Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
File: PplTRJPLqcidveJi-HoVh6Sqmd8.mft (raw, json)
Hash identifier: QJt3xQDLu2qyWlmOMkABtPFRYJibzQnKGHPhpq5dYvA=
Subject key identifier: 57:DF:65:43:BC:44:3A:64:73:96:54:64:DA:B3:8C:5A:4D:2E:E4:F0
Authority key identifier: 3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
Certificate issuer: /CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Certificate serial: 0198D73B499F543322358BF25C4CE7539AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
Manifest number: 7D
Signing time: Sat 23 Aug 2025 14:00:43 +0000
Manifest this update: Sat 23 Aug 2025 14:00:43 +0000
Manifest next update: Sun 24 Aug 2025 14:00:43 +0000
Files and hashes: 1: OGmt6hTizBTWFlQiZVVHVA04Y3U.roa (hash: xCC8yaYb4MbRSmuBq04Jv3nbwpYcLxsiyEFiClMW7jI=)
2: PplTRJPLqcidveJi-HoVh6Sqmd8.crl (hash: Yx84GVZ1TwYheSsZEw3VIGAVHSkjPP49LRgb1Kn82oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:49:9f:54:33:22:35:8b:f2:5c:4c:e7:53:9a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Validity
Not Before: Aug 23 14:00:43 2025 GMT
Not After : Aug 24 14:00:43 2025 GMT
Subject: CN=57df6543bc443a6473965464dab38c5a4d2ee4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:c0:66:af:9d:e3:ec:55:f5:df:7e:0f:60:
13:ea:20:08:b3:76:33:8e:38:ce:0d:d6:99:8a:c5:
bd:1a:c9:37:2c:b3:32:91:b0:14:d2:03:7b:4e:50:
47:f7:cf:be:d5:7b:b6:04:d0:59:6c:ea:90:6b:74:
48:3c:0e:24:4b:1f:57:9a:1d:cd:46:e6:92:82:02:
d7:ca:35:23:8f:cd:1e:61:d6:b0:1c:6f:05:fd:19:
67:97:d4:18:82:a6:00:00:b4:ee:01:9e:a9:16:7a:
b2:a1:87:b1:0b:ce:d0:76:20:17:35:0b:de:3a:fe:
d1:7c:c1:4d:6e:e6:f9:be:bd:20:62:58:99:2d:b5:
25:42:91:22:c2:6d:7f:53:ca:b9:1a:7c:7d:58:30:
ee:f8:72:7b:a2:6b:80:cb:95:05:6b:13:11:b6:20:
49:e9:68:b4:05:06:3c:61:50:01:b7:88:15:95:7e:
41:54:31:f8:9e:2f:fb:b1:c4:ef:af:e5:d4:83:35:
00:cf:66:2a:98:87:98:94:f7:bd:51:05:6a:25:c9:
be:cd:b3:b7:af:28:18:e7:83:a1:3a:9c:90:ce:34:
13:f8:35:5d:d0:27:f5:5a:7c:ae:92:56:14:63:a3:
9e:c0:3b:22:22:c8:19:4a:8e:56:62:ae:43:94:46:
54:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DF:65:43:BC:44:3A:64:73:96:54:64:DA:B3:8C:5A:4D:2E:E4:F0
X509v3 Authority Key Identifier:
keyid:3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:91:9d:c3:e0:30:84:41:b5:8f:11:c2:ac:39:6c:97:b2:0f:
8e:d7:e0:53:26:4a:4a:84:88:09:34:f1:42:66:38:fb:65:59:
eb:14:87:33:8a:16:be:9a:5f:e2:d9:5d:1d:2d:30:32:b1:7c:
90:a6:8e:a1:d0:72:cd:ef:0a:f8:0c:dc:b0:e9:15:56:15:09:
02:0a:74:6d:b4:d2:b1:8c:63:a3:cb:80:3a:79:a9:46:3f:19:
7a:f5:f9:2d:14:48:1e:c9:67:4e:83:ed:7b:af:bb:7a:4b:69:
6b:51:a7:2c:ba:0d:bb:03:d4:89:c1:ce:94:47:94:fd:6f:cf:
7a:a5:4e:bc:ec:9d:83:d2:2e:3a:d6:39:f8:20:b9:d7:82:d9:
46:dc:3e:e5:f4:e2:50:52:16:88:f8:1f:3d:65:f3:b5:ce:d8:
83:bf:6d:ba:4f:45:d5:cc:f6:35:8e:7e:01:ad:f4:ab:e8:e6:
76:20:44:8a:41:26:35:0a:59:e7:ca:ef:7b:77:58:f9:ac:6d:
6e:25:dc:9d:06:61:ba:a5:48:86:eb:0e:38:6c:f2:7f:de:95:
97:1a:af:ba:88:99:6e:0f:79:1f:76:1f:b6:28:85:86:bf:41:
3e:c4:fb:f8:72:d2:f1:89:8a:30:f6:32:1f:57:f9:5a:2d:70:
71:ea:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:55 2025 by rpki-client