Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
File: pLZdoXU_tO7tuG_ah906-mnYYtA.mft (raw, json)
Hash identifier: XkL0P8zTSPU9Y+mz9GJjrPZ+Rzyix9GqQnS4W4WLh54=
Subject key identifier: E2:24:EA:5B:4F:23:D5:F5:63:6E:48:30:4F:60:D9:37:3D:EF:64:AD
Authority key identifier: A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
Certificate issuer: /CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Certificate serial: 0199FBEAA38F866DA10B299BFF27D8E478E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
Manifest number: 0A5C
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: 9VAtH6rT9AmgMjM5y2MsDg-1uuk.roa (hash: wQrCWKGL3Sn9wGoFnk6i9VJ1UdYXoGTZv1+i2lw0LfY=)
2: pLZdoXU_tO7tuG_ah906-mnYYtA.crl (hash: wrw62mYYuVwEcMPYZUt9IIECxnfmXjsZ4/6YoxuK2Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a3:8f:86:6d:a1:0b:29:9b:ff:27:d8:e4:78:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=e224ea5b4f23d5f5636e48304f60d9373def64ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:a9:d5:fb:de:33:49:ab:5d:8e:0d:25:58:
9d:bf:9a:40:79:85:4b:53:db:a5:db:a6:f9:04:60:
74:d9:01:f4:68:a5:43:d0:ce:60:45:2a:02:c6:7d:
1a:a8:97:e2:51:9d:69:10:79:19:7c:e7:54:bd:7f:
7c:15:4e:e9:96:f3:2e:ea:98:08:f2:48:40:3a:56:
4c:59:93:e7:ad:27:3a:37:c5:8f:78:25:11:a0:15:
d1:65:77:c4:21:9f:f9:e6:85:5a:58:bd:dc:53:5a:
bf:6e:d6:63:8f:4d:41:19:7c:45:ce:c8:09:89:8e:
05:bb:0c:a2:1a:bf:ae:25:71:00:85:f4:a4:b0:cb:
d9:d3:ba:7e:58:9b:0e:95:6d:01:e5:5c:1b:19:16:
7a:bb:57:5c:a3:9c:33:06:da:c2:85:ef:08:3f:7b:
3e:f3:5b:4f:d9:36:23:c3:f4:c2:fc:e3:4e:d5:85:
6f:77:9a:56:b0:63:a2:5c:31:87:d1:60:df:e6:8b:
ca:1e:78:d3:d3:6b:5b:04:94:8a:26:b3:89:e4:f1:
e5:a6:e1:ed:dd:be:db:88:8d:ba:f2:00:81:73:41:
a7:83:98:f0:f8:30:e7:1a:f3:d2:11:be:c2:a7:73:
a6:90:57:3e:85:98:52:93:8a:a4:d5:dc:8e:59:6e:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:24:EA:5B:4F:23:D5:F5:63:6E:48:30:4F:60:D9:37:3D:EF:64:AD
X509v3 Authority Key Identifier:
keyid:A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fa:f5:ee:d1:8a:09:9b:cf:33:b1:8b:c4:72:9e:8d:f7:31:
d6:d6:28:d3:8e:bf:25:ea:12:f3:b6:97:c2:50:61:d3:c1:fc:
4e:e5:c2:17:fd:a6:1f:77:5e:2e:98:91:aa:5e:92:ff:05:bd:
54:45:66:65:78:6a:79:d9:2e:21:57:19:40:66:d0:f3:94:54:
14:56:6e:0d:8c:52:32:6c:83:59:61:62:71:a4:a5:a5:5c:1f:
bd:ed:d2:cb:4f:4c:12:4d:db:31:cd:fa:a2:f8:6c:aa:59:64:
96:7c:a0:c9:b0:59:92:ba:5f:84:48:3e:8b:87:90:a7:1b:75:
db:9a:5e:9c:4c:7e:27:a7:94:a9:1e:7b:a9:79:e4:71:85:c9:
d3:11:27:f3:22:bf:da:82:c9:22:87:c6:9a:dc:b8:94:68:2e:
c1:6c:0d:cc:89:00:de:24:24:36:12:12:08:2d:4e:27:23:12:
df:63:ae:12:b7:42:b1:13:1b:0f:a5:fc:74:75:28:5b:54:8c:
8d:5c:43:ea:17:72:62:68:04:3d:57:2c:96:62:d3:d6:16:b0:
5c:91:5e:3c:b3:7b:b2:78:72:00:94:f9:bc:02:b4:32:b5:e5:
0b:06:80:6e:bd:87:8b:d7:ab:d5:45:c0:4a:cd:67:2c:cd:d7:
82:af:93:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76qOPhm2hCymb/yfY5HjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjY1ZGExNzUzZmI0ZWVlZGI4NmZkYTg3ZGQzYWZhNjlk
ODYyZDAwHhcNMjUxMDE5MTAwMTIyWhcNMjUxMDIwMTAwMTIyWjAzMTEwLwYDVQQD
EyhlMjI0ZWE1YjRmMjNkNWY1NjM2ZTQ4MzA0ZjYwZDkzNzNkZWY2NGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv+p1fveM0mrXY4NJVidv5pAeYVL
U9ul26b5BGB02QH0aKVD0M5gRSoCxn0aqJfiUZ1pEHkZfOdUvX98FU7plvMu6pgI
8khAOlZMWZPnrSc6N8WPeCURoBXRZXfEIZ/55oVaWL3cU1q/btZjj01BGXxFzsgJ
iY4FuwyiGr+uJXEAhfSksMvZ07p+WJsOlW0B5VwbGRZ6u1dco5wzBtrChe8IP3s+
81tP2TYjw/TC/ONO1YVvd5pWsGOiXDGH0WDf5ovKHnjT02tbBJSKJrOJ5PHlpuHt
3b7biI268gCBc0Gng5jw+DDnGvPSEb7Cp3OmkFc+hZhSk4qk1dyOWW4eZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIk6ltPI9X1Y25IME9g2Tc972StMB8GA1UdIwQY
MBaAFKS2XaF1P7Tu7bhv2ofdOvpp2GLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExaZG9YVV90Tzd0dUdfYWg5MDYtbW5ZWXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yYTU3YmUtYmU3Ny00NDI4LThlOTMt
YmE1MjAxZWE1ZjgzLzEvcExaZG9YVV90Tzd0dUdfYWg5MDYtbW5ZWXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yYTU3YmUtYmU3Ny00NDI4LThlOTMtYmE1MjAxZWE1Zjgz
LzEvcExaZG9YVV90Tzd0dUdfYWg5MDYtbW5ZWXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvr17tGK
CZvPM7GLxHKejfcx1tYo046/JeoS87aXwlBh08H8TuXCF/2mH3deLpiRql6S/wW9
VEVmZXhqedkuIVcZQGbQ85RUFFZuDYxSMmyDWWFicaSlpVwfve3Sy09MEk3bMc36
ovhsqllklnygybBZkrpfhEg+i4eQpxt125penEx+J6eUqR57qXnkcYXJ0xEn8yK/
2oLJIofGmty4lGguwWwNzIkA3iQkNhISCC1OJyMS32OuErdCsRMbD6X8dHUoW1SM
jVxD6hdyYmgEPVcslmLT1hawXJFePLN7snhyAJT5vAK0MrXlCwaAbr2Hi9er1UXA
Ss1nLM3Xgq+TuQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:59 2025 by rpki-client