Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: abI26aw+9+aldS2JPoQbF8XNXfDLY0Q6DlMn1SgYytk=
Subject key identifier: E1:CC:D2:D1:A2:25:2C:72:9B:C4:BA:66:25:C3:3D:36:BC:28:CD:BB
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 019849D38CF557A41AD61B38F05CECBC79B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 0D89
Signing time: Sun 27 Jul 2025 03:00:57 +0000
Manifest this update: Sun 27 Jul 2025 03:00:57 +0000
Manifest next update: Mon 28 Jul 2025 03:00:57 +0000
Files and hashes: 1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=)
2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=)
3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=)
4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: oNGepoLANnxzIu6AwWgIymPw92tqDNsDD/XhcHVRoHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:8c:f5:57:a4:1a:d6:1b:38:f0:5c:ec:bc:79:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Jul 27 03:00:57 2025 GMT
Not After : Jul 28 03:00:57 2025 GMT
Subject: CN=e1ccd2d1a2252c729bc4ba6625c33d36bc28cdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:23:ca:95:63:81:a6:7f:a6:59:a4:73:41:
a7:1c:0f:c8:a4:d7:96:53:8d:73:43:b7:0d:de:b1:
be:40:92:dc:ac:37:59:cd:a5:9d:55:80:04:b8:2e:
e8:d5:db:3c:bd:19:6b:5b:a4:d7:32:e0:80:34:c7:
e2:01:50:eb:da:d4:10:cc:d0:e6:a5:ba:8d:e9:a1:
05:8c:a3:5f:f9:08:4e:88:84:f6:b7:e6:55:3e:df:
87:af:5d:9b:95:8e:65:9b:6f:b1:95:c9:c5:90:ad:
53:2e:0c:66:5e:2e:79:eb:18:e3:d0:54:fe:30:d0:
dd:83:1b:64:a1:e7:a3:2d:b6:d1:ed:44:bf:ec:99:
b7:3a:91:db:c3:54:33:93:1e:24:52:c5:3f:cf:12:
21:fa:8b:7f:6b:64:8d:70:80:91:c1:84:42:b9:ff:
4c:91:56:de:a9:7c:8b:b2:74:6a:f3:68:eb:c0:40:
1d:64:e3:1f:f1:21:b7:14:4b:a7:d0:5a:b8:d8:84:
2a:30:41:b8:17:fa:c8:2b:b3:c0:e8:d5:71:84:59:
00:88:ef:f3:42:8f:61:c0:9f:5b:1b:6c:b8:36:8c:
1b:a2:17:6f:f3:15:e3:09:b5:3a:0f:90:a6:4e:ab:
08:bc:9e:e2:9c:d8:04:6d:28:97:67:de:57:b9:32:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CC:D2:D1:A2:25:2C:72:9B:C4:BA:66:25:C3:3D:36:BC:28:CD:BB
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5d:fd:4c:48:88:6a:b0:b0:61:ea:da:62:09:ae:4b:77:6a:
6d:67:12:1d:a6:95:94:08:5b:8b:d4:21:75:3f:48:f7:1e:e9:
f5:61:08:a5:a9:16:31:3c:eb:6a:36:59:32:e3:53:70:c1:fb:
38:c4:23:bf:52:83:d7:4f:2d:37:bd:12:85:d1:ef:ba:b3:45:
0d:57:ed:2a:00:d6:bb:d0:da:b3:34:80:84:20:d7:fc:5f:35:
be:6e:d8:63:3e:ed:49:f3:fe:69:bb:91:2e:cc:39:06:a0:d5:
03:20:88:20:74:72:15:a8:1f:4a:72:bb:2d:8d:19:16:a4:4b:
f6:6a:6b:f6:51:99:13:7d:25:bd:8a:d1:ea:66:20:bc:23:73:
7f:b4:c9:73:a1:c4:44:a5:40:72:ea:09:bd:17:77:c0:ac:8c:
bb:9a:2e:c9:43:e5:e9:c0:01:bd:fb:04:cb:f0:90:a8:ac:c1:
8b:18:3e:df:25:51:c0:c6:e2:60:50:0d:8d:c4:a8:bc:22:86:
e1:93:4d:1d:dd:b6:6a:9b:2d:28:e1:b7:20:3a:8d:98:7e:fc:
1c:46:77:5c:90:68:09:fc:fa:e4:b1:4f:13:a0:c4:7b:af:22:
da:77:15:e4:83:69:24:c0:93:30:e8:07:35:ef:62:ad:3c:8b:
a2:7c:f4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:21:28 2025 by rpki-client