Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
File: pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json)
Hash identifier: s2iMfiOYkPkO6Y8qMwEEHWHjutsemdb/QRdA3GGtXc0=
Subject key identifier: A8:F5:B3:71:1B:B9:B9:14:07:D1:63:DE:ED:00:DB:56:61:F8:89:2A
Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
Certificate issuer: /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Certificate serial: 0199FFC82DB846280F9D03356CC3A690D429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
Manifest number: 044D
Signing time: Mon 20 Oct 2025 04:02:12 +0000
Manifest this update: Mon 20 Oct 2025 04:02:12 +0000
Manifest next update: Tue 21 Oct 2025 04:02:12 +0000
Files and hashes: 1: dz9PyU4ctyXKZ49cHOyHFCLYwcU.roa (hash: 3Y8oozkK4fYw8w+acos4s7WtEJkSyImOIymISL/lshA=)
2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: 879hIJJ/6XxrmN25Vv9oHxzYf9O5Av0I1Ho1uXtCMaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:2d:b8:46:28:0f:9d:03:35:6c:c3:a6:90:d4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Validity
Not Before: Oct 20 04:02:12 2025 GMT
Not After : Oct 21 04:02:12 2025 GMT
Subject: CN=a8f5b3711bb9b91407d163deed00db5661f8892a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9b:ec:c8:35:e3:86:de:52:02:4b:cf:56:71:
2b:95:3c:c8:ac:84:6c:0b:28:e5:eb:6b:bf:6e:51:
15:2c:04:ec:d4:d7:8e:e5:61:8c:71:96:7f:20:af:
c7:1b:49:9d:ee:f2:08:8e:a2:39:c0:aa:1a:16:35:
1f:79:ca:05:2c:83:fb:7f:d3:f4:91:b5:b9:b0:e3:
5b:64:93:a3:30:50:7e:32:62:da:86:b4:51:d9:11:
0f:9c:4c:9d:f8:02:73:82:89:3e:a1:d2:b6:10:db:
6d:22:22:54:74:30:06:1d:2e:7b:a0:66:6b:5f:e9:
57:db:dc:3c:93:44:75:f4:e9:dc:81:0a:a5:dd:45:
ce:a6:0a:ce:4a:18:7d:31:23:ed:0a:fd:19:2f:b4:
aa:e5:35:0e:9f:94:b9:33:17:65:32:99:ba:33:4c:
21:2e:d6:2c:84:8b:6a:c2:40:ae:29:ae:a3:cb:a7:
eb:f3:17:3f:aa:2d:3f:fa:3b:68:cf:c1:9f:ee:f3:
ad:2d:61:0e:1b:44:25:60:3f:b9:e2:4f:80:0a:c9:
aa:fe:a6:b9:ce:b1:61:e3:62:2d:72:45:c0:d0:a0:
4f:ee:f7:a5:61:c7:f2:21:a6:5c:90:f0:04:96:31:
4e:d4:e1:70:db:ef:1b:bc:d0:50:e8:8b:f1:7a:6d:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F5:B3:71:1B:B9:B9:14:07:D1:63:DE:ED:00:DB:56:61:F8:89:2A
X509v3 Authority Key Identifier:
keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b5:e1:d0:c9:81:7d:b8:f8:33:0e:1f:4b:a9:20:31:dc:77:
a1:a9:34:d9:da:22:be:b6:c8:51:f8:d6:64:cb:bb:40:a2:7a:
1e:c8:35:72:21:ff:c1:4c:06:47:2d:7b:68:ac:e2:ba:33:f3:
bf:9a:f8:c1:5d:8b:0b:1f:75:62:59:df:b2:57:c3:f3:0f:a1:
48:ee:b8:36:3e:15:ca:44:cf:76:d3:ba:0f:ae:bd:5c:8d:a1:
ee:2a:85:3f:48:67:5f:1c:d9:ce:0b:5f:6d:b8:8c:b9:fb:5c:
b4:30:98:14:c1:13:81:bf:52:b9:08:34:aa:70:fe:fc:30:8c:
82:9a:2e:0e:6c:a2:59:4d:62:ce:b9:c8:3e:31:f9:c0:71:22:
8f:58:48:16:63:c5:2c:a4:c9:41:a8:f6:db:34:f5:00:e7:2c:
76:ec:88:77:50:61:3f:8d:d0:5a:57:da:a4:1e:79:9a:ba:4c:
13:d0:ce:69:ee:3d:4a:6b:18:bf:ae:70:12:f0:45:72:ff:12:
ca:53:d9:28:3a:13:83:e0:d1:ab:e3:54:1b:c5:b9:27:31:e1:
a5:a6:c7:04:3b:df:bf:18:cf:57:51:28:30:f7:55:ee:d3:1d:
ca:1b:a4:ca:28:4d:d2:33:a4:89:70:23:21:ef:c8:12:e2:17:
07:9b:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:37:31 2025 by rpki-client