Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: KgGNRLN4fgTwFR6tMvpY286L5HoRhOcNg53lo0jI7Jc=
Subject key identifier: 84:E5:A1:AA:49:DD:77:4C:DD:8D:EF:A8:40:8E:37:8D:92:F9:27:4E
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 019748FABEB1330FF28618E1B5347ECB56E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 0D04
Signing time: Sat 07 Jun 2025 06:01:21 +0000
Manifest this update: Sat 07 Jun 2025 06:01:21 +0000
Manifest next update: Sun 08 Jun 2025 06:01:21 +0000
Files and hashes: 1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=)
2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=)
3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=)
4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: euePazC/hnrkxSuknFeDMYx1OpSVX3XtzAD6nfmK0SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:be:b1:33:0f:f2:86:18:e1:b5:34:7e:cb:56:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Jun 7 06:01:21 2025 GMT
Not After : Jun 8 06:01:21 2025 GMT
Subject: CN=84e5a1aa49dd774cdd8defa8408e378d92f9274e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:68:f4:5c:5f:c2:ad:ef:55:32:80:b1:75:
2a:11:ad:5f:e1:f7:b1:7e:f1:8a:af:9c:25:a3:59:
67:2d:26:9a:db:3c:60:47:6d:b9:3b:7c:61:37:76:
57:b7:ff:57:ba:8d:49:ed:13:f6:28:4b:f0:2f:81:
d9:95:42:5b:1a:55:53:7c:f3:f8:58:23:72:f9:62:
01:c7:6a:47:ca:b6:70:0f:d8:a7:92:3b:27:be:5f:
c5:77:0c:ec:f5:32:34:32:ce:76:19:b6:5d:2a:3e:
22:83:ab:97:a0:3e:d6:13:05:7e:c8:af:ec:6a:18:
04:44:98:6c:38:2a:98:d6:c3:54:18:bd:e9:57:44:
30:28:b1:9b:21:70:c2:55:51:da:8f:7e:b6:58:07:
49:03:67:de:b6:b1:a1:5e:c1:00:65:6c:86:84:06:
17:da:88:4e:26:04:f8:e7:7c:dd:f1:91:63:02:8b:
ab:89:61:d7:ba:58:23:1d:ba:33:9e:65:94:44:16:
e4:fa:85:83:84:7a:01:a4:19:5d:75:2b:d9:93:44:
d5:2c:47:4b:8f:e8:84:7c:e1:10:29:08:11:47:68:
88:ff:a6:69:60:74:10:26:86:e0:2a:7e:41:ff:0e:
62:95:0e:d7:1b:12:73:65:9d:34:4b:ab:3c:8b:d5:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E5:A1:AA:49:DD:77:4C:DD:8D:EF:A8:40:8E:37:8D:92:F9:27:4E
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4a:9b:21:fb:3a:15:f6:31:ed:ab:62:33:ff:16:2f:7f:55:
0c:66:bd:49:01:08:70:de:66:51:79:ae:3a:12:64:da:7c:dd:
cb:90:90:2c:db:55:4a:53:29:b8:15:6d:46:34:b0:d3:82:69:
20:e2:69:f1:b5:c6:d2:66:8f:d3:c1:19:66:8a:28:44:fc:40:
6c:b6:74:a7:01:cb:36:91:86:1f:90:f9:87:36:ee:fe:c6:4b:
e6:36:70:8a:63:15:7b:06:01:ad:44:22:e9:b6:19:c1:81:ff:
e7:61:2a:a0:ed:e6:15:24:04:f7:0f:2b:22:1d:cf:62:a8:d0:
25:2d:ff:38:9f:67:5d:d0:02:21:3f:3d:5b:88:21:0b:fd:cd:
fa:69:84:b6:45:83:1e:fe:e9:95:f0:ba:8a:7a:09:e4:f8:b8:
b2:93:96:2e:7b:60:6e:fb:00:3a:8f:4f:84:df:a9:91:1e:31:
c7:44:c6:61:46:b1:b8:75:23:2f:24:f4:59:55:6f:25:e1:b2:
d8:8f:e8:b4:1c:46:37:2b:71:28:05:c7:0f:77:52:2e:48:c6:
00:95:66:44:aa:43:e5:0b:ba:3b:6e:10:03:0a:fe:7b:82:fa:
a5:78:07:d2:0e:a5:4f:21:47:dc:8e:a3:ab:1d:39:fb:02:99:
3c:6f:8a:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+r6xMw/yhhjhtTR+y1bnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OGY5NDBmMWNjNTc3ZjM3MGYyODQyODg1MGRjN2JmNzQx
OGYxMjEwHhcNMjUwNjA3MDYwMTIxWhcNMjUwNjA4MDYwMTIxWjAzMTEwLwYDVQQD
Eyg4NGU1YTFhYTQ5ZGQ3NzRjZGQ4ZGVmYTg0MDhlMzc4ZDkyZjkyNzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH5o9Fxfwq3vVTKAsXUqEa1f4fex
fvGKr5wlo1lnLSaa2zxgR225O3xhN3ZXt/9Xuo1J7RP2KEvwL4HZlUJbGlVTfPP4
WCNy+WIBx2pHyrZwD9inkjsnvl/Fdwzs9TI0Ms52GbZdKj4ig6uXoD7WEwV+yK/s
ahgERJhsOCqY1sNUGL3pV0QwKLGbIXDCVVHaj362WAdJA2fetrGhXsEAZWyGhAYX
2ohOJgT453zd8ZFjAouriWHXulgjHboznmWURBbk+oWDhHoBpBlddSvZk0TVLEdL
j+iEfOEQKQgRR2iI/6ZpYHQQJobgKn5B/w5ilQ7XGxJzZZ00S6s8i9V1EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITloapJ3XdM3Y3vqECON42S+SdOMB8GA1UdIwQY
MBaAFLaPlA8cxXfzcPKEKIUNx790GPEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUt
ZTA0ZGFjNjFjZTlkLzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUtZTA0ZGFjNjFjZTlk
LzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0qbIfs6
FfYx7atiM/8WL39VDGa9SQEIcN5mUXmuOhJk2nzdy5CQLNtVSlMpuBVtRjSw04Jp
IOJp8bXG0maP08EZZoooRPxAbLZ0pwHLNpGGH5D5hzbu/sZL5jZwimMVewYBrUQi
6bYZwYH/52EqoO3mFSQE9w8rIh3PYqjQJS3/OJ9nXdACIT89W4ghC/3N+mmEtkWD
Hv7plfC6inoJ5Pi4spOWLntgbvsAOo9PhN+pkR4xx0TGYUaxuHUjLyT0WVVvJeGy
2I/otBxGNytxKAXHD3dSLkjGAJVmRKpD5Qu6O24QAwr+e4L6pXgH0g6lTyFH3I6j
qx05+wKZPG+KNQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:14 2025 by rpki-client