Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: PRDIZiY0RXcdQ2kxn5RS4IsN8T732ged9lLpPRH8tuk=
Subject key identifier: D8:77:F4:31:C3:A7:CD:BE:D0:3B:0F:3E:E2:10:C8:38:0C:AE:F3:89
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 0199FDD9ECD0DC72DD343B47A7D59F3B8DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 084C
Signing time: Sun 19 Oct 2025 19:02:21 +0000
Manifest this update: Sun 19 Oct 2025 19:02:21 +0000
Manifest next update: Mon 20 Oct 2025 19:02:21 +0000
Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: JLBbxwOC/sPsNVXS29BATIFx3ETszA0+SvTZeiRT+rU=)
2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ec:d0:dc:72:dd:34:3b:47:a7:d5:9f:3b:8d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Oct 19 19:02:21 2025 GMT
Not After : Oct 20 19:02:21 2025 GMT
Subject: CN=d877f431c3a7cdbed03b0f3ee210c8380caef389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:f8:b2:01:11:5f:75:d4:cd:31:2f:e6:1d:
44:ed:b0:ea:43:cf:4c:3f:cf:cd:75:c8:c9:72:74:
4d:20:cb:d8:9d:c6:22:7f:f2:7e:f0:32:2c:79:56:
a6:94:88:47:f1:81:59:4b:df:f2:92:de:da:45:81:
d2:b5:67:57:05:6e:b5:c9:bd:1d:6e:d5:1f:ae:e6:
99:7c:f2:95:b7:8c:fe:2f:fe:13:fb:b7:ac:6f:27:
39:56:b0:8e:b0:2a:0a:72:33:79:bc:df:4a:ac:07:
fe:fb:40:73:09:13:bd:d4:fe:54:1d:ca:91:cf:ee:
85:2e:c2:ca:43:da:fe:9d:41:97:a9:70:f9:0a:15:
88:95:30:c8:d8:10:d7:b3:b4:be:dd:7e:3d:9e:5b:
4c:9d:28:91:02:31:c6:d3:cd:8f:b3:73:5f:01:13:
0b:71:f1:71:8a:f0:49:54:82:e5:6a:ef:85:64:40:
aa:7e:a7:8f:36:2c:f3:3c:b5:67:90:3a:e2:d1:5d:
ef:d0:86:b1:4b:9c:5b:07:d7:a7:37:b5:72:3c:45:
ea:48:8a:36:f0:09:b2:d4:a8:c6:8f:88:63:95:fd:
b0:a1:8b:f4:ce:af:96:8f:08:34:75:ee:ed:82:b8:
d7:30:b0:0a:f5:8d:ba:20:69:76:70:f7:4d:6d:26:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:77:F4:31:C3:A7:CD:BE:D0:3B:0F:3E:E2:10:C8:38:0C:AE:F3:89
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9b:83:e5:c3:08:37:0d:22:a4:2c:da:40:2b:d9:e0:f0:8e:
21:e3:4d:65:88:0a:1a:52:2a:24:7d:a0:8e:86:88:5a:a5:1a:
2b:09:10:2e:cd:a2:96:73:02:f3:d9:d4:b1:b7:0d:86:87:bb:
25:b5:d5:dc:9c:ca:8d:a0:06:25:8e:6c:c7:4d:6d:72:dc:4e:
ac:2c:60:fd:40:6e:05:a5:af:b2:62:a4:36:ff:10:e3:38:2c:
75:ac:d6:e2:37:26:2a:65:16:2d:29:9f:06:84:1c:51:55:9d:
88:dc:bd:cf:73:7c:1a:1d:3c:57:46:e9:5b:8a:92:6c:bb:12:
34:14:79:07:28:54:e7:95:31:54:76:9f:79:58:d1:9a:d1:05:
b6:04:2a:c6:78:d5:84:c4:3a:d9:be:5d:9d:eb:35:c5:bc:5a:
24:dc:37:6c:70:89:3c:aa:4e:24:da:e9:34:5e:42:dd:58:44:
55:5c:54:5b:13:8b:b7:9e:f2:04:7b:9d:1d:48:f1:6c:37:89:
2d:db:1a:04:2e:5f:fd:b2:1e:57:84:a0:f7:f9:f9:b1:e4:e4:
a0:af:fa:6c:2c:0e:de:7a:14:03:c3:dd:f9:9c:fd:7b:2b:6a:
65:24:ea:b6:ed:06:0d:cd:8d:74:97:6f:1b:d8:28:f7:50:6f:
c8:b0:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:44 2025 by rpki-client