Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
File: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft (raw, json)
Hash identifier: hZGH90jen55/lZPEfv2PGq940QmUxQoNY0IX7zZ1awE=
Subject key identifier: 1E:48:7E:23:33:56:76:93:98:0C:46:04:48:47:72:98:38:8E:1F:E0
Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
Certificate issuer: /CN=a4b707300e869467be5e5273222d90e0b618f924
Certificate serial: 0198D54E5323367074A3775AD50048AE2666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
Manifest number: 3C
Signing time: Sat 23 Aug 2025 05:02:16 +0000
Manifest this update: Sat 23 Aug 2025 05:02:16 +0000
Manifest next update: Sun 24 Aug 2025 05:02:16 +0000
Files and hashes: 1: Da4NL5ou2Ng6yl8t-CCdMuLCewQ.roa (hash: w8OukO5+kU54dtVhEXa7iFOMv+PZYBgOzEl0TR/qCD0=)
2: MR_f-x3g7wcjluP2eCx_et2XgAo.roa (hash: bnbauqYg41qtiywoh5HUkv8me54R7s04AvQU8Lpnw6o=)
3: P5sDSR0HZnHki4I0AlMWpThVrhE.roa (hash: e88MDF3UQ11sNY2bgPKcHFav86x/WiIPqzESbe9NCCs=)
4: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl (hash: kvCZzDHrKfC4qDG4W16lZ9kfEz4O2cizAc5HRZZkFHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:53:23:36:70:74:a3:77:5a:d5:00:48:ae:26:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924
Validity
Not Before: Aug 23 05:02:16 2025 GMT
Not After : Aug 24 05:02:16 2025 GMT
Subject: CN=1e487e2333567693980c460448477298388e1fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:5d:ec:03:57:6c:ec:59:1b:ee:3d:ff:dd:
08:70:72:bb:e0:dc:51:cd:8d:18:e3:3f:d6:04:c2:
e3:b3:e5:3f:96:c5:e1:2c:f3:e6:9f:af:cd:6e:ab:
60:f3:d1:2d:0a:2b:c1:14:24:fe:ed:fc:c4:cc:64:
3a:61:31:20:1c:3d:c7:dc:99:c5:76:00:87:ba:da:
e7:f8:d8:ac:1a:fa:44:53:bc:45:8c:bb:ef:c8:98:
84:d0:86:0d:84:3b:f0:3e:e4:73:f9:ca:00:9f:59:
e8:c9:b8:b9:8e:4d:7f:b8:40:45:42:5c:2a:89:22:
e2:02:83:26:22:5b:3e:2d:22:5c:d9:97:8a:4b:1b:
5e:2d:70:f9:e9:f7:b0:c4:44:88:6c:26:79:24:8b:
fd:a5:78:d8:eb:f6:43:eb:a8:d4:44:b5:ea:d2:48:
2b:a3:b9:f5:2e:85:9e:5c:24:13:2e:34:a5:b5:6a:
f7:b8:1c:01:5d:92:3f:d5:25:ef:14:54:d3:8d:c2:
60:df:40:c2:a3:44:19:69:c4:3d:32:bb:30:f4:06:
29:5f:ec:73:ef:8f:f9:7b:07:2d:55:c2:15:31:64:
77:fb:95:54:bf:14:50:6c:33:b5:40:11:13:dd:c0:
d6:61:79:49:5e:74:89:dc:12:3c:0d:2f:28:bb:7f:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:48:7E:23:33:56:76:93:98:0C:46:04:48:47:72:98:38:8E:1F:E0
X509v3 Authority Key Identifier:
keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:78:c2:9f:05:89:95:5f:1a:ad:00:92:f2:39:53:67:89:5f:
6f:b4:5f:53:f7:17:f0:af:ef:69:a1:8b:1f:a6:b2:fb:2f:67:
06:b5:82:45:d7:06:68:a6:3e:17:1f:df:0d:47:cc:c6:3b:4f:
3e:d8:e6:c5:df:0c:69:44:44:e9:ed:fc:4e:a5:cc:60:03:cc:
ce:0f:d4:5f:28:ab:d2:ab:1a:3a:ce:de:de:48:dc:ba:49:08:
1e:10:2c:2d:75:8b:77:cc:44:4f:d7:5f:56:33:b1:b2:51:d6:
22:e0:53:ea:15:c6:74:3f:74:4e:c5:4d:ae:57:12:a8:52:a2:
2a:dc:4f:10:63:c2:4f:4c:ef:57:7c:b5:f1:23:86:83:09:d1:
9a:66:cb:cd:3a:08:18:fe:bc:94:ab:c5:89:9b:16:37:d8:97:
a9:c8:8f:8c:21:95:d6:69:39:b8:04:aa:f5:81:16:9c:07:28:
4e:ee:f2:11:28:c2:59:fd:98:f1:14:1a:65:c8:3f:3a:d8:65:
4f:87:01:56:31:33:9f:4b:13:10:bd:c0:17:bf:0d:44:2a:e2:
0d:39:aa:b0:61:47:13:c9:a4:9f:6d:ae:25:f9:c9:0e:8b:39:
a6:49:f7:3b:1c:24:fe:65:8c:55:10:75:7a:42:b6:f9:09:76:
7c:d0:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:12 2025 by rpki-client