Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier: h3D/BoSnm7fpOUJ2ZOluApO+H3LvaNsXTK3oqezAQ/g=
Subject key identifier: CA:0D:A9:D1:E8:B1:8A:42:EC:46:5C:2A:AD:6C:A9:EA:6B:64:7F:30
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial: 0199FCC6B66A097DB4DAEB145E939229C7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number: 033E
Signing time: Sun 19 Oct 2025 14:01:45 +0000
Manifest this update: Sun 19 Oct 2025 14:01:45 +0000
Manifest next update: Mon 20 Oct 2025 14:01:45 +0000
Files and hashes: 1: NJyfKGT7eHHPjQOAXKwVNKCjCYs.roa (hash: XDn/F11FiIWe6mjWs24N5BRlzAoQS5rK8vutFukkZcU=)
2: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: DqrO0PgBEMDQzU4D5XiQdyXmnCgSPpS2mNhpkkdZGic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b6:6a:09:7d:b4:da:eb:14:5e:93:92:29:c7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Validity
Not Before: Oct 19 14:01:45 2025 GMT
Not After : Oct 20 14:01:45 2025 GMT
Subject: CN=ca0da9d1e8b18a42ec465c2aad6ca9ea6b647f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:1b:f7:79:d7:2b:51:4e:4b:b0:58:03:1c:
11:98:4b:9f:2a:fb:5b:51:c6:4c:64:e6:4a:af:af:
0c:95:d2:cc:7d:bf:aa:7e:2d:d2:e5:36:7b:ff:07:
c9:f6:90:0f:22:0f:a7:1e:8c:35:3f:e1:81:df:6d:
85:04:ee:27:ae:ba:52:ab:27:db:63:65:9c:a1:df:
64:99:4d:29:ec:91:aa:f6:0a:87:e6:8b:55:a9:9d:
16:8d:59:15:cf:e5:d5:89:31:e8:0d:89:d2:3e:14:
73:34:b6:44:46:f7:b8:0d:37:a5:f4:00:7c:be:6d:
29:2c:0f:7a:d4:21:51:e4:ad:0f:e0:70:bf:6f:54:
ca:4c:5e:2f:4f:24:ad:e3:b0:f4:b2:74:e8:11:f9:
e3:7e:5b:25:cf:37:36:a7:4f:7f:84:ac:d4:b0:6a:
fe:8a:3f:79:c3:21:2c:a5:76:c2:b5:03:89:2a:b2:
0d:43:64:64:64:f6:28:19:d2:31:dd:5a:eb:3b:06:
9a:d9:5a:e1:0c:d4:9d:a5:1c:c0:54:fc:c6:27:23:
89:a7:af:1c:d7:21:64:59:16:e6:f7:15:01:76:25:
7e:e7:a4:e7:86:95:18:93:27:a9:07:b9:30:e1:c0:
50:f8:b7:b4:27:52:61:e9:45:2c:09:06:22:54:3f:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0D:A9:D1:E8:B1:8A:42:EC:46:5C:2A:AD:6C:A9:EA:6B:64:7F:30
X509v3 Authority Key Identifier:
keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f4:c3:3b:19:f6:c6:bb:ab:f9:33:cf:06:ae:42:ae:30:26:
83:a4:a3:88:20:1b:63:21:cd:19:13:2a:fa:bb:fe:71:3d:7a:
55:8a:84:94:99:88:60:a4:b7:8a:1c:01:39:1b:4b:c0:a3:c6:
df:1e:6e:60:94:0c:7c:61:30:23:7e:45:4d:78:ee:5c:65:9b:
09:2b:32:38:5d:2f:61:a5:9c:3f:8f:ad:23:c5:77:2d:78:e0:
33:28:f8:81:b3:18:c6:b5:e6:97:b6:f9:d1:d6:de:fa:87:0c:
c6:3d:0d:03:46:7d:bd:d7:2f:80:d6:33:43:2b:d7:38:41:b8:
48:28:77:c0:f5:8d:c1:c3:b9:36:f5:2b:6e:14:b4:30:64:45:
c9:31:11:27:b8:7f:35:29:95:02:ce:37:06:ad:e1:5f:8d:35:
4f:40:0f:82:65:70:32:b5:ed:f0:ef:d7:c6:a6:ff:b8:2a:a5:
4c:2e:7d:47:23:e3:25:f6:58:2f:e0:ee:c8:19:73:ab:c7:40:
2f:fc:4e:31:ce:88:07:2c:65:8b:c4:c8:62:18:b0:eb:50:54:
41:e7:78:ec:93:e8:43:32:50:db:8e:42:04:ea:ff:80:df:c6:
be:e8:6e:79:fd:2c:90:05:da:91:3f:7c:84:a1:ad:05:b9:fa:
b5:60:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:22 2025 by rpki-client