
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
File: Pls0eWfOpnu2K2nSWazeS4-elBc.mft (raw, json)
Hash identifier: EcQnkmVmZl+yswmLLD0aOZy6CIsSJYuS++3pf8q/XiU=
Subject key identifier: 07:15:98:BE:F6:CA:B5:1B:6A:72:4F:74:C8:C4:92:22:73:10:EA:30
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Certificate issuer: /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial: 0199FBEA9E6BDDC28742F54822293450C454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
Manifest number: 0BF9
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: Pls0eWfOpnu2K2nSWazeS4-elBc.crl (hash: bT1WCZpwyJH3u11EzJeIv5a1i/LfKEfb177LubVxjUw=)
2: yeykCTxRfXSLEqjo1MZ7zObmrks.roa (hash: 1vVWF5KJNfMy/yYL5Sp0YWKLB5R7wsPTTiR6VRMJgCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9e:6b:dd:c2:87:42:f5:48:22:29:34:50:c4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=071598bef6cab51b6a724f74c8c492227310ea30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:59:07:10:81:d1:bc:a1:37:ea:34:b0:78:
11:a2:bd:08:5c:19:03:2e:a2:f6:b0:bc:3e:9e:e5:
38:72:2c:1d:8f:47:8c:89:4f:fe:0b:6e:7d:3c:ff:
b1:a0:ab:cb:57:b1:8c:ab:88:c5:be:35:f9:31:72:
44:72:c3:35:ca:a4:82:02:a5:5b:1d:45:38:fa:1e:
10:75:29:5b:2c:31:23:49:29:4d:15:2d:41:fe:9d:
37:5f:35:1e:f6:5b:77:68:26:22:d7:96:27:fe:35:
f1:2f:13:e0:e0:79:f6:40:99:ef:1c:f3:ff:e5:69:
8c:1b:ea:39:3c:07:4c:24:60:05:a2:02:14:40:8e:
f4:9c:58:b9:7f:6e:b7:6b:e7:46:9a:5e:7b:a7:f8:
3d:25:d4:a8:ab:3f:61:51:01:54:a7:86:1e:a1:db:
7a:2d:c4:0d:5d:c2:15:f7:9f:0f:86:39:e0:0f:a4:
b1:d4:f0:79:fb:25:ec:29:7b:25:fc:36:2a:13:59:
4f:7f:07:8a:07:1a:02:fe:07:d6:be:03:99:08:f7:
24:23:7c:55:25:2e:7a:a4:28:ee:38:5b:ea:7c:b8:
60:93:85:cd:bb:a1:d5:a5:e2:c3:14:b1:c3:b4:95:
f1:60:db:49:c2:c1:a5:be:b7:2a:13:a5:b0:48:0a:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:15:98:BE:F6:CA:B5:1B:6A:72:4F:74:C8:C4:92:22:73:10:EA:30
X509v3 Authority Key Identifier:
keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:15:91:5b:1a:b0:da:73:2f:7d:71:8c:9d:91:a0:df:17:7e:
e0:2c:93:ac:22:cd:eb:b0:97:28:c1:86:52:e9:44:ad:97:2f:
fe:33:6a:1a:1e:8a:67:b8:b5:3c:77:c1:2b:2c:a9:00:75:35:
90:38:35:2e:f0:2a:8b:2e:4b:c3:41:d5:65:57:17:79:9d:f7:
15:bf:3c:e7:19:6a:0a:61:7c:9c:ec:de:30:89:11:fa:85:c4:
03:a6:d1:c5:86:02:42:78:d3:ec:34:f5:9b:b9:3b:3a:97:db:
7a:03:d9:b5:96:85:69:d6:5f:e5:7b:93:58:b2:9b:ea:3e:fb:
1d:5b:77:f7:17:58:f1:84:ae:6d:e3:15:5e:bc:e6:53:73:b9:
1b:3f:cb:37:b5:3a:15:5a:79:88:7b:26:d8:ca:3c:8f:25:a1:
05:c3:01:f1:ac:0d:42:eb:ac:46:5e:ec:02:4c:89:ba:0b:a9:
d6:d7:78:ec:ee:b2:ca:53:e7:93:b6:66:36:3c:8f:5c:36:05:
48:a6:72:71:d1:b7:13:08:c3:40:47:a8:ae:78:40:11:61:c1:
bf:2f:82:d9:35:e3:09:4a:8c:9e:51:17:41:8c:f0:2f:d1:b0:
7b:93:04:74:82:f6:cc:16:ca:a0:34:97:41:7f:ca:aa:ca:03:
23:91:f5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:19 2025 by rpki-client