Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File: PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier: AqjDigbnqITRfCdudEWZ2wp7HeE40ZT5oAR7ZWsMASM=
Subject key identifier: 9E:C7:DD:86:75:A3:D8:9B:5E:F7:DC:66:AF:6E:47:95:10:AA:E9:BD
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer: /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial: 019A4E4F68F2D76E2BA9489970222D8DD5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 10:00:18 +0000
Manifest this update: Tue 04 Nov 2025 10:00:18 +0000
Manifest next update: Wed 05 Nov 2025 10:00:18 +0000
Files and hashes: 1: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: TQwQmy4ytT7r6HZabcDlN3PxJD/dDgMHfPCbwwlkuxM=)
2: _Y1GXKJ5A67loqKl1i2V9S3MWKg.roa (hash: V3o7sWDlYKkS4Nqv4VMpbKGi6d6rMWmkClDxQRZCgxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:68:f2:d7:6e:2b:a9:48:99:70:22:2d:8d:d5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Validity
Not Before: Nov 4 10:00:18 2025 GMT
Not After : Nov 5 10:00:18 2025 GMT
Subject: CN=9ec7dd8675a3d89b5ef7dc66af6e479510aae9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:09:5f:83:0d:1e:1f:da:93:5a:86:a2:33:2c:
61:ab:c9:d8:36:13:b4:e2:3a:da:0a:2c:1a:a9:51:
00:d4:42:06:f4:d0:1e:a2:51:ec:71:6c:23:d0:bf:
4e:ac:15:59:5e:09:5c:b3:f6:1f:d4:ab:60:3b:36:
4b:8b:52:a8:7f:c0:52:2d:fb:77:91:d1:bf:87:a8:
33:1c:85:e1:e9:3f:4a:d2:a4:06:a0:b8:b2:a7:84:
53:22:99:fa:8d:a3:bf:fc:2b:0a:3a:90:36:51:b0:
97:00:ab:c4:a0:89:0f:93:d2:1b:06:ed:62:67:00:
2a:ff:97:28:f4:8a:07:fe:fe:37:94:92:55:98:b5:
3c:df:b8:49:c6:f6:df:a3:70:ed:a8:8c:e7:f6:07:
46:7f:f4:ce:e4:24:08:5a:c1:28:70:c8:f6:1a:1b:
ce:1c:90:70:51:2a:84:3e:cc:39:97:35:ea:f7:15:
2a:5d:eb:c7:11:f9:f3:6b:21:e2:46:ed:ee:9d:b6:
25:f9:d7:84:6c:51:cb:6a:20:16:b2:e9:39:46:6b:
64:d5:21:b4:b1:03:8e:c3:cb:26:4a:ce:7d:b7:49:
01:96:37:78:8c:da:4a:1a:04:b8:62:9d:33:b2:4e:
d4:87:85:5c:6e:3f:8a:31:e9:53:c4:9d:37:89:8b:
d3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C7:DD:86:75:A3:D8:9B:5E:F7:DC:66:AF:6E:47:95:10:AA:E9:BD
X509v3 Authority Key Identifier:
keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f9:c9:15:7c:27:c2:97:ad:cd:c6:59:08:e2:6a:89:b6:38:
6c:73:60:b5:4a:32:79:ea:1d:e0:43:b2:1c:b7:7f:9b:f3:e3:
bc:63:91:f9:21:af:cb:d5:4c:2d:67:bd:6e:54:78:5d:b6:b9:
5b:7e:23:47:ad:6a:b1:c9:35:71:5a:41:fd:b7:98:12:ee:51:
88:d7:48:0c:e2:27:7e:ff:3d:66:58:50:c9:ff:b0:bb:52:2e:
42:cf:67:96:79:ce:99:ab:73:66:8e:a0:38:22:f6:58:d5:9c:
0b:41:1c:b9:a6:cb:d8:c2:1a:57:f7:75:5f:81:76:bb:97:28:
70:c9:9a:a1:5b:1c:29:c2:6c:53:77:29:75:ce:f4:04:a0:7f:
03:19:e6:64:3f:f7:3b:06:b5:6e:9a:f9:05:7d:f9:dd:81:14:
1a:4a:7e:ef:a1:9a:90:25:02:e3:61:c9:97:b7:21:82:27:08:
6b:72:6f:7f:06:af:9f:32:f1:58:7e:fa:af:28:6d:82:06:8b:
84:ae:cf:b8:05:1e:1e:45:bf:9e:3a:df:18:64:46:a3:db:75:
62:25:8e:42:c9:00:54:54:14:2a:92:3b:a7:49:4a:00:f8:df:
fc:a9:7f:db:59:46:03:fd:0f:50:b5:39:88:5f:71:96:98:8f:
65:12:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:44 2025 by rpki-client