Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: TruRbCAD5iqDq6adgSDYA4kZz0eILP0QVgPvaptD0p8=
Subject key identifier: 39:7B:AC:00:76:5C:09:E5:80:52:3B:31:69:D1:C1:EB:E1:94:9B:35
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 0197556C45823A95CE7ACAF3FBC7F817E60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 09E4
Signing time: Mon 09 Jun 2025 16:00:48 +0000
Manifest this update: Mon 09 Jun 2025 16:00:48 +0000
Manifest next update: Tue 10 Jun 2025 16:00:48 +0000
Files and hashes: 1: tQOCxRT0aCE_1_qk1kC7RdCFOSc.roa (hash: n1WxYWjnXTsr8gKXroY5cgEaMb8X/+3xuLpCg/Qcbnk=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: 8iS5xkLDj3iCT8ag3rdHumNxNUQ85sL+B6F7kwC+No8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:6c:45:82:3a:95:ce:7a:ca:f3:fb:c7:f8:17:e6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Jun 9 16:00:48 2025 GMT
Not After : Jun 10 16:00:48 2025 GMT
Subject: CN=397bac00765c09e580523b3169d1c1ebe1949b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:e3:da:3b:c7:9c:bf:92:e5:e8:4a:12:21:
19:95:e4:c1:1a:af:d8:6a:89:59:93:b9:11:dd:36:
ee:bf:8a:88:b6:d4:86:3d:bb:fb:50:9f:08:8c:d2:
c3:2e:93:7a:2b:b2:f9:a0:be:c9:a2:b9:d3:99:f5:
3f:50:da:67:0f:01:aa:de:e2:54:28:ad:b9:77:db:
62:41:38:dc:c4:64:8c:10:47:1b:0e:b5:d9:01:09:
89:ee:6f:24:e7:43:24:d5:5c:f5:dd:64:b0:72:b6:
ee:b6:23:18:d1:c0:15:47:93:00:68:aa:68:35:48:
9c:56:87:a4:36:df:e4:6b:b5:17:7a:a2:96:64:37:
29:20:cd:61:44:73:de:bd:b6:dc:e9:d7:32:60:d2:
03:6f:15:0a:99:e0:f8:58:86:ea:3b:84:99:9d:46:
d5:38:32:5b:85:a4:fc:d4:8d:dd:fd:5d:90:7c:46:
52:26:be:be:69:26:37:cf:97:0e:34:da:61:c6:87:
69:16:4b:20:8a:46:04:de:37:57:e3:85:1e:0a:b7:
24:d3:2b:3e:e9:22:b5:27:2c:a4:aa:32:38:8c:b5:
62:78:30:de:dd:45:dc:06:40:da:2c:bc:8a:3e:d4:
90:fd:d4:0e:a1:41:7b:57:e8:ea:6e:25:1c:a0:3a:
c2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7B:AC:00:76:5C:09:E5:80:52:3B:31:69:D1:C1:EB:E1:94:9B:35
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b7:4c:66:3c:83:60:38:7a:1a:38:ac:9c:b9:5a:bf:30:7f:
f9:dd:81:7f:9f:56:95:74:a9:27:fc:f7:2d:03:4a:0a:54:b0:
8b:1f:50:eb:13:e8:19:c4:d4:6b:42:0d:9e:d3:ab:69:44:ea:
45:e4:98:7a:6f:29:d6:8b:97:90:e8:45:cd:79:2b:ff:97:71:
f7:6d:b4:6c:8b:7b:ca:1a:03:d3:8f:4f:11:93:d4:78:e8:08:
24:1e:03:64:43:e9:29:f0:ba:be:8c:34:c3:e2:6e:db:ce:21:
a8:0b:b5:a5:85:88:a4:d4:01:20:e3:aa:b3:8d:c0:83:0c:04:
53:2e:79:f1:c1:8b:a3:0e:97:ff:98:cd:9a:63:14:a3:85:38:
3d:df:0d:ad:48:5a:e7:6e:84:0e:4e:f7:6d:53:e7:c4:80:21:
de:ba:a2:62:51:0d:f7:7b:b7:6a:e7:5e:08:c9:4a:98:4b:38:
42:65:23:6b:17:e9:2b:b9:c6:fd:4d:ab:e8:ac:bd:3c:99:4d:
ed:91:52:12:6a:f1:28:0d:4c:27:5d:38:d5:3d:c3:df:c9:a8:
4c:de:36:d4:4c:04:36:1d:9c:ed:3c:c8:29:cd:a8:ee:a6:d7:
e2:08:eb:b2:be:55:31:f2:db:a6:96:6f:2e:a0:32:61:ca:f7:
ab:c0:7a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:41:39 2025 by rpki-client