Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: JomCrgub9iZJmAJ7nu9Bq5+EL1Sq4vWJYSmyGYhKgy4=
Subject key identifier: 5F:F6:BC:0F:67:C2:02:75:37:7D:E2:F3:76:13:D4:D2:86:CC:F5:B6
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 0199FB45BB34BD682E8A5F940AF26A0D4C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0B43
Signing time: Sun 19 Oct 2025 07:01:15 +0000
Manifest this update: Sun 19 Oct 2025 07:01:15 +0000
Manifest next update: Mon 20 Oct 2025 07:01:15 +0000
Files and hashes: 1: tQOCxRT0aCE_1_qk1kC7RdCFOSc.roa (hash: n1WxYWjnXTsr8gKXroY5cgEaMb8X/+3xuLpCg/Qcbnk=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: GZEk1F+DNNw/bZkXOLqfAJCIpHr6fmfNW0MTgGjRa+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:bb:34:bd:68:2e:8a:5f:94:0a:f2:6a:0d:4c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Oct 19 07:01:15 2025 GMT
Not After : Oct 20 07:01:15 2025 GMT
Subject: CN=5ff6bc0f67c20275377de2f37613d4d286ccf5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:ac:01:6a:59:72:78:7b:7e:73:51:9a:0f:
1d:92:7d:6f:31:08:63:16:0e:d1:03:1c:c1:e6:b9:
27:d5:5a:cd:21:f4:b6:95:e4:b7:09:d6:e4:c6:53:
5b:ee:58:12:5e:ff:bf:ac:a4:82:bb:52:ab:3d:e8:
15:38:35:02:c3:e3:6e:0c:33:97:ac:1a:09:cc:99:
a2:5b:01:c4:20:43:6a:0a:64:77:1e:22:8b:d1:0a:
b1:ff:5f:bf:8f:a8:b4:3a:13:1b:b6:59:ec:f6:a1:
6a:85:2d:6a:cb:44:bf:02:b1:97:a6:96:26:98:d8:
b0:6b:2d:2b:4b:c1:20:ec:4d:81:b4:8c:a3:fa:d6:
42:e5:7a:2e:10:ec:e0:ec:0d:19:49:67:7f:86:ee:
3f:de:63:d1:5a:e6:d8:69:7a:a3:55:3d:45:0b:74:
df:8b:4a:1a:78:8b:ca:e2:7c:ee:78:e9:40:46:0a:
ab:08:7d:57:a1:78:bd:c9:1d:23:45:0c:cc:0d:52:
b5:f3:e5:a8:00:bb:c5:4d:10:93:50:5f:03:3e:b6:
67:9b:e6:7c:6f:bd:1a:99:b7:b6:81:c2:a8:8b:66:
1a:ea:3a:97:55:e1:39:61:a1:d0:f1:c2:91:83:d7:
ce:2c:25:39:77:17:8f:a1:56:64:f6:44:45:05:93:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F6:BC:0F:67:C2:02:75:37:7D:E2:F3:76:13:D4:D2:86:CC:F5:B6
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d4:47:cf:2b:83:1e:bd:1c:b7:69:ca:0a:5f:3c:c6:b3:5d:
dc:3e:3d:44:f8:72:9b:e5:c0:44:52:a6:47:00:52:d7:81:64:
97:48:75:03:de:d7:33:31:ac:2d:10:d5:fb:6e:00:8c:f6:fc:
78:19:23:34:69:f2:88:e8:67:eb:6c:7e:28:e0:ed:9d:fe:5b:
b6:47:53:a2:b9:19:24:01:a5:76:73:66:66:68:47:b9:07:bb:
e8:a0:64:5b:6e:11:f9:b1:f5:49:bd:5a:6d:7f:13:8b:cf:95:
e4:a1:6f:17:6d:b1:e4:c6:5e:63:f5:40:a6:b7:2b:01:41:82:
1c:53:9d:81:c9:fe:ce:82:72:e9:8b:fe:92:c6:a9:ee:b9:99:
06:42:32:bb:69:1d:41:34:fa:21:cb:0a:f3:49:b5:26:3f:e7:
cc:c3:3c:39:32:dc:57:3b:08:49:38:30:88:e9:a6:fa:70:7e:
27:34:81:09:e7:07:b0:d0:83:42:c3:cb:55:31:32:f0:15:49:
97:a4:ef:51:8c:50:1b:23:21:d8:f4:86:7f:8a:cb:05:17:64:
6f:f2:94:1a:b0:91:47:ed:c1:b4:b2:7a:ad:a4:da:22:54:f0:
36:2e:40:f6:63:7f:7d:8e:c2:ac:43:8d:93:2b:b0:b5:ff:61:
1a:d4:ae:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rbs0vWguil+UCvJqDUxkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OGY4ZjMyNTE0YTE4M2U5NzdhM2M3ZGYzNjQ3M2Q1NjI2
MGM0YTQwHhcNMjUxMDE5MDcwMTE1WhcNMjUxMDIwMDcwMTE1WjAzMTEwLwYDVQQD
Eyg1ZmY2YmMwZjY3YzIwMjc1Mzc3ZGUyZjM3NjEzZDRkMjg2Y2NmNWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmmsAWpZcnh7fnNRmg8dkn1vMQhj
Fg7RAxzB5rkn1VrNIfS2leS3CdbkxlNb7lgSXv+/rKSCu1KrPegVODUCw+NuDDOX
rBoJzJmiWwHEIENqCmR3HiKL0Qqx/1+/j6i0OhMbtlns9qFqhS1qy0S/ArGXppYm
mNiway0rS8Eg7E2BtIyj+tZC5XouEOzg7A0ZSWd/hu4/3mPRWubYaXqjVT1FC3Tf
i0oaeIvK4nzueOlARgqrCH1XoXi9yR0jRQzMDVK18+WoALvFTRCTUF8DPrZnm+Z8
b70ambe2gcKoi2Ya6jqXVeE5YaHQ8cKRg9fOLCU5dxePoVZk9kRFBZOfQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/2vA9nwgJ1N33i83YT1NKGzPW2MB8GA1UdIwQY
MBaAFLaPjzJRShg+l3o8ffNkc9ViYMSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zODg3ZTQtYjU5OC00NWUzLThkODUt
MjIxMGVkOWQwODYxLzEvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zODg3ZTQtYjU5OC00NWUzLThkODUtMjIxMGVkOWQwODYx
LzEvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdRHzyuD
Hr0ct2nKCl88xrNd3D49RPhym+XARFKmRwBS14Fkl0h1A97XMzGsLRDV+24AjPb8
eBkjNGnyiOhn62x+KODtnf5btkdTorkZJAGldnNmZmhHuQe76KBkW24R+bH1Sb1a
bX8Ti8+V5KFvF22x5MZeY/VAprcrAUGCHFOdgcn+zoJy6Yv+ksap7rmZBkIyu2kd
QTT6IcsK80m1Jj/nzMM8OTLcVzsISTgwiOmm+nB+JzSBCecHsNCDQsPLVTEy8BVJ
l6TvUYxQGyMh2PSGf4rLBRdkb/KUGrCRR+3BtLJ6raTaIlTwNi5A9mN/fY7CrEON
kyuwtf9hGtSu8A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:11 2025 by rpki-client