Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: I5krcy6rUWgfFeZPH3HnvpFNcgMlRebKc+oY1ldY7wo=
Subject key identifier: 8A:C8:A3:16:D9:EE:F2:E7:A8:6C:23:CE:96:A8:FD:62:7F:5C:6D:A1
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019A00DA66FBAE62CA30C5C62751AD8F406B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 0651
Signing time: Mon 20 Oct 2025 09:01:44 +0000
Manifest this update: Mon 20 Oct 2025 09:01:44 +0000
Manifest next update: Tue 21 Oct 2025 09:01:44 +0000
Files and hashes: 1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: H9EYzyEpd75KxtPC4hclf4jA/DJcnOJunmZtrLxQESg=)
2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=)
3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:66:fb:ae:62:ca:30:c5:c6:27:51:ad:8f:40:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Oct 20 09:01:44 2025 GMT
Not After : Oct 21 09:01:44 2025 GMT
Subject: CN=8ac8a316d9eef2e7a86c23ce96a8fd627f5c6da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:d4:d9:cd:36:fe:8e:ad:f8:6e:93:bb:85:
d0:07:b5:ed:6a:dd:39:87:a2:f1:25:ee:8f:0c:24:
e7:ba:73:99:6a:24:7d:cf:7b:60:9e:5c:f9:28:5c:
00:3c:fb:48:40:78:30:cf:b3:af:a6:54:2d:f4:c7:
20:19:97:bc:ad:34:28:c2:94:69:83:9a:83:51:6e:
c0:ba:f5:4c:0f:5b:e7:e5:9c:0b:b4:3b:dd:80:21:
bf:aa:e5:be:82:57:be:d2:35:31:9f:fe:e3:65:de:
37:45:94:eb:64:b0:a7:b4:1c:d6:44:45:17:e7:d3:
b9:f1:a2:71:c5:66:48:28:28:70:5d:28:6e:bc:2b:
a6:32:7c:37:35:62:0b:1f:b9:7e:9c:d3:e1:1e:48:
d5:32:e7:cb:f4:cf:11:33:bc:38:a3:57:30:cc:df:
6c:43:67:c6:fa:6e:ca:8d:8b:e8:a6:da:e8:6f:7c:
7e:ea:cf:33:0d:db:f4:03:b4:1d:c2:23:96:46:45:
c5:38:a4:b4:a5:c6:cc:65:82:3c:03:73:38:a8:8b:
8c:1b:63:37:d5:68:03:25:5b:0e:8b:ca:d2:a6:57:
a4:64:4b:78:3b:d5:c7:1b:28:6c:3d:1c:e2:0d:e6:
7a:2d:13:87:ea:7f:b2:26:7e:ce:3f:cf:64:1e:c7:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C8:A3:16:D9:EE:F2:E7:A8:6C:23:CE:96:A8:FD:62:7F:5C:6D:A1
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8d:94:b5:5a:e7:61:bf:29:20:ee:dc:f0:7d:5a:f0:27:f0:
f1:82:01:36:b3:70:72:5e:c7:bf:10:b9:a2:99:12:dd:57:19:
03:b8:bb:e2:8e:e5:33:36:93:17:b9:fb:2b:f6:93:8e:e3:1d:
45:a5:29:a7:b6:37:65:55:41:46:3f:e9:f7:5a:0b:77:14:80:
f8:23:0e:20:e6:de:f3:4a:15:df:9e:0f:27:76:c1:e9:90:e5:
4a:61:b8:e9:9d:4e:e5:c5:4e:47:ce:db:33:e8:66:fc:8d:55:
2f:5c:35:85:27:23:c3:b5:d4:6c:a8:2a:73:fd:38:81:4f:dc:
fc:05:12:03:a0:87:b3:54:37:cc:84:f8:1d:8a:3e:30:b0:06:
91:02:25:11:61:0b:90:2a:85:76:39:b8:dc:69:a2:e8:01:da:
6d:72:a9:6e:e4:9e:5c:d6:ab:9c:9e:b8:6e:4a:50:af:1c:ae:
43:05:b3:de:e5:16:44:e6:71:e7:68:5d:5a:37:02:d2:fa:40:
53:47:e6:bc:6a:37:d1:23:20:3e:34:2f:30:19:0b:2c:49:f8:
b7:68:4a:53:8e:02:89:e5:6e:4d:69:f7:88:4e:a2:f2:7b:a1:
1c:8e:71:4e:9b:d9:b8:a1:02:21:d3:d4:b4:d4:36:5d:5e:b0:
47:6b:88:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:46 2025 by rpki-client