Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: gt7WWuRQG8rW0ERdiDhaxpGuDIaBfG01aNnQT+NSRf4=
Subject key identifier: 76:C7:2C:D2:2D:8C:E2:F7:D0:83:D3:A8:9C:9E:0E:24:A8:48:0E:A6
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 0199FCC62E20CC3044FADA732019A7149853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 1291
Signing time: Sun 19 Oct 2025 14:01:10 +0000
Manifest this update: Sun 19 Oct 2025 14:01:10 +0000
Manifest next update: Mon 20 Oct 2025 14:01:10 +0000
Files and hashes: 1: 7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa (hash: sSokJSwDE7TenrNiAqYNMhbgz0iCXtyPGRTOZYronAY=)
2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: LzuTcP5+3uX7F39H2mI/U3fxudzHgqZ9ES5wvRR4p98=)
3: trffbMiTH6DrGuiy0X3enBvY_Oo.roa (hash: o0rF0YmxKHHBrS/g1LKn0ZhHqi9U3j4NE3U+lGfKC3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2e:20:cc:30:44:fa:da:73:20:19:a7:14:98:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Oct 19 14:01:10 2025 GMT
Not After : Oct 20 14:01:10 2025 GMT
Subject: CN=76c72cd22d8ce2f7d083d3a89c9e0e24a8480ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:39:09:eb:df:9d:50:a3:89:f6:57:f6:22:
ca:26:5a:06:b5:66:51:35:8d:91:dc:a9:1f:36:9d:
ac:b4:8e:62:af:66:f7:73:25:7b:d7:2e:b2:da:a2:
da:cf:42:ca:ed:4e:46:94:6b:f5:8c:a8:35:09:25:
30:07:3c:fc:91:37:aa:7c:b3:ad:e9:fd:f4:9b:9d:
1f:a1:e9:b8:4b:36:1c:9a:7a:5e:55:12:2d:cf:66:
d4:ff:38:27:be:f2:89:eb:14:59:3b:c8:be:6d:91:
57:2c:68:a9:f8:3a:f0:bc:03:d5:63:f0:4d:cd:1e:
58:8e:d2:a9:84:01:84:3d:ae:55:dc:e5:cd:55:9a:
78:fd:a0:48:36:94:aa:ff:bc:f0:f2:9e:1a:75:24:
c7:e5:5b:d9:4a:43:35:4e:46:bc:6e:7b:e1:7b:c9:
f8:83:bd:01:18:f2:d3:ab:1e:fb:a1:b0:47:65:64:
97:1a:be:2c:b3:1a:a8:03:1b:a4:93:08:ea:d3:71:
8e:57:2c:4b:9b:81:db:6c:3a:35:7f:d2:cc:f0:74:
93:03:6a:61:5f:6a:89:81:d5:98:e2:0a:04:02:06:
fe:48:c4:6e:00:3a:45:8b:68:ba:e7:a4:84:e1:38:
8c:3b:f5:b6:34:25:24:be:bf:c3:ba:f7:5f:dc:fb:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C7:2C:D2:2D:8C:E2:F7:D0:83:D3:A8:9C:9E:0E:24:A8:48:0E:A6
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:49:d6:d9:9d:d9:52:cc:a7:a6:61:17:fb:1e:54:95:77:8d:
e6:90:62:20:60:a3:0b:14:27:66:58:5c:ad:9c:c1:3d:ac:06:
f9:1e:80:e9:6a:97:76:6f:55:32:1e:f8:c3:0e:1b:d9:98:71:
e7:53:db:67:c2:fe:40:ea:d5:36:eb:02:45:35:c4:70:57:5d:
9c:8c:bd:ec:6c:0c:3a:ef:da:8d:07:ed:b5:d4:e4:43:66:8d:
e6:59:72:8d:cc:67:b9:b7:18:f2:59:d1:30:1a:57:fc:62:1d:
e1:47:f0:f5:49:34:b1:ef:10:a6:6f:97:97:f6:70:32:06:47:
b6:e1:b9:29:82:81:ec:d9:87:f7:04:a9:08:0d:0e:69:e9:c4:
68:ae:57:15:e1:c7:70:cf:d3:1d:61:12:c0:c2:5b:bd:1a:94:
07:ec:b8:38:dd:c1:1a:81:55:e4:40:a7:3f:43:cd:f3:88:cf:
b1:a2:ed:ed:f2:26:4d:2b:89:0a:4d:f4:72:9e:1c:9f:f8:df:
eb:35:ac:ef:32:35:8f:5c:00:1c:b4:63:c3:17:16:9d:8a:31:
b4:f4:0a:7b:8c:97:41:bd:df:5a:65:11:52:60:e0:bf:5b:64:
6b:b7:9a:cf:0d:1e:91:4f:99:20:4f:8c:27:1e:49:df:a2:c8:
17:9b:2c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:08 2025 by rpki-client