Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: AG/0w/HfKgAlfa7GgnJOncXpmfobvEFn4H0xDhY7SB8=
Subject key identifier: C1:28:C0:1D:D8:10:BA:33:73:F3:4E:DD:73:6B:63:6E:E8:58:F0:38
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 0198D9993B4892F9732BED606D446E5F84E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0AAD
Signing time: Sun 24 Aug 2025 01:02:34 +0000
Manifest this update: Sun 24 Aug 2025 01:02:34 +0000
Manifest next update: Mon 25 Aug 2025 01:02:34 +0000
Files and hashes: 1: tQOCxRT0aCE_1_qk1kC7RdCFOSc.roa (hash: n1WxYWjnXTsr8gKXroY5cgEaMb8X/+3xuLpCg/Qcbnk=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: S6p/FNAt3XPkwmnPjHZWVmdP6ddcPx1QscsOiIKRwQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:99:3b:48:92:f9:73:2b:ed:60:6d:44:6e:5f:84:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Aug 24 01:02:34 2025 GMT
Not After : Aug 25 01:02:34 2025 GMT
Subject: CN=c128c01dd810ba3373f34edd736b636ee858f038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:a0:cf:94:6d:be:24:23:9a:99:ea:4c:b8:
4e:a8:74:42:30:fb:6f:18:8b:f4:13:a4:d3:fb:9f:
33:43:7a:35:1c:43:6f:f7:0e:32:c4:4a:f9:4f:fa:
f3:68:15:25:8e:45:e2:19:26:4d:8b:1f:eb:eb:f4:
a4:71:f8:17:7f:fe:b1:e0:79:86:27:0a:06:31:33:
6c:66:b9:fe:b2:e3:20:4a:58:d9:bb:95:64:c7:34:
d5:fa:36:79:07:df:98:ea:03:99:8d:a6:8b:b6:9d:
4e:8d:3e:63:9d:72:7f:10:7f:a9:d8:a2:07:ac:d0:
b6:91:e1:87:69:9b:b3:cd:1a:06:bb:19:9c:73:85:
48:0d:08:b1:d1:a5:1e:d1:6b:6b:9b:3f:3a:f3:27:
c0:ec:0e:e2:38:d4:77:6c:e1:36:69:1c:0f:cc:48:
71:59:89:67:f8:9a:de:e3:1c:93:20:5e:9b:d9:db:
47:1f:f9:f8:f4:ad:e2:ae:74:a0:37:96:ba:ab:52:
f8:6b:97:4f:20:2e:6b:bb:d7:86:53:40:23:f8:09:
42:28:9d:a6:0a:ec:f5:d9:8a:90:c0:58:43:0a:e3:
d4:b5:10:a2:6f:d4:43:25:61:fb:a5:7b:a8:a6:c2:
e3:3c:e7:e8:e8:c7:fa:b4:fc:1d:c6:10:ec:ca:6f:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:28:C0:1D:D8:10:BA:33:73:F3:4E:DD:73:6B:63:6E:E8:58:F0:38
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4f:ed:2d:b7:ec:bf:05:17:a2:83:20:17:45:a0:f2:eb:4f:
64:31:ec:93:75:05:19:be:7b:45:b0:1b:e0:4d:ed:ed:5c:65:
d0:54:dd:31:7f:47:9a:47:87:c6:68:6b:b0:35:8f:5c:f5:eb:
c1:e1:68:d9:b5:ff:e6:2d:92:18:4e:fc:e0:e3:16:fd:06:be:
6f:ee:2e:80:c1:f0:b4:8d:3c:05:30:60:0a:ca:d4:c6:e3:8e:
b8:2d:01:d8:3f:e6:e6:0d:82:ad:fb:69:27:2e:53:1a:30:ff:
ce:5a:8a:37:5d:70:a9:9a:99:8d:a7:8e:15:f0:d3:c6:75:1c:
62:f3:d8:51:10:cd:06:ce:c9:f5:05:6f:da:39:17:59:a9:ef:
14:04:d7:67:fc:8c:f7:ed:b1:d9:e4:2f:05:2e:7e:c2:a8:3c:
19:ab:cc:9e:cf:cf:16:1e:93:8b:cc:89:e3:55:d1:ae:db:cd:
a8:cd:23:cb:01:72:a2:6c:fb:54:48:9d:4f:d3:5f:73:be:16:
01:3c:0a:b5:36:41:0b:e2:68:52:2d:a1:6f:54:a8:55:99:1f:
d7:e2:58:17:9b:bd:87:a5:06:45:0e:db:43:22:22:e2:a9:ec:
0b:91:d1:ae:45:62:32:bc:04:21:1f:0d:0f:e1:86:59:66:dc:
0e:44:af:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:09:48 2025 by rpki-client