Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: UUnm1ueNbU5HpW5EvWXXihmU40eKWVdOisq6EUtnVGE=
Subject key identifier: D9:56:43:0F:63:C9:1C:F2:09:8C:B3:8C:5E:14:85:00:5D:37:98:D8
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 019A27AF7DAE43E8CDDC49351986489416FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0B5A
Signing time: Mon 27 Oct 2025 22:00:03 +0000
Manifest this update: Mon 27 Oct 2025 22:00:03 +0000
Manifest next update: Tue 28 Oct 2025 22:00:03 +0000
Files and hashes: 1: tQOCxRT0aCE_1_qk1kC7RdCFOSc.roa (hash: n1WxYWjnXTsr8gKXroY5cgEaMb8X/+3xuLpCg/Qcbnk=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: 0ImJOjKXFyalr++ncwRsrGJ8nKkhEkVr+OLAyQzw0Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:af:7d:ae:43:e8:cd:dc:49:35:19:86:48:94:16:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Oct 27 22:00:03 2025 GMT
Not After : Oct 28 22:00:03 2025 GMT
Subject: CN=d956430f63c91cf2098cb38c5e1485005d3798d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f5:99:e8:45:71:43:a6:44:98:16:5c:08:24:
a9:3c:df:86:76:e5:b1:31:46:72:f1:9a:90:fb:2c:
bb:a4:12:d6:59:89:86:39:1c:3c:b9:3a:be:2e:83:
a1:12:ad:93:0a:3d:ce:c6:86:7d:27:66:88:80:84:
6e:3b:ff:30:cb:c8:41:c0:da:86:85:0c:54:2c:9d:
b5:c1:9e:66:9a:cd:8f:92:a5:4c:db:6a:5c:31:eb:
59:85:b6:47:eb:d3:e6:83:91:b5:c1:2a:70:21:53:
3e:e7:f0:bd:b4:0a:91:12:d1:72:68:cc:d0:b2:1a:
5e:bc:dc:ba:da:fd:47:62:45:d4:8f:61:84:a3:4a:
3a:9f:d0:36:b1:f2:85:e8:56:30:35:f1:02:1b:cc:
a2:21:d3:4d:3d:d5:95:b7:94:a2:75:6c:0b:ea:96:
79:46:21:04:db:e5:d6:10:e1:6d:c5:1e:3d:2a:4e:
12:b6:2c:d7:70:a1:4e:2a:de:1f:c6:6a:2a:64:66:
80:0b:67:db:60:ac:94:fc:d3:fc:6a:8d:33:81:1b:
01:82:16:a8:9f:c3:02:02:59:a9:02:b3:92:31:a5:
81:1a:52:c3:b8:47:74:41:a4:d1:38:dc:8e:d1:51:
21:77:05:b0:a3:29:af:34:ff:67:c6:25:35:5d:b1:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:56:43:0F:63:C9:1C:F2:09:8C:B3:8C:5E:14:85:00:5D:37:98:D8
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ec:11:be:48:a9:ac:97:dc:4f:06:e2:e0:2c:55:50:d4:99:
49:2e:c5:a5:bd:9a:c7:fc:48:43:4e:a3:d0:5e:4a:06:1e:9c:
92:5a:39:28:59:14:d1:cf:e2:a6:54:7d:7e:c6:0a:06:2f:2a:
db:52:54:2f:3b:fe:18:9d:48:4e:6a:45:b9:ab:e9:58:b4:60:
4d:59:ee:92:2e:c1:6a:69:82:18:5a:07:48:96:f6:82:05:cb:
30:21:a0:15:8a:da:11:13:31:db:ad:13:fb:5e:d7:f7:ae:a8:
a7:1b:cb:02:70:09:65:75:7e:c3:bc:e0:35:63:ab:4d:a1:ad:
e5:54:6e:b8:eb:70:a7:c8:1c:5a:3e:cf:98:06:7a:da:3f:5c:
03:3c:7c:7e:50:3e:96:8d:d1:10:e3:1e:27:5f:0a:b9:18:06:
60:b8:37:71:6c:71:be:7a:d3:83:33:46:b3:09:1a:ec:13:f3:
9c:39:e0:70:97:b9:d6:24:96:d8:e0:c5:da:6e:78:0e:17:cc:
9b:47:58:1f:d6:f3:a8:70:05:e9:6f:50:fb:f8:2c:7a:a6:47:
e9:3a:e6:08:7b:45:b9:10:e2:b6:fd:a1:23:ae:68:ca:53:07:
25:e4:7e:0e:91:de:59:2f:a2:18:54:42:e1:90:71:05:ce:db:
76:dc:25:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:25:16 2025 by rpki-client