Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: GG6l04ezrobiXjwuxJp0Ezd3+rTnkOHb89N2O6xu02A=
Subject key identifier: D0:E7:B8:5C:35:94:E8:B6:3B:4B:D4:A4:19:65:10:2F:77:81:84:85
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 0197CD28A2C926A90C0E94393BF98FBD142A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0A22
Signing time: Wed 02 Jul 2025 22:01:21 +0000
Manifest this update: Wed 02 Jul 2025 22:01:21 +0000
Manifest next update: Thu 03 Jul 2025 22:01:21 +0000
Files and hashes: 1: tQOCxRT0aCE_1_qk1kC7RdCFOSc.roa (hash: n1WxYWjnXTsr8gKXroY5cgEaMb8X/+3xuLpCg/Qcbnk=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: n4KHs2eEG6HM1uPyp4rSnN/zQYw5tqVs9LmmdrPePfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:28:a2:c9:26:a9:0c:0e:94:39:3b:f9:8f:bd:14:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Jul 2 22:01:21 2025 GMT
Not After : Jul 3 22:01:21 2025 GMT
Subject: CN=d0e7b85c3594e8b63b4bd4a41965102f77818485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:b7:d2:b0:f8:65:87:3f:a9:5e:f1:c8:9a:
f6:16:c3:a4:4e:fb:47:c8:d2:fb:99:bd:e0:87:bc:
00:be:c2:23:a3:ca:7d:c9:6c:c7:eb:c4:f2:5c:f3:
fd:62:55:77:cf:ee:39:e0:c5:44:7f:64:05:20:d5:
dd:64:57:0c:31:af:be:10:7e:b8:30:4e:4e:6e:d0:
96:bb:44:00:4c:62:e4:aa:4a:8a:2a:e5:16:e0:b0:
ff:61:1a:ce:a6:9d:9e:0b:5d:c3:ff:cc:eb:4c:3f:
01:63:0d:19:da:ad:6c:52:25:e4:c7:2e:15:96:2a:
81:af:52:dd:7b:0d:a1:2d:4b:48:00:9c:81:72:ad:
29:95:d9:16:2e:17:66:67:2c:43:96:1d:7a:57:b9:
c7:e9:93:20:49:a4:45:2a:1c:10:ad:60:60:32:ad:
77:47:5f:08:b2:ca:a0:eb:d4:7c:44:3e:d8:36:50:
7a:e8:be:30:a6:32:8a:c0:6e:b7:81:b1:3f:46:c9:
f8:b0:e1:fb:8f:18:c0:2b:92:8c:fb:92:7d:a4:af:
eb:61:ba:e0:17:9a:9f:7c:97:0c:f2:c5:32:b4:23:
0f:97:a2:4f:e9:2e:21:24:5d:91:c4:e2:85:8b:5a:
52:35:10:64:dc:19:ae:c1:cd:89:33:be:16:fc:47:
d7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E7:B8:5C:35:94:E8:B6:3B:4B:D4:A4:19:65:10:2F:77:81:84:85
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:1f:80:ac:2c:c8:e7:e0:5a:52:04:48:6c:30:2c:2e:34:c8:
37:97:40:d0:56:20:dc:ab:1e:6f:ee:e9:d9:a4:3a:d0:57:bb:
30:21:1e:07:0a:b6:10:db:3c:74:36:66:aa:ef:da:21:42:35:
9e:92:ea:95:96:bb:a1:a8:7f:80:4b:11:4f:71:fa:30:c0:6b:
4e:ca:31:88:88:ba:32:c6:e9:6e:48:23:3f:cc:89:ee:89:37:
bf:e4:4c:3d:cd:87:71:8e:0b:5e:6c:f7:01:30:ef:df:5b:df:
7d:05:e0:f2:e6:57:62:83:fd:dc:c2:64:f8:95:7e:25:d5:99:
94:71:0d:63:71:85:a8:f7:2e:98:e7:8c:74:69:6d:db:0c:00:
2a:d7:28:27:c8:22:b6:03:fd:80:2a:cb:bc:cb:43:9d:c4:8e:
32:8c:54:c3:ba:74:e5:b2:bf:99:da:32:b5:a3:ec:f2:6f:86:
fe:b4:8a:48:bc:0d:db:21:30:c4:ef:97:4a:a8:22:7c:4f:bd:
7e:65:5d:27:e2:cb:45:3e:7a:8e:cd:38:64:17:50:8d:be:ee:
b6:27:ca:dc:0a:17:77:7d:3e:d4:ff:cb:91:b7:37:a4:43:3e:
b4:bb:14:7b:24:15:9c:bc:d9:39:63:b4:21:3c:4c:f4:97:ea:
11:f8:40:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:04:33 2025 by rpki-client