Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: 1Q8nqzOxfSwsFOhi953yi6pBTQtWLF3/g9FTQbuQ9nE=
Subject key identifier: E5:02:D6:D3:C2:AE:83:F7:FD:F0:47:38:C0:7C:71:4A:5C:8B:4F:EC
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 019762F09516FEB02A3755CE44941BA2B380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 09EB
Signing time: Thu 12 Jun 2025 07:00:23 +0000
Manifest this update: Thu 12 Jun 2025 07:00:23 +0000
Manifest next update: Fri 13 Jun 2025 07:00:23 +0000
Files and hashes: 1: tQOCxRT0aCE_1_qk1kC7RdCFOSc.roa (hash: n1WxYWjnXTsr8gKXroY5cgEaMb8X/+3xuLpCg/Qcbnk=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: 9cxSEk481Vvkeb1sDaAPE7C3wTOSRivOSnDuXZf/Iss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:f0:95:16:fe:b0:2a:37:55:ce:44:94:1b:a2:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Jun 12 07:00:23 2025 GMT
Not After : Jun 13 07:00:23 2025 GMT
Subject: CN=e502d6d3c2ae83f7fdf04738c07c714a5c8b4fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:52:5d:39:6c:d8:23:2c:40:3f:b9:48:95:
68:17:d2:ab:ef:dd:a1:0c:d0:64:df:25:04:58:b6:
26:4d:d1:6b:fc:26:a9:8f:f3:c0:9d:7d:de:ac:70:
97:9f:91:d6:1b:25:6f:cb:11:08:d6:90:e5:51:d9:
bf:af:29:25:89:cb:67:8f:df:4e:b4:e6:25:53:7d:
c8:cd:af:2a:ce:cb:19:5c:34:e7:d6:89:6b:52:cc:
cb:4a:23:9f:db:34:c7:2d:82:66:c6:e8:f4:08:32:
b8:3b:4f:fd:c7:f6:5e:ec:67:e3:e6:03:29:4e:09:
21:ff:a5:c3:a6:10:8f:b5:d6:e3:e6:e8:a7:0b:47:
db:cc:73:a1:3e:84:01:32:fe:99:f4:d8:6a:a0:1d:
76:e1:2f:a7:ac:3d:ec:18:6c:0f:61:8d:7f:53:96:
02:61:c3:a6:14:37:a7:b8:67:62:cc:92:0d:e7:84:
36:c7:bd:93:4f:a9:7b:aa:69:b9:21:f2:13:f0:56:
c7:80:40:74:68:b3:52:6f:bb:1e:79:27:92:a2:c7:
89:a0:6d:55:a6:60:29:75:d0:5e:2d:f5:da:e5:5b:
88:3b:63:5d:c8:cc:f8:db:85:5a:3e:4c:3e:ba:71:
70:5e:52:7b:02:dd:46:4d:5f:00:19:7b:a0:1f:22:
e5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:02:D6:D3:C2:AE:83:F7:FD:F0:47:38:C0:7C:71:4A:5C:8B:4F:EC
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:23:c1:40:5f:42:50:a7:1e:d9:0c:4f:db:27:b5:5d:77:af:
75:d2:c8:a6:1d:87:31:e3:ea:45:9c:0f:d6:f7:18:7c:b0:cf:
67:a2:ca:a0:76:a2:9e:01:43:ba:fc:ae:54:53:0c:a5:bf:86:
9b:7a:b4:34:86:eb:6c:22:52:ca:d9:12:94:f8:35:1f:11:24:
cb:a2:42:5a:59:13:5b:d4:4f:46:55:b3:0f:47:7f:d1:19:79:
e7:ed:32:39:aa:56:3e:88:b1:d2:02:1e:f3:3e:38:69:87:d9:
e4:75:b2:a6:18:4d:df:bf:d7:b0:af:f5:d3:72:92:6b:4f:26:
8c:9a:29:19:fc:8c:a4:6b:06:2b:41:bf:07:07:4b:f2:42:2c:
7b:16:ba:f9:cb:e4:90:e2:bd:9f:88:e3:30:65:08:e4:94:e1:
47:2f:d9:44:05:ac:fd:df:78:45:70:dc:4d:d0:67:97:2c:85:
aa:5d:9e:28:1e:de:0a:f4:92:c5:87:2f:03:1a:c4:a5:6c:32:
35:d5:f6:6a:7f:5d:e7:d4:b5:1a:1a:74:2f:b2:9c:ae:af:46:
a9:ff:86:b2:6c:ac:7c:4c:b0:07:0f:6d:c6:9e:b9:51:6b:1f:
71:6b:d8:17:34:8b:eb:07:6e:6e:99:7d:28:e6:de:ef:64:50:
62:7c:90:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:27:36 2025 by rpki-client