Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: 7P2KR6ozEojOZ8iKQ8nO5acAXaWQ3LioNLEOmkUbQ2o=
Subject key identifier: 14:68:77:A5:4A:89:CD:A6:65:CF:BA:49:19:FE:51:D6:33:7C:D0:59
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 0199326D7BBF41A20C0941456FABDF51A006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0ADB
Signing time: Wed 10 Sep 2025 07:00:59 +0000
Manifest this update: Wed 10 Sep 2025 07:00:59 +0000
Manifest next update: Thu 11 Sep 2025 07:00:59 +0000
Files and hashes: 1: tQOCxRT0aCE_1_qk1kC7RdCFOSc.roa (hash: n1WxYWjnXTsr8gKXroY5cgEaMb8X/+3xuLpCg/Qcbnk=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: wlFdmhsQIvySEmgUY49O2BLVFdq0eKITJ9soZwwUYyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:7b:bf:41:a2:0c:09:41:45:6f:ab:df:51:a0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Sep 10 07:00:59 2025 GMT
Not After : Sep 11 07:00:59 2025 GMT
Subject: CN=146877a54a89cda665cfba4919fe51d6337cd059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b1:60:2a:5e:de:2f:19:84:02:55:63:93:66:
4d:1c:b1:8b:58:3e:fb:b4:71:63:0a:8f:e3:f0:52:
a6:f5:93:ae:18:06:53:7a:e8:7e:78:8b:e4:e2:5a:
39:d1:7a:cc:23:28:35:35:c3:d2:c9:4f:c2:d8:cf:
f1:ab:00:bf:bf:69:db:6e:9e:c1:2e:5e:da:2c:a1:
07:54:ef:cd:83:4a:12:e0:c4:68:be:ad:35:9f:2d:
0d:cc:5c:b6:7d:08:ec:f7:1a:bd:08:00:af:cd:5f:
d8:53:fc:a8:d8:0f:f0:a4:10:7a:f8:61:d5:b1:80:
36:dc:14:fe:b9:ef:36:e3:b2:6b:38:9d:9d:fa:1d:
0c:c3:02:22:a3:2c:2d:f0:ce:5a:6b:1b:88:9f:73:
47:09:db:1d:a9:e4:5b:29:ae:8a:8c:96:79:a5:59:
3f:25:02:0d:bf:4f:cc:d0:df:eb:7f:a8:85:1e:8b:
25:d3:19:b6:e3:97:37:11:38:f8:b9:cb:5b:13:aa:
45:08:56:95:e2:75:21:f1:16:2c:13:ac:3e:54:44:
69:6a:53:2d:d5:bd:25:da:39:be:09:84:e0:43:d6:
17:35:5a:35:31:2f:3f:95:94:b0:f4:a3:6e:1a:55:
24:19:72:97:70:af:25:4c:cc:91:3a:dc:44:1a:45:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:68:77:A5:4A:89:CD:A6:65:CF:BA:49:19:FE:51:D6:33:7C:D0:59
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4e:65:ea:55:f9:a4:83:c4:60:0d:66:ae:88:fb:1a:52:7d:
55:93:6c:d4:f4:ef:db:45:5f:3f:37:d9:3f:da:e7:80:72:41:
db:9a:a8:6f:dd:fa:2c:a2:61:b1:dc:da:30:ec:85:bd:b7:5c:
22:bc:b6:8c:bf:f6:6c:09:4e:6e:5d:46:9f:4e:8d:fc:d9:04:
e0:f9:49:0b:c3:51:e2:2f:68:4d:59:67:d9:ca:b0:85:8d:2e:
4b:9a:90:0c:36:a7:a3:0a:83:a1:25:50:81:fa:d9:f0:57:73:
8b:69:7a:28:04:19:e5:d7:69:ee:2a:2b:6c:49:c4:d9:9e:dd:
12:71:73:ef:01:17:36:a5:66:aa:5b:71:12:21:f5:1d:e8:68:
e3:2c:7c:0e:34:69:fc:05:09:c4:52:7a:03:07:e5:15:b8:3f:
01:77:d0:b1:d2:f7:51:28:70:53:c0:12:21:fb:16:77:43:4d:
e3:50:19:a8:9b:be:e6:5e:ec:a2:a1:b0:22:43:71:04:e5:ef:
0b:5d:12:6d:52:f8:58:78:f5:d7:e4:23:8a:16:ae:ba:7b:15:
6d:43:97:8d:5f:3d:2c:6f:0e:e5:a5:c9:b7:c5:8e:e1:93:5f:
92:bc:0e:d4:d0:83:e2:35:98:c1:06:79:95:e9:ad:f6:33:19:
cb:7e:14:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 15:45:54 2025 by rpki-client