Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: UIlOPnvikfptrIRhdgbRiLeGM7tbnfZ6DsKeVOcSxY0=
Subject key identifier: 06:3D:B9:4D:4A:37:5E:66:63:B2:87:26:DB:02:91:B6:2F:C9:06:25
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 01976C990292B30D1CED7561C79A58C4D408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 09F0
Signing time: Sat 14 Jun 2025 04:00:56 +0000
Manifest this update: Sat 14 Jun 2025 04:00:56 +0000
Manifest next update: Sun 15 Jun 2025 04:00:56 +0000
Files and hashes: 1: tQOCxRT0aCE_1_qk1kC7RdCFOSc.roa (hash: n1WxYWjnXTsr8gKXroY5cgEaMb8X/+3xuLpCg/Qcbnk=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: wG7LRbO1TQuTK+YaLtMY7e5K/QkdHTupGdHxTQX1sXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:02:92:b3:0d:1c:ed:75:61:c7:9a:58:c4:d4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Jun 14 04:00:56 2025 GMT
Not After : Jun 15 04:00:56 2025 GMT
Subject: CN=063db94d4a375e6663b28726db0291b62fc90625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:09:f3:c5:e6:cd:21:86:6d:7c:1b:26:47:94:
3b:10:2f:b0:43:af:62:59:b0:24:11:b4:13:3a:26:
54:39:61:e0:64:35:d9:a7:94:bd:72:b2:24:a6:d3:
82:3f:7b:2f:83:d8:51:c6:9d:10:10:37:db:e0:ac:
69:56:08:33:c4:d6:c8:ca:88:b9:6b:92:2d:06:0e:
96:e0:38:b9:21:07:d8:2d:be:79:ad:8b:fd:a5:1c:
f8:fe:39:20:de:27:9c:41:15:b2:e1:06:c1:c8:82:
35:c1:1e:e4:0c:11:ba:e0:f1:eb:4f:db:51:96:7d:
e1:e6:d4:91:48:a2:c6:38:57:fe:a7:19:20:e2:26:
82:e1:43:ac:f1:e9:d0:cb:3a:b8:f7:da:57:29:fb:
f2:47:f6:d4:d2:30:a8:0c:fb:4a:f8:d2:e9:11:79:
c0:fa:52:39:0c:96:ac:8e:25:36:8d:9e:aa:25:69:
f3:b3:70:74:60:81:93:d0:7e:cf:b0:2f:71:58:b2:
71:3e:f6:11:76:74:21:d8:e0:84:de:e4:13:87:6c:
fc:78:47:c5:5e:7d:aa:49:11:0b:b4:86:18:cb:28:
1d:e9:0b:3c:1d:66:bb:51:c6:da:44:c3:03:2e:c1:
3b:a8:62:6c:1f:c9:a9:ee:3b:2e:8f:61:72:8a:44:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3D:B9:4D:4A:37:5E:66:63:B2:87:26:DB:02:91:B6:2F:C9:06:25
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:77:21:f6:cd:9d:32:99:bb:d4:f0:d4:a8:3d:79:ce:4c:b8:
48:5c:2b:5d:68:16:94:42:01:b3:b0:6b:81:25:1e:27:66:1c:
68:23:08:8a:1a:82:8b:3d:3a:aa:c2:23:24:66:1b:46:3a:c9:
76:9f:1c:c9:9f:76:9f:01:65:a5:04:e4:e9:97:f6:2e:ae:b0:
4d:4f:7b:02:fd:02:44:27:1e:59:43:e9:43:d3:60:93:d6:8a:
15:b2:f2:c5:96:a7:ac:6a:57:a4:f0:e4:da:35:f1:1a:a6:66:
71:ba:8f:03:e5:4e:68:04:f2:67:7f:c5:15:b8:29:44:ea:4d:
96:ad:f3:c1:02:b1:7a:fb:c4:04:3c:cd:23:ce:c5:e5:8a:7a:
fb:54:c8:9a:fe:dc:eb:5b:7d:b1:7e:26:9b:45:4a:18:c7:08:
74:a1:1c:81:3f:80:d2:9d:73:dd:fe:a4:70:95:4d:9b:f9:1b:
58:0d:0f:02:0e:fb:41:fa:30:b2:e7:a4:74:e2:f2:fd:a3:61:
df:9b:1d:b5:6a:c9:ab:89:03:1e:8c:50:cd:58:5b:85:6b:b0:
70:98:43:20:fe:01:24:55:d8:2e:a7:f0:3e:79:9c:35:d5:ec:
6d:6e:d4:3b:43:51:e9:3c:06:9f:97:20:3b:a8:39:e6:a7:6a:
23:46:af:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:07 2025 by rpki-client