Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: rm9WG9kP8D5RE+sZm0YoTr/g+g+m02pQ+fe61Lg3zps=
Subject key identifier: 90:DE:E9:73:7B:29:0C:64:E3:15:A1:61:06:FA:E2:1C:A8:F2:35:AE
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 01987DF891EADD1D31FC6A7B47F6EFACCCA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 0DA4
Signing time: Wed 06 Aug 2025 06:01:38 +0000
Manifest this update: Wed 06 Aug 2025 06:01:38 +0000
Manifest next update: Thu 07 Aug 2025 06:01:38 +0000
Files and hashes: 1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=)
2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=)
3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=)
4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: W6dT4OuvubIIdncNPC6erl12KqDfcw9rrTfIvfofNP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:91:ea:dd:1d:31:fc:6a:7b:47:f6:ef:ac:cc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Aug 6 06:01:38 2025 GMT
Not After : Aug 7 06:01:38 2025 GMT
Subject: CN=90dee9737b290c64e315a16106fae21ca8f235ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:0b:d7:61:ec:79:05:5b:f0:ca:5f:5f:2d:
a2:c5:8a:c1:c1:12:68:a6:b4:ac:47:ba:2c:81:33:
19:23:69:fb:e3:37:17:aa:51:00:22:fa:2d:f3:c8:
a8:33:f6:1f:e1:8f:00:2d:ce:1d:89:20:34:14:ce:
62:05:c6:4f:0e:7d:ac:81:1f:21:0d:55:60:4f:30:
93:2c:eb:ef:5b:2f:7a:22:05:6a:33:8b:9b:e6:71:
2e:b2:e8:fe:47:fe:d7:2d:5c:5b:39:ba:15:cf:ab:
21:88:3f:f8:90:32:fc:34:53:27:87:af:50:15:a8:
c6:00:13:ff:1a:27:0d:e0:32:66:65:b7:42:90:19:
97:e0:06:30:ab:1a:7a:72:71:6e:f5:7b:4f:3c:68:
e8:c7:7f:6b:08:e5:cd:24:5a:42:a6:90:b2:0c:09:
aa:f3:a5:60:b7:90:19:ee:43:0d:15:14:c3:c5:af:
7e:4b:54:e6:b7:dc:df:db:5b:43:f7:e4:b3:bd:4a:
be:dc:74:0d:d9:e0:10:91:f7:8b:b2:be:ca:df:e3:
c7:94:27:46:06:17:b0:d0:45:18:44:36:90:bb:72:
2c:b5:00:6a:ad:1c:2e:34:33:26:53:9c:49:30:20:
86:ab:96:54:ab:39:f2:91:bd:ae:9c:56:9f:f9:c0:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DE:E9:73:7B:29:0C:64:E3:15:A1:61:06:FA:E2:1C:A8:F2:35:AE
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f8:c8:9d:1d:51:26:34:12:af:36:33:04:a0:d7:9f:e3:04:
45:65:bf:ad:e0:3c:94:ff:20:eb:4c:6f:1c:68:52:2e:79:f0:
60:ea:ce:65:f1:ca:08:c8:99:7c:da:fd:5f:c5:0e:19:36:93:
af:b0:62:09:09:ea:53:a3:2c:00:8a:11:2a:2f:3e:56:e4:e3:
23:60:c4:9c:9f:9b:63:43:18:4c:42:e4:41:27:df:4b:db:ee:
ed:c4:60:ff:07:48:ce:3c:3b:75:99:1d:c9:fe:db:d9:c1:86:
b0:74:40:c5:dd:e4:ef:69:47:46:b8:90:63:d7:f0:64:b7:e8:
8c:b4:3f:03:4e:f4:62:e0:b4:5d:57:79:57:d6:31:0b:f0:f2:
c6:26:99:e8:52:c9:e5:ca:dd:da:a2:bc:b5:01:11:1d:81:5e:
19:ab:f8:28:47:dc:b0:ca:88:e9:07:0d:19:d8:fa:0d:49:81:
2c:7b:1e:02:80:21:d4:fa:0b:75:fe:a2:24:96:fe:2a:4e:03:
5d:b2:17:90:98:cb:e7:7f:64:31:82:8d:2f:5b:11:74:32:77:
1d:b3:79:e8:9c:92:cf:e6:02:ab:f2:c0:3f:29:fd:63:de:62:
df:f3:25:f0:e9:be:0d:4c:d8:6e:3d:1b:e3:6c:01:81:23:9e:
3a:cb:e2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:13:24 2025 by rpki-client