Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: 3HBSPhGglNKcUHdIZzK9mv38rYxpDFoArs9bcHn38p0=
Subject key identifier: 86:BA:CA:4A:DA:BA:FF:01:9B:8D:84:CA:B8:1E:0D:3A:CB:31:24:C7
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 019A4EF5E1F2DD572AF0583EE10503F3B550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 0876
Signing time: Tue 04 Nov 2025 13:02:08 +0000
Manifest this update: Tue 04 Nov 2025 13:02:08 +0000
Manifest next update: Wed 05 Nov 2025 13:02:08 +0000
Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: dqDECS8p07m6oyghB2FFGFstpfxs6crjkVyQNdb3dWs=)
2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e1:f2:dd:57:2a:f0:58:3e:e1:05:03:f3:b5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Nov 4 13:02:08 2025 GMT
Not After : Nov 5 13:02:08 2025 GMT
Subject: CN=86baca4adabaff019b8d84cab81e0d3acb3124c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:4b:fb:7a:bf:fc:99:8c:91:55:29:87:99:
28:e5:b4:ee:50:5d:08:16:3f:15:aa:52:7a:8c:0b:
f8:da:eb:1c:33:53:d4:41:c0:72:25:80:e3:1e:bf:
18:c7:9a:3c:3d:cc:f0:23:49:fc:4a:39:58:87:fe:
47:01:f0:b5:fa:5a:87:1b:50:a2:df:fc:cb:1f:b6:
40:df:45:8e:3f:3e:3e:c9:17:cc:bd:b2:2f:19:ce:
be:06:58:a2:7a:c7:b8:e5:0a:9c:9e:da:ab:ab:31:
fc:46:2f:20:1c:df:c8:37:6f:86:3b:db:33:31:de:
91:22:d2:f5:02:e0:6a:f1:07:73:36:6f:d2:36:cf:
a4:9a:11:41:77:18:43:9f:dd:6d:29:54:f1:cc:00:
79:70:a5:f4:46:2c:de:da:b9:08:ef:df:e2:f2:d6:
cd:fa:a3:87:c7:07:73:76:ea:eb:fa:18:87:59:1c:
34:2e:de:94:5b:4b:5c:3b:53:0a:9f:e1:94:54:79:
d5:38:56:46:a4:07:5a:1f:69:a5:e0:57:6e:3c:ff:
12:08:96:6e:2a:94:ff:c9:a9:55:ad:5f:2c:00:45:
e8:57:c1:1c:ec:52:9c:5e:16:02:10:f8:b0:94:35:
42:b9:06:70:bf:6d:6d:a6:5e:c0:45:2b:0c:ce:62:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BA:CA:4A:DA:BA:FF:01:9B:8D:84:CA:B8:1E:0D:3A:CB:31:24:C7
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:49:30:43:a5:93:a5:46:80:0d:b9:14:b0:a9:7b:29:23:bd:
c9:6c:bb:5a:6e:fb:8e:d5:ae:e2:01:df:ed:4d:87:da:62:e7:
6f:23:f1:13:a3:fd:53:a4:97:a2:0a:9a:d6:35:b1:99:76:66:
fe:33:98:7f:63:65:b6:59:a4:e6:13:ed:8e:73:33:15:7e:92:
18:87:b7:c0:36:54:e7:88:c5:58:33:74:6e:1d:0e:89:ab:fb:
06:b8:5e:65:c6:44:7b:f4:d6:6b:c8:87:8f:4e:c7:3d:a9:8d:
dd:72:4b:9e:bb:1a:d9:66:e1:a7:22:de:72:0a:7f:05:ad:40:
b2:a7:27:72:41:36:8f:71:4a:17:8f:4e:d1:7d:79:60:37:3a:
be:56:32:23:a0:5e:81:38:d6:b8:0d:e8:5a:8a:58:a6:a7:60:
f9:66:cf:3e:59:99:25:b7:62:39:f4:02:fe:9f:fe:8c:ac:e5:
0a:0f:a6:d2:93:a8:64:7d:85:a3:cd:3b:8a:1b:a3:f3:8b:b0:
9f:9c:4e:ec:75:94:a4:05:c1:11:25:08:b4:7a:13:e5:5b:06:
97:60:5b:9c:cd:b7:24:02:ed:0c:69:39:66:40:66:4b:c5:21:
27:f1:e4:a4:a5:1f:d8:b5:f2:ad:69:5b:8c:b0:14:e7:bd:89:
4c:89:d7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:39 2025 by rpki-client