Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
File: pPLix3U2Usd9u3nL4GmyurA_YN0.mft (raw, json)
Hash identifier: Ku8PtIe21S4Pef1ygp5ffhMb6jag8/8x74So/AjP/2I=
Subject key identifier: 17:B1:0E:F8:EB:6B:02:C6:7B:95:32:AB:C8:75:13:78:FF:C5:9F:21
Authority key identifier: A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
Certificate issuer: /CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Certificate serial: 0198D5F1AF5D94C1C58D93DC665B7866A031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: GDxm2zcd8Lnhjk0mCi0fCSfcw18.roa (hash: 2s+mStFbGwTH5aRw2Ej0hEDuLtxVhcXn931+yvpJuwg=)
2: pPLix3U2Usd9u3nL4GmyurA_YN0.crl (hash: XSWDKb2ACLr09dKB+vTKcolMdyeevBzazaH38TBHJXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:af:5d:94:c1:c5:8d:93:dc:66:5b:78:66:a0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=17b10ef8eb6b02c67b9532abc8751378ffc59f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:14:2f:8f:10:60:1c:ea:32:57:02:b7:00:9f:
f9:03:82:9a:82:9b:8b:fe:e6:38:d7:14:44:78:ba:
9e:67:a4:37:8d:58:38:11:9c:da:ac:2a:03:ac:a0:
8d:d3:06:6e:e5:03:66:e5:72:ab:fd:24:80:76:ea:
15:82:75:df:e4:25:22:31:4a:62:03:07:1c:48:97:
f8:d9:1f:3a:f3:b5:22:b2:75:74:8f:d9:fc:4c:74:
65:8a:64:9a:31:27:74:a4:0f:01:fe:a9:8c:07:f1:
d2:b0:76:61:dc:ac:42:e4:ad:14:1d:53:9e:cb:79:
6b:6b:f3:95:35:56:1d:16:ac:5f:72:0f:c2:42:01:
f2:75:82:53:64:dd:f4:a4:7f:4b:54:13:a4:85:60:
e8:61:a0:a6:35:d0:16:1d:c0:a5:94:67:c3:da:a7:
23:30:8d:67:11:0f:0b:1e:12:ee:ba:b1:da:38:1c:
7e:29:e8:06:e3:a8:95:43:63:59:b1:3b:ba:8d:44:
f7:f6:45:44:bf:56:7a:7e:68:6b:c0:cf:db:30:d8:
bf:0f:15:3c:0f:c0:55:26:29:24:ab:0a:e2:44:77:
03:91:e0:2d:3c:2b:a3:0d:bf:77:1b:82:0e:3f:1a:
25:1a:70:2b:bb:f5:36:55:bb:f9:a8:d7:aa:14:66:
51:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B1:0E:F8:EB:6B:02:C6:7B:95:32:AB:C8:75:13:78:FF:C5:9F:21
X509v3 Authority Key Identifier:
keyid:A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d7:65:e4:95:47:64:f0:04:74:87:fe:29:e4:9a:d6:32:01:
ee:af:ff:60:26:28:a4:bd:fb:80:58:67:2f:cf:54:7c:36:1c:
9c:84:bc:8e:9a:3c:5d:a6:91:3c:a2:2c:16:be:c9:56:1e:2e:
72:f6:a5:b4:ad:fa:7b:a5:5b:1a:a0:cb:14:93:f2:8e:d4:e7:
8b:c6:5f:ea:98:6e:84:66:db:20:69:f5:d5:9e:02:ff:0f:72:
4c:a5:1e:dc:65:db:56:b9:07:eb:d5:57:62:9b:65:55:8c:80:
31:0c:69:47:dc:7e:dc:06:35:a2:3f:7b:aa:c1:6d:b8:0c:44:
18:9e:b3:a0:b7:59:f2:6d:d4:ba:98:bb:34:6d:07:d2:10:9f:
31:70:1a:2c:f0:1d:7a:04:da:b2:16:c0:9b:d0:9e:69:a6:c4:
31:66:98:25:dd:a3:92:3f:15:69:be:24:47:0f:08:33:c7:fb:
c1:d4:1b:97:b3:e9:0e:91:fb:32:1d:0e:60:6c:7a:5a:98:9d:
5b:0c:de:73:9f:6e:f0:24:eb:57:c9:25:0d:ff:58:55:a3:b9:
56:c8:d4:49:e4:ae:bd:87:f8:31:90:6e:1f:7d:ce:f1:db:f8:
fc:e6:f2:30:54:c2:27:e6:c1:fc:5f:d3:7d:ad:fe:9f:45:ee:
4f:76:fd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:36:49 2025 by rpki-client