Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: c6e/0k50HusM5AdekhRUnKkrYfXuuY+9//qwZYBePPI=
Subject key identifier: 59:D7:99:F8:1F:63:23:F5:45:73:BA:C3:28:D9:D9:33:41:6D:2B:E0
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 019A05FF3A4AD40E6D3815331B13E21EBACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 0E6F
Signing time: Tue 21 Oct 2025 09:00:03 +0000
Manifest this update: Tue 21 Oct 2025 09:00:03 +0000
Manifest next update: Wed 22 Oct 2025 09:00:03 +0000
Files and hashes: 1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=)
2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=)
3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=)
4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: ROmIWalJdgpklrCgWRquvDzuTDidU97toCvcCZ8QpF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:ff:3a:4a:d4:0e:6d:38:15:33:1b:13:e2:1e:ba:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Oct 21 09:00:03 2025 GMT
Not After : Oct 22 09:00:03 2025 GMT
Subject: CN=59d799f81f6323f54573bac328d9d933416d2be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:56:d2:3f:62:61:24:48:b0:d4:c5:8e:a7:ac:
5e:cf:17:21:e8:57:f5:2b:ed:c9:ca:c5:96:41:01:
ce:a5:84:7c:b2:bc:50:27:13:9c:76:4f:be:8c:d6:
4c:e4:0c:31:03:a6:23:c0:ec:ac:c2:5a:19:33:f2:
57:cc:d8:e0:99:3f:e1:0b:5d:da:7b:43:f4:51:26:
aa:02:b0:b0:f3:29:14:59:77:ba:89:29:89:8c:16:
f6:2f:00:12:5f:cf:db:1c:3a:ae:e7:20:1c:46:33:
fa:a2:62:5a:70:d0:ab:27:b7:a3:e8:ca:01:dc:c3:
6b:a0:b2:a6:f1:4e:2c:f6:e8:1c:c5:e7:fa:61:56:
23:49:46:82:01:ae:1e:55:5c:a4:2e:c6:59:c6:2a:
5a:f6:72:83:7e:da:f4:27:01:dd:db:8f:c4:44:d7:
ff:1e:4e:b0:85:d0:93:34:f4:4f:38:73:e7:a2:a0:
fe:93:a6:d5:b3:a0:08:30:45:11:53:0c:17:49:3a:
6b:0b:96:36:d5:a9:30:e2:61:45:d1:4d:79:1b:ce:
00:ca:91:c2:8a:99:6b:79:12:05:e5:78:9d:6c:83:
aa:01:6a:46:72:87:75:26:c5:87:48:c2:aa:af:a2:
b3:05:c1:7e:0e:61:25:7d:63:9f:c6:b9:2b:74:e8:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D7:99:F8:1F:63:23:F5:45:73:BA:C3:28:D9:D9:33:41:6D:2B:E0
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:32:8e:3b:d9:da:23:8a:29:82:26:b3:ea:09:3f:7b:b8:40:
6b:be:c3:e9:05:ca:b6:ba:15:4d:e6:8d:f4:1a:52:cc:4d:51:
8e:56:02:36:34:76:f0:ce:1d:bd:35:1d:03:38:7a:6d:28:fa:
64:bf:e1:21:e3:69:1b:b9:0c:92:48:32:20:1b:9f:6f:7c:2e:
47:c0:1f:40:ea:0c:7b:21:6f:a6:53:ef:9a:7b:f8:c8:20:e6:
e6:9d:eb:ea:97:df:fc:20:21:42:3b:78:85:0f:0e:3f:b0:a6:
c0:35:ab:89:42:26:93:66:7c:df:64:3c:42:4a:ec:b5:e8:70:
fb:3c:f1:d2:72:7f:24:27:21:0d:fa:a5:00:30:91:66:92:42:
d4:16:c6:e3:a1:a9:d6:0a:db:11:dd:ff:20:a2:f8:03:43:d8:
0c:81:b8:3b:7a:c0:38:b4:04:90:64:f5:49:42:84:4c:3f:ec:
9f:fb:46:04:75:e0:89:83:3b:be:26:22:d8:d4:8d:56:b6:c4:
d1:52:4f:00:88:53:95:31:b0:2a:3f:45:08:07:21:07:62:bc:
63:9f:66:85:28:b0:02:95:23:7d:f1:4e:25:73:25:a9:c3:c9:
e7:13:d8:cc:b6:fe:25:68:55:83:1c:35:7e:c2:8b:3e:44:83:
69:14:78:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:20:10 2025 by rpki-client