Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json)
Hash identifier: aMTvtUhh36YhaalwkWWD6NIgnT5matl2k57tEIPcjZw=
Subject key identifier: D2:26:90:E3:DD:9A:A6:3D:AC:57:37:6D:70:85:63:CF:71:6B:2C:C2
Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Certificate serial: 0199FBEB0C925A70326009FB9A9EE2ABD471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: Wjb4DD2kmKGeTSh00Wkjg5OhEryv2oMhMETvNbKdNNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0c:92:5a:70:32:60:09:fb:9a:9e:e2:ab:d4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=d22690e3dd9aa63dac57376d708563cf716b2cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:43:4f:e5:42:33:3e:0d:6f:00:4f:84:b2:
a9:c4:35:9c:66:21:91:b8:2b:55:22:3b:40:1d:f8:
3a:9f:d1:54:00:a3:23:6c:8a:90:5f:28:b4:9d:e1:
c5:c9:a9:5f:81:1a:48:d3:8c:64:45:d5:c2:3c:b1:
41:5f:47:ac:98:4b:fe:7a:24:4c:04:2e:15:a4:34:
c2:0d:80:5d:d8:58:e3:ea:3c:f2:59:05:38:5f:e3:
09:10:18:6b:27:07:03:c1:22:d2:9d:29:0d:95:8b:
4b:52:70:83:5e:c6:fe:bc:9e:87:95:38:c2:9e:ee:
73:91:ec:0a:e1:5c:1c:99:d0:13:bd:95:51:50:60:
2d:ee:61:60:13:29:ea:e8:0f:6a:73:5b:12:7f:30:
9f:ff:df:e3:65:17:2d:1b:26:6c:0d:33:20:6b:89:
b4:13:de:d9:a3:a3:a5:01:2f:e8:67:a3:6f:b2:c7:
5e:35:44:03:05:6a:e1:a5:43:e4:fc:53:e6:cc:70:
cb:5e:c7:01:7b:f1:2c:cc:9f:81:cf:0a:93:56:32:
9d:10:a9:73:a4:24:0a:4d:c8:87:03:10:13:91:9c:
dc:80:e3:c3:e5:59:b9:01:8b:ab:d9:a0:43:6e:17:
f4:2c:7f:cf:d7:f7:0a:4c:47:25:03:cc:b7:ab:df:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:26:90:E3:DD:9A:A6:3D:AC:57:37:6D:70:85:63:CF:71:6B:2C:C2
X509v3 Authority Key Identifier:
keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:46:54:91:9b:77:3d:90:05:76:f4:f6:c1:a6:49:33:7c:81:
c6:e1:49:88:c1:fe:f3:53:81:b7:73:a9:40:05:32:20:cc:04:
a0:a6:c3:d5:3b:c9:83:72:5f:eb:57:6c:36:4f:93:5f:ce:76:
66:a6:82:4f:cd:d1:b7:1b:d6:09:44:f2:ca:7d:26:52:e6:2c:
c5:ac:ef:ba:92:d1:b5:05:37:08:1e:0c:e3:8c:32:a8:89:57:
77:9c:e8:3d:11:79:8d:c8:e8:5a:d7:c2:d6:14:b6:63:1e:f2:
7a:23:e5:ba:da:b4:22:00:78:78:b6:5d:45:61:fa:4d:a1:82:
36:b5:05:cc:89:16:38:c8:0e:4f:1b:34:28:72:f6:31:10:b8:
8f:91:c0:80:47:c9:8b:fb:ea:36:80:bd:5f:59:3e:f3:00:6f:
aa:5f:7b:cd:0d:3d:91:70:4c:f3:45:af:72:63:4e:f4:0d:87:
7e:b4:40:ba:5d:f2:4b:ab:85:26:93:81:f2:cd:0f:49:7e:c7:
40:e1:4d:65:aa:09:7c:0e:1a:48:00:cf:3a:98:3d:96:58:84:
13:20:81:7c:fc:bb:c0:15:5b:08:c2:f1:54:e1:4d:60:9e:16:
0d:bb:22:f0:11:db:f0:15:f4:0e:5e:da:71:96:fc:38:d9:99:
e6:4b:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:54 2025 by rpki-client