Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: h9jQVdN87rusFRWUnaL4LzEFIWYyWZ8M0ASOHle4xik=
Subject key identifier: 49:EF:47:7E:6D:DB:EB:E6:19:5C:72:01:E0:53:FA:A1:38:9C:E5:74
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 01964520219D86E5D9CE1E3EDB106AFEFBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0957
Signing time: Thu 17 Apr 2025 19:00:55 +0000
Manifest this update: Thu 17 Apr 2025 19:00:55 +0000
Manifest next update: Fri 18 Apr 2025 19:00:55 +0000
Files and hashes: 1: tQOCxRT0aCE_1_qk1kC7RdCFOSc.roa (hash: n1WxYWjnXTsr8gKXroY5cgEaMb8X/+3xuLpCg/Qcbnk=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: AKPAsFgEBAMwfkQvJqGw861kyU1XSnu2A9ywnvsHspw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:20:21:9d:86:e5:d9:ce:1e:3e:db:10:6a:fe:fb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Apr 17 19:00:55 2025 GMT
Not After : Apr 18 19:00:55 2025 GMT
Subject: CN=49ef477e6ddbebe6195c7201e053faa1389ce574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:01:fd:c0:c8:2a:a6:34:8c:d9:e0:b5:42:
46:1e:e0:18:a1:3e:c9:40:fe:10:5e:83:57:fc:3a:
99:e9:df:e3:79:25:c9:0a:cc:7e:36:67:9b:e3:fb:
0f:f2:a6:7b:fa:56:b0:fc:29:7c:54:04:4d:5d:9c:
1b:0e:e1:29:12:94:1a:67:7a:a2:84:06:e3:ed:16:
14:55:6d:52:65:91:0c:fe:03:eb:e8:73:3c:a9:f3:
d7:8c:05:9c:80:ec:97:22:b7:05:8d:5a:14:07:8b:
f6:7e:b0:02:fd:42:e1:aa:25:7c:99:1b:b3:0f:6c:
d2:e1:97:ca:c2:7e:85:17:41:00:16:af:21:f4:0a:
f3:be:5a:24:e8:18:02:1c:b4:5b:90:13:e3:cd:23:
fb:43:29:2b:c9:be:13:5c:4b:32:80:71:3d:01:06:
4b:69:0c:34:25:ec:82:2a:13:32:73:9f:d6:d3:00:
0b:cf:ee:f5:2b:fc:45:a1:65:6a:75:96:75:ed:b2:
b0:b4:40:17:be:5a:a7:d7:14:c4:9a:44:10:50:be:
fb:36:2f:46:c4:0c:85:3c:1c:65:05:55:9f:3f:70:
3c:97:55:e5:9e:2d:db:25:6f:85:4d:a0:eb:0a:69:
69:f7:99:e0:41:b5:e7:08:80:34:4e:f6:b2:e5:6a:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EF:47:7E:6D:DB:EB:E6:19:5C:72:01:E0:53:FA:A1:38:9C:E5:74
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c9:b4:15:b9:4c:14:fa:55:85:9e:ad:09:d9:70:50:45:49:
6f:e8:f9:92:4c:ab:7d:b9:a9:76:cb:a8:f3:e7:98:bf:95:b6:
60:25:90:f7:66:c0:5c:03:6c:e8:1d:fe:19:10:9a:09:3e:1b:
9d:a7:65:8e:79:6a:f4:b7:ca:10:ac:6b:4f:85:6a:bd:9a:f7:
92:8b:09:47:28:17:17:54:51:ae:fc:1c:f2:0f:f6:b6:08:30:
2e:30:05:39:6e:34:ca:51:a2:74:2e:83:10:3c:b6:82:e9:60:
02:1b:f2:db:15:2b:8e:31:ff:06:8e:95:3f:82:0d:18:84:d6:
cc:0a:f4:93:08:e5:c8:ce:4c:ba:49:06:94:58:1d:92:59:1b:
ea:ac:12:10:09:04:e7:a7:03:c0:71:7b:5c:e9:11:f9:11:b0:
7d:ff:1a:96:9c:89:7e:d4:75:9c:b0:3b:f4:02:81:e4:a0:4a:
dc:c7:f2:3b:d3:c6:b8:92:a9:e0:aa:66:e8:15:ca:3f:ee:35:
b2:57:a2:e5:35:f5:a1:68:8b:2c:81:8a:cb:62:89:39:ee:39:
1c:fa:e8:d9:05:5e:5b:2b:41:16:e9:b8:53:d9:78:8d:48:45:
45:0e:25:5f:a3:f9:9c:e7:30:7c:98:e4:5c:86:08:d4:1f:02:
4e:30:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:01:06 2025 by rpki-client