Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
File: PplTRJPLqcidveJi-HoVh6Sqmd8.mft (raw, json)
Hash identifier: 8KwKSasclN3aMLu9zUdHSRHoZEzMpBWwDrawugjOEPo=
Subject key identifier: D0:AB:80:FA:4A:F7:87:80:68:4C:AC:34:0C:9C:99:FD:1D:DE:8E:69
Authority key identifier: 3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
Certificate issuer: /CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Certificate serial: 019A00A3709ED0DB328D3CA8CA13E448343C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
Manifest number: 0117
Signing time: Mon 20 Oct 2025 08:01:42 +0000
Manifest this update: Mon 20 Oct 2025 08:01:42 +0000
Manifest next update: Tue 21 Oct 2025 08:01:42 +0000
Files and hashes: 1: OGmt6hTizBTWFlQiZVVHVA04Y3U.roa (hash: xCC8yaYb4MbRSmuBq04Jv3nbwpYcLxsiyEFiClMW7jI=)
2: PplTRJPLqcidveJi-HoVh6Sqmd8.crl (hash: Hz5EBTRISsyZ99HRmTCK1XxupDAIfQCLGRL4Q/S0l+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:70:9e:d0:db:32:8d:3c:a8:ca:13:e4:48:34:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Validity
Not Before: Oct 20 08:01:42 2025 GMT
Not After : Oct 21 08:01:42 2025 GMT
Subject: CN=d0ab80fa4af78780684cac340c9c99fd1dde8e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:91:72:3b:fd:a5:3d:a5:5f:78:6e:4d:2c:
55:9f:e9:3a:61:f8:32:d3:16:14:51:3b:80:c9:38:
a4:c3:11:84:ce:d3:9b:d4:f9:fd:55:da:1a:ba:94:
99:6c:53:43:9a:f6:f1:1a:cb:c3:16:6d:9b:b4:79:
4b:54:7a:45:35:ad:3e:59:ff:2e:a4:89:b5:bc:70:
a1:99:de:a0:d9:c0:72:78:e8:e6:df:8d:00:8e:fd:
db:1d:20:02:96:98:36:ca:e8:14:93:3a:04:2e:ff:
49:09:6d:0e:c9:bc:31:9f:6e:89:49:d8:c5:eb:83:
d2:df:ca:22:98:12:db:b8:de:49:58:e4:30:d0:f4:
51:1e:76:e6:93:9a:60:8e:ea:fa:5b:16:aa:44:00:
71:a5:e0:65:df:20:be:00:1a:92:aa:9e:61:1d:df:
dd:3d:91:5b:0c:96:cc:72:7a:11:de:7f:d8:9e:d3:
e1:37:2c:19:d8:91:99:3e:41:e1:2e:5d:78:14:51:
c4:3f:d5:6c:b5:ec:3a:c3:98:da:d3:4d:72:1f:bd:
a9:e9:69:a1:67:f1:76:63:e1:8b:dc:08:cb:09:7a:
42:1f:33:56:bb:60:5a:90:91:cd:6b:2c:11:09:8b:
16:39:22:59:df:21:4f:34:3d:c3:43:53:81:53:5c:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AB:80:FA:4A:F7:87:80:68:4C:AC:34:0C:9C:99:FD:1D:DE:8E:69
X509v3 Authority Key Identifier:
keyid:3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ac:9e:1c:57:d5:bb:d1:8e:3e:46:72:d4:e0:23:5d:71:02:
64:6d:92:45:6a:1a:43:5b:27:ac:51:3d:bd:6a:10:5c:bc:b1:
95:6b:a3:ca:0f:bd:54:9d:de:ce:2c:30:d1:49:73:1f:91:ae:
a5:bc:9e:bc:4a:83:4f:4c:29:35:b2:d8:b4:80:24:fe:ae:70:
6b:e4:53:c6:28:95:70:94:15:98:ce:5a:cc:00:97:8a:61:81:
41:65:bb:af:b8:66:c8:0e:57:ec:ae:2e:9d:cc:de:ad:78:e9:
74:3f:ce:d6:c6:fd:86:23:30:ef:2e:90:a9:5b:ba:b6:23:9f:
61:bc:ad:44:a3:bd:26:9a:55:ec:63:cd:cf:1e:8b:c5:30:99:
c2:07:94:5c:6d:ef:3c:05:6e:ab:4c:09:ba:9c:cf:14:95:6b:
69:dc:3f:10:f5:73:91:8f:40:8d:6f:7b:6e:65:9a:62:fc:d8:
4e:49:ad:78:18:b5:fa:98:91:f9:3e:ae:5f:3a:d6:6f:51:da:
2c:c0:fd:a9:de:52:14:79:9e:31:f2:82:5a:c7:93:95:24:9d:
d9:79:c2:a6:3b:1d:4a:79:b0:4c:e4:5c:79:13:d6:0e:64:f6:
7b:75:ff:37:0e:a8:35:f2:2b:1f:a1:3c:dc:af:ef:ed:28:a2:
b5:d7:c9:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAo3Ce0NsyjTyoyhPkSDQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOTk1MzQ0OTNjYmE5Yzg5ZGJkZTI2MmY4N2ExNTg3YTRh
YTk5ZGYwHhcNMjUxMDIwMDgwMTQyWhcNMjUxMDIxMDgwMTQyWjAzMTEwLwYDVQQD
EyhkMGFiODBmYTRhZjc4NzgwNjg0Y2FjMzQwYzljOTlmZDFkZGU4ZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjORcjv9pT2lX3huTSxVn+k6Yfgy
0xYUUTuAyTikwxGEztOb1Pn9VdoaupSZbFNDmvbxGsvDFm2btHlLVHpFNa0+Wf8u
pIm1vHChmd6g2cByeOjm340Ajv3bHSAClpg2yugUkzoELv9JCW0Oybwxn26JSdjF
64PS38oimBLbuN5JWOQw0PRRHnbmk5pgjur6WxaqRABxpeBl3yC+ABqSqp5hHd/d
PZFbDJbMcnoR3n/YntPhNywZ2JGZPkHhLl14FFHEP9Vstew6w5ja001yH72p6Wmh
Z/F2Y+GL3AjLCXpCHzNWu2BakJHNaywRCYsWOSJZ3yFPND3DQ1OBU1zoiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCrgPpK94eAaEysNAycmf0d3o5pMB8GA1UdIwQY
MBaAFD6ZU0STy6nInb3iYvh6FYekqpnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHBsVFJKUExxY2lkdmVKaS1Ib1ZoNlNxbWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wOTE2NDEtNTVlZC00MDNiLWE2ODct
NWVkMDc3ZWI4YmUwLzEvUHBsVFJKUExxY2lkdmVKaS1Ib1ZoNlNxbWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wOTE2NDEtNTVlZC00MDNiLWE2ODctNWVkMDc3ZWI4YmUw
LzEvUHBsVFJKUExxY2lkdmVKaS1Ib1ZoNlNxbWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKyeHFfV
u9GOPkZy1OAjXXECZG2SRWoaQ1snrFE9vWoQXLyxlWujyg+9VJ3eziww0UlzH5Gu
pbyevEqDT0wpNbLYtIAk/q5wa+RTxiiVcJQVmM5azACXimGBQWW7r7hmyA5X7K4u
nczerXjpdD/O1sb9hiMw7y6QqVu6tiOfYbytRKO9JppV7GPNzx6LxTCZwgeUXG3v
PAVuq0wJupzPFJVradw/EPVzkY9AjW97bmWaYvzYTkmteBi1+piR+T6uXzrWb1Ha
LMD9qd5SFHmeMfKCWseTlSSd2XnCpjsdSnmwTORceRPWDmT2e3X/Nw6oNfIrH6E8
3K/v7SiitdfJvw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:02:19 2025 by rpki-client