Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: hz5QvcDP3GG4Ts7obHwmYZxehNakZ4btcid3KEksFxY=
Subject key identifier: CE:06:19:F3:A2:B0:0D:A4:DC:D5:CE:13:89:04:40:72:C4:62:E0:3C
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 0198D4E0310E6C4CF64C1F963666472335EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 11F6
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: 7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa (hash: sSokJSwDE7TenrNiAqYNMhbgz0iCXtyPGRTOZYronAY=)
2: YVWuJ6FTMU1uU3iR7ed746pUzUU.roa (hash: oVu2kWcJUFQzXCLu/Vci/BnnMXJVo57f7gbHz7uSAXM=)
3: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: MZKO1UI0GJfCMBVhdKdtnmxLIJ2hUGQS394FgS7KMBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:31:0e:6c:4c:f6:4c:1f:96:36:66:47:23:35:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=ce0619f3a2b00da4dcd5ce1389044072c462e03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:86:c6:b3:6a:ff:8f:7c:08:8d:e6:47:ef:5a:
ab:12:85:52:43:32:84:36:23:9a:4f:b4:af:9b:f5:
8a:43:39:3c:18:46:7d:50:e7:01:46:24:75:3f:be:
78:8f:72:3d:7b:f0:93:6a:84:f3:64:9d:b4:eb:97:
5c:a4:4f:c2:bd:11:61:48:8f:96:32:90:8c:8b:2e:
1a:e4:09:fc:f3:4c:2d:4a:22:e0:29:73:63:a2:a1:
da:5c:58:36:af:73:d3:e8:2c:bb:cf:27:4b:14:fd:
42:cf:72:42:6a:c7:e6:9c:4d:7d:87:9b:95:45:44:
3e:19:d5:0d:af:85:e4:0f:ab:13:9c:9c:1f:49:67:
e7:bf:3b:7e:08:f7:5e:22:4a:94:c5:24:77:54:57:
f0:a6:d4:d8:d3:ca:06:87:9b:d7:4b:7f:a9:87:b7:
4e:da:4a:62:70:54:6e:9c:c2:ce:9c:93:90:cd:fa:
55:ba:79:7f:aa:18:9d:f1:86:df:d4:eb:24:46:73:
58:c7:08:39:d1:29:d3:c8:7d:ec:7d:47:36:a6:f2:
0f:1c:08:05:a3:b6:1c:7d:b5:57:1f:b0:2c:dd:65:
3f:d3:63:36:21:89:81:6f:78:a6:0b:1e:fd:57:bd:
5e:9a:05:b1:b2:b9:f0:e2:af:76:17:d0:79:db:8b:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:06:19:F3:A2:B0:0D:A4:DC:D5:CE:13:89:04:40:72:C4:62:E0:3C
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a0:c9:58:d0:7c:9f:69:36:47:04:72:b3:36:52:7a:83:1d:
5d:d7:5b:af:bb:51:58:ce:3e:63:9c:aa:8e:18:b8:b6:2b:3c:
e5:b6:23:f3:b5:8e:a9:cc:fd:95:fc:33:2f:1e:34:5c:e5:7d:
5c:97:4b:25:e7:ff:39:45:09:76:57:30:3a:f0:13:6d:9b:2e:
66:8b:81:ff:8c:e9:ab:30:9a:d1:51:2f:3a:73:29:ce:de:35:
82:4d:0a:c4:f4:42:05:51:e7:20:4c:04:bd:84:04:af:06:57:
34:3e:35:15:e7:4d:6b:2d:94:c6:75:af:f1:7f:eb:da:81:4a:
7c:f2:d9:92:04:66:42:2d:92:49:4b:f3:31:14:88:65:7c:c5:
dd:c1:ad:17:43:93:4e:8c:f2:f2:18:60:a2:37:47:f0:16:e7:
38:5c:96:6b:5a:71:39:af:dd:4c:82:91:66:a9:d5:ad:f1:60:
47:89:b6:73:ab:b3:94:0d:8a:0b:97:76:71:a5:0e:7e:a6:0e:
86:03:e8:82:94:a4:35:4c:35:78:02:86:f7:6d:69:c6:0d:c3:
9d:e2:15:3a:0c:32:72:80:fc:b7:dd:81:68:1a:28:da:5f:4a:
20:28:03:68:03:f3:89:88:c8:1e:6e:e5:2e:4d:36:21:4d:19:
3b:61:29:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:01 2025 by rpki-client