Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
File: _PLPcoTXoDRugvN4rYMPV8OWG20.mft (raw, json)
Hash identifier: 2WKdf7SFKGfi0NtHq5gyzVFxNWWHulQQpWJvXaU+0Dc=
Subject key identifier: 29:5C:96:90:24:D7:83:E7:F8:0E:5F:BE:17:E4:2D:C2:5B:29:F1:4F
Authority key identifier: FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
Certificate issuer: /CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Certificate serial: 0197B6A070C74BE70F053F2FC1FC96020DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
Manifest number: 08C1
Signing time: Sat 28 Jun 2025 13:00:57 +0000
Manifest this update: Sat 28 Jun 2025 13:00:57 +0000
Manifest next update: Sun 29 Jun 2025 13:00:57 +0000
Files and hashes: 1: _PLPcoTXoDRugvN4rYMPV8OWG20.crl (hash: knR+MeuBQPQvUkE6oLNIbmFY3sy4jpWPuPJWVphIG0I=)
2: c1o3ffEqrdrU8ebbTBwhLFlhPXg.roa (hash: fm+w7SzhvawtVdf496aqLGV6dF6J/LTyEnyM1VppA6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:70:c7:4b:e7:0f:05:3f:2f:c1:fc:96:02:0d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Validity
Not Before: Jun 28 13:00:57 2025 GMT
Not After : Jun 29 13:00:57 2025 GMT
Subject: CN=295c969024d783e7f80e5fbe17e42dc25b29f14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:21:e4:70:8e:57:4a:f1:c9:94:d1:b4:5a:
da:fb:8b:44:bc:09:ad:3f:69:f9:b8:0c:6a:83:a1:
bb:00:17:e4:24:a1:5e:f7:c9:94:79:cf:96:f6:0a:
c2:2a:d1:f7:b1:b5:ed:ca:64:95:a8:7e:db:25:d7:
3b:8e:ed:81:50:b2:ab:72:02:73:7a:ce:d8:c1:1b:
e1:bf:91:02:21:06:00:16:6b:e3:ba:82:36:1d:e7:
4e:83:23:67:27:26:c4:ad:d1:fd:a1:15:de:03:b5:
d0:9b:71:06:b6:b8:cf:f3:f7:00:09:45:3d:23:fe:
6d:63:dd:1c:01:96:2b:71:d1:c1:ea:55:3b:58:26:
0c:58:b9:25:77:47:3b:cc:e0:3c:95:16:17:29:b9:
4b:60:9b:44:5c:22:85:f4:3a:3e:24:a4:b6:ac:0f:
c1:f0:3b:f2:01:0e:f7:6a:15:de:23:97:47:cd:4a:
21:e0:c2:4d:6f:5d:24:66:72:67:2e:4e:c2:fb:88:
8a:02:29:42:f5:64:8e:5e:08:37:01:99:fa:de:35:
ff:9f:b3:17:b7:b0:99:c5:6e:41:34:88:d7:86:85:
d1:75:e1:2c:9b:56:f0:40:a0:d9:ee:82:13:da:93:
ef:81:c8:82:f4:65:70:eb:fb:19:8f:dd:ba:18:68:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5C:96:90:24:D7:83:E7:F8:0E:5F:BE:17:E4:2D:C2:5B:29:F1:4F
X509v3 Authority Key Identifier:
keyid:FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:50:87:25:26:61:40:1a:7e:1e:f2:83:30:b7:50:cb:3b:a6:
59:72:3f:cd:a6:21:9c:73:ca:4e:41:c5:77:70:c7:4e:0f:eb:
5f:74:d0:bf:84:e5:f5:88:8d:f6:a3:be:1b:b6:77:0c:ac:10:
55:01:e7:6b:c8:a7:df:fc:93:e4:e9:55:65:30:e8:21:e8:1c:
87:02:ac:5b:a2:15:42:75:ef:bf:80:fa:85:6e:7d:af:bd:2a:
40:63:d9:72:a4:ce:33:9b:c5:3f:15:0e:88:20:71:e7:72:dd:
33:57:82:ee:b5:d3:2f:d3:23:6f:fa:3d:fd:86:92:25:6f:79:
e7:b0:96:69:f7:2e:d9:97:0d:7e:38:8b:0c:6c:ed:68:31:cc:
ea:db:02:12:75:88:4d:6e:5a:d3:af:cf:ae:20:bd:2f:ec:76:
e6:12:09:4b:57:21:57:3c:82:e9:95:fd:3c:57:6d:7d:51:ec:
2f:0f:e8:f6:25:bc:45:fa:58:08:58:c7:ba:bc:de:c6:fc:7d:
ac:e5:23:b3:71:69:0e:21:18:ed:61:0d:00:1b:27:92:d2:35:
86:6c:c1:91:fd:55:92:1e:ea:e6:c6:95:f4:4a:b9:18:5d:b3:
f2:1f:6a:2d:88:9d:9a:db:92:74:b2:bf:8c:85:30:1d:b8:62:
9e:36:8d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:17 2025 by rpki-client