Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json)
Hash identifier: Y65RFmlRQDT1PnR/qPyVPjKpVeDUwCteb/bsSQ36q4I=
Subject key identifier: 13:8A:01:D9:85:F1:5C:97:C0:D2:84:59:63:CC:9F:A9:BD:C0:4B:B4
Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Certificate serial: 019A4EF4A71A7211302845C6B5FBFC4A557B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 13:00:47 +0000
Manifest this update: Tue 04 Nov 2025 13:00:47 +0000
Manifest next update: Wed 05 Nov 2025 13:00:47 +0000
Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: M6IVRDU+aUZOb+u8EWRJJDw8nK/Zi+xFbIAzhxOL4+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a7:1a:72:11:30:28:45:c6:b5:fb:fc:4a:55:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Validity
Not Before: Nov 4 13:00:47 2025 GMT
Not After : Nov 5 13:00:47 2025 GMT
Subject: CN=138a01d985f15c97c0d2845963cc9fa9bdc04bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:52:8d:81:4c:7a:de:57:bc:f4:fd:fe:a0:
a0:a7:61:e4:df:dc:e4:f7:23:95:34:7e:44:e1:21:
0f:e4:a5:6a:1e:53:4e:b4:9d:79:2e:bb:0a:ab:94:
b0:8e:79:78:33:9a:54:ec:1b:8a:f8:07:45:28:e0:
0d:50:3d:41:43:e9:be:4b:26:e6:f0:e0:55:76:b2:
2f:ac:60:b2:ff:72:06:ff:2f:7a:00:53:91:4e:9d:
5b:73:1b:00:ce:28:21:3c:0f:47:2b:34:d9:b9:7c:
ea:bf:4c:9f:d7:44:70:4a:8f:34:b4:0d:1c:63:e7:
70:e6:7c:5d:8d:14:cd:da:a8:80:83:5c:c3:85:63:
42:bb:ae:6a:1e:a4:87:da:8f:42:5e:97:17:24:fa:
f1:ee:74:f6:f2:3f:1a:0b:da:56:5f:b0:29:e8:f6:
ce:2d:9d:d6:54:a8:eb:aa:4b:a6:89:65:03:94:94:
ed:93:94:b7:1f:f4:f9:27:d3:b5:66:62:cf:96:f2:
00:d3:5d:b9:8d:3a:3c:eb:4c:5e:1e:e4:bb:fb:85:
c7:04:29:d9:7b:10:34:fa:d8:6f:a1:0a:d5:12:78:
57:a4:63:51:3c:23:76:a4:d1:21:4e:9b:5a:b9:6a:
64:b5:b2:32:72:95:b4:f3:de:c0:76:7c:04:5d:9b:
9f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8A:01:D9:85:F1:5C:97:C0:D2:84:59:63:CC:9F:A9:BD:C0:4B:B4
X509v3 Authority Key Identifier:
keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:65:b4:81:3b:07:b8:96:d0:41:c7:72:c9:ab:ee:00:24:cd:
fe:74:95:a9:11:26:58:3a:3f:c0:a2:c1:2a:5f:3f:24:44:84:
36:81:62:82:f0:bf:44:ac:48:6c:c4:75:25:e6:8b:ae:f7:4c:
ac:39:00:2c:1b:28:26:30:47:19:01:9a:b9:bf:f5:18:ca:b6:
e3:98:ef:9f:7c:4c:c9:54:fe:15:19:76:d4:ed:1a:41:02:49:
53:bf:81:da:6d:4b:d5:c1:05:9e:de:db:b6:54:24:72:3a:92:
d4:d4:56:e5:0f:1f:bb:8b:ca:88:60:78:f5:16:2e:7d:4b:84:
d0:ff:b2:12:76:91:fc:88:85:ca:11:96:65:6b:f8:ac:f1:24:
e8:e9:3d:3e:e9:c5:34:ee:ec:c5:7a:e2:c7:a8:ae:9d:2c:c6:
1f:7b:5c:93:6d:1a:04:16:e9:88:70:44:49:13:91:0e:aa:00:
f6:fd:87:40:84:a9:e3:30:42:29:60:9c:2d:66:89:c3:4d:e0:
d2:b7:b3:7d:6b:c9:6c:6e:f2:ea:94:d0:6f:5b:1e:69:c6:d0:
69:e4:2c:a8:7e:d7:2e:f0:85:66:01:01:1f:31:f0:b8:14:df:
1f:65:94:52:06:f2:69:52:24:a0:b0:0e:c6:d2:ba:23:e6:9f:
62:23:d6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:23 2025 by rpki-client