Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: deMKfVMtS6tCvE0DkjPcGnSRUpC1Os6+CCXSfXCgEyQ=
Subject key identifier: 4A:EC:26:12:C2:14:B2:6A:76:54:94:C1:60:D5:56:61:7A:0D:50:BE
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 0198D7734A374F8CB3EFD60975FB98C1FACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 05B7
Signing time: Sat 23 Aug 2025 15:01:53 +0000
Manifest this update: Sat 23 Aug 2025 15:01:53 +0000
Manifest next update: Sun 24 Aug 2025 15:01:53 +0000
Files and hashes: 1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: PhJKqn8d2p4YywdfQ4Bm9RnaOeZ79fv9OjJqAM5WyY0=)
2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=)
3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:4a:37:4f:8c:b3:ef:d6:09:75:fb:98:c1:fa:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Aug 23 15:01:53 2025 GMT
Not After : Aug 24 15:01:53 2025 GMT
Subject: CN=4aec2612c214b26a765494c160d556617a0d50be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:91:98:07:bb:68:2d:9f:60:af:00:fe:6f:
97:ec:2f:6e:2b:12:26:0e:d9:11:d4:ca:99:eb:78:
ee:27:66:12:02:87:f8:93:82:94:87:1b:4a:6f:36:
aa:75:f3:fc:e1:6d:1b:fb:7a:ed:7b:53:f3:01:a4:
d8:67:7d:27:38:82:49:2a:f3:a5:82:bf:66:82:e4:
57:0f:26:ec:7d:ab:d7:7e:50:64:d6:19:db:c1:5d:
79:26:ec:d0:3d:dd:53:c2:ab:28:52:c4:15:43:64:
b2:62:80:32:d4:bf:f9:f6:09:bb:15:dc:72:1d:8d:
53:f6:2e:96:bb:08:a4:41:45:0f:3a:dc:47:f7:24:
95:46:67:b4:12:50:d6:f0:34:3d:fb:ba:73:4b:cb:
1c:d0:61:40:4a:e1:39:fa:a6:5c:02:5b:a4:05:5e:
91:57:f6:e6:7f:5a:45:d3:f2:7e:94:b9:b3:26:75:
12:c0:cf:77:ce:fc:4c:e6:29:62:cb:e3:cc:c8:5a:
1b:9b:7d:c7:84:7b:fc:dc:04:63:9f:74:37:f6:ac:
73:8f:94:f5:b2:d0:e8:5b:2e:85:00:dd:f4:b6:26:
ef:ee:79:d5:6b:14:de:01:1a:87:96:d3:f0:0e:40:
ee:c8:1f:3e:a7:09:99:64:e2:01:24:c1:d2:dd:0f:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EC:26:12:C2:14:B2:6A:76:54:94:C1:60:D5:56:61:7A:0D:50:BE
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cd:5c:14:72:7f:73:c7:fc:3d:81:50:dd:09:e4:62:10:52:
89:ba:3e:f5:fb:5e:8d:2d:97:46:37:23:9f:2b:d0:f7:96:8a:
1a:b5:09:28:7d:c6:73:25:03:14:12:de:f7:d4:6a:ab:89:bb:
8a:67:88:2f:e4:9f:c3:54:69:0f:db:bc:46:08:ff:20:ff:d8:
3e:2e:f8:ee:ee:4f:65:e9:21:55:7c:b6:7a:e9:d3:81:9d:ed:
de:3e:01:4c:51:d2:be:af:5d:03:ca:43:59:d9:22:97:ef:ca:
9c:8a:f2:e9:51:a2:27:77:32:82:07:51:71:fa:d6:5c:31:c0:
71:44:15:72:b2:5e:80:14:54:03:ed:b6:e8:79:cc:60:27:82:
9c:61:f4:11:9f:58:20:0d:7c:85:25:6e:5f:13:d4:6f:ba:a5:
b6:33:a0:0c:7c:c5:d4:8b:1d:f0:aa:bd:20:96:0b:26:56:98:
c7:ec:55:c7:e5:24:7c:3b:25:4c:a7:2f:59:ef:9d:e2:8e:40:
3e:3f:9f:93:05:62:b9:6c:5c:de:ac:d6:27:41:9c:a5:9f:a6:
6e:28:42:14:3a:e5:38:47:98:c2:73:c8:1b:ae:4d:ed:e3:b2:
02:8d:7c:c2:da:9c:f2:f7:f9:a7:31:b4:3a:f5:19:3f:9f:9f:
7a:d5:a8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:01:09 2025 by rpki-client