:81:d8:a7:9d:ed:58:
07:74:7b:21:b4:53:b1:2c:41:f3:29:c6:1c:a6:0b:
6a:1b:80:e5:02:66:54:4b:60:f4:5a:e9:cc:ec:4e:
12:98:ef:59:cd:ad:18:69:e8:ed:41:cb:16:e2:4d:
e3:f9:db:92:8c:1b:77:8b:41:43:6e:86:56:1f:3b:
61:34:62:fd:9d:ff:d9:8d:f1:a0:20:41:11:25:51:
2c:cb:1e:8a:6c:ea:cf:22:7c:0c:a9:99:37:24:93:
68:2f:0f:b6:b9:b7:e8:2c:ea:76:36:5e:65:7c:5a:
10:13:26:70:af:cc:14:0a:9e:8c:30:fa:26:eb:ba:
8d:7e:1c:59:ea:89:b5:6d:06:e7:43:c6:1f:2e:ec:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3E:15:56:41:47:F4:20:9E:1C:9B:A4:73:44:A4:97:20:3C:38:FD
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:38:47:56:52:d0:9a:6e:66:8a:78:8a:37:d7:65:83:66:3d:
1f:c1:76:0d:44:4f:d0:ed:b9:21:6c:b3:8c:da:b1:3f:ae:d9:
0f:3f:37:85:42:a2:0c:8d:d5:a2:1f:a3:f7:6c:bb:98:49:bd:
4e:3f:0d:fa:23:14:b9:ca:a0:23:78:94:7e:7b:cc:1d:e4:51:
57:66:f5:e8:1b:ca:06:14:fe:f1:30:6c:cd:0f:50:cf:fa:d1:
8e:c0:21:f8:aa:21:86:30:85:c1:ff:a9:bf:1e:a2:f3:66:d0:
94:23:7e:91:7b:eb:bc:53:9b:f2:26:b8:92:79:71:d5:85:f6:
eb:c8:1c:91:7f:47:45:b5:fd:21:f9:24:e2:2b:8c:1d:a7:f9:
73:f4:a4:72:c7:7b:a3:98:51:a9:0a:97:0b:bc:fc:b2:5e:a1:
2c:c1:7a:b0:e9:fc:2e:db:03:a7:10:cd:46:30:0b:7b:ee:01:
cb:d6:f1:68:f0:8d:20:32:77:b3:e5:c9:ad:08:a1:3c:f0:e8:
bd:ac:03:d6:52:a5:72:0a:6a:a0:56:90:66:34:a9:01:30:fe:
f7:d5:07:c2:f8:40:f6:ae:a5:67:aa:62:4f:90:74:7f:c4:51:
ee:75:09:39:0d:7e:cc:7b:da:68:7a:d6:70:90:08:b4:91:7c:
8c:22:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:28:52 2025 by rpki-client