Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json)
Hash identifier: EkjkxmEiGT6RoKngAh1l51igUAEj5q2+hp49Ua5z4A0=
Subject key identifier: 45:2D:65:18:45:9A:49:67:84:B0:B4:CB:7C:DA:BA:FF:B2:DE:A4:30
Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Certificate serial: 0198D660E82ECD24EC9C748C5B9A73558845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 10:02:11 +0000
Manifest this update: Sat 23 Aug 2025 10:02:11 +0000
Manifest next update: Sun 24 Aug 2025 10:02:11 +0000
Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: zQR2nENo6xsG4tPRs1EVSVDSPjT8fGL9n64WnBsdpOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e8:2e:cd:24:ec:9c:74:8c:5b:9a:73:55:88:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Validity
Not Before: Aug 23 10:02:11 2025 GMT
Not After : Aug 24 10:02:11 2025 GMT
Subject: CN=452d6518459a496784b0b4cb7cdabaffb2dea430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:03:22:16:48:d0:58:68:fb:9f:21:80:db:
4f:35:ea:c2:94:94:35:7c:51:5d:ce:ff:10:8a:7f:
a9:4e:ed:91:1f:cb:45:f9:9c:e3:cc:23:44:c1:35:
8d:4d:98:81:a7:c7:32:02:16:03:48:50:7e:64:cc:
19:21:01:97:dd:45:3c:2a:c8:02:df:5a:79:f6:3d:
67:30:f7:36:17:53:27:12:a1:fd:8c:15:07:08:68:
37:89:86:a0:bf:a1:80:28:1e:1e:31:89:5c:7d:47:
c4:50:14:44:f7:df:c1:65:6e:d9:8d:e1:a5:90:61:
6b:1c:8b:5b:08:01:39:5e:48:2f:f3:8c:29:43:37:
a0:25:3e:95:ae:43:29:92:eb:a5:9b:0a:6c:75:64:
82:ab:cf:7a:39:c1:a4:84:b5:30:ab:07:8e:48:3f:
60:19:3e:6b:de:33:ce:06:b1:63:68:30:bc:de:d0:
1e:1b:06:5c:01:85:82:32:2c:fd:d7:1f:43:4d:63:
ff:9f:dd:73:87:6d:cb:69:0a:54:04:2e:cb:f8:95:
b9:ec:01:f8:5d:b3:c9:58:e6:2e:c9:8e:cc:c2:92:
da:aa:59:46:02:5a:52:7f:19:e8:d7:d0:03:3b:3e:
39:76:8a:70:b9:fe:3b:51:68:10:49:ab:5f:87:c8:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2D:65:18:45:9A:49:67:84:B0:B4:CB:7C:DA:BA:FF:B2:DE:A4:30
X509v3 Authority Key Identifier:
keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9f:18:1c:07:c3:d8:77:3e:c2:5c:64:8c:49:e9:f8:b8:34:
ab:8c:06:7f:16:b7:2f:43:6c:21:d3:7d:a3:e4:f6:a4:98:2c:
bb:ec:cb:28:c1:44:a2:e9:d6:66:44:e8:f8:f3:80:90:47:17:
9f:7a:3a:ff:48:da:b9:89:7d:f2:9d:f0:48:31:cd:85:07:9a:
90:20:6b:d8:32:93:08:17:f6:3a:98:41:45:f7:b4:65:82:22:
6d:c6:52:9b:69:74:90:cb:2f:e3:fe:2d:ec:c1:8d:c6:ae:fc:
29:f4:7a:50:ab:ea:e8:08:30:32:f3:a3:8e:a5:2f:c5:ec:24:
6f:76:8b:21:b9:ec:b4:cd:a7:be:1d:06:f3:b5:48:bf:4f:b0:
28:fb:23:d9:cd:0f:53:5e:74:7f:d1:cc:fc:90:02:72:7d:48:
6a:73:cf:cb:2e:fb:3e:c7:f7:70:6c:62:51:cb:75:e8:91:5c:
7a:0f:06:b0:b8:79:c9:3b:e4:c1:f0:92:75:b4:f2:d3:72:98:
d1:16:9b:ad:25:b1:ee:5a:d9:14:44:5d:6f:5d:6c:b8:cf:59:
43:e6:44:35:53:95:ba:8c:be:be:ab:6c:51:bd:2c:04:01:ba:
7e:51:0a:59:b9:6b:26:04:20:a3:37:23:c3:46:f8:c9:dd:5f:
03:63:d5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:46 2025 by rpki-client