
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File: plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier: Yl6HWXoxOHl/a27uecR/Ej+y8/cbhKzwvEM/VaS2cOk=
Subject key identifier: BA:43:97:3D:55:4F:E2:79:05:81:2B:03:F2:CE:40:7A:F9:71:B3:8C
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial: 019A500743DF8D3F536C38ADCEE592623142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number: 1719
Signing time: Tue 04 Nov 2025 18:00:44 +0000
Manifest this update: Tue 04 Nov 2025 18:00:44 +0000
Manifest next update: Wed 05 Nov 2025 18:00:44 +0000
Files and hashes: 1: 2kqVVML4J6p32S1IZ9ese8rrNA8.roa (hash: Z5t0NXFzD5/SVB5g4VKI0FOYHuxiI1pejsxk/eO8RUY=)
2: 7ICukJCno7wPTI4Opav3OulQGYc.roa (hash: PA3kdCy1zhkZxeXYzpSwNS8Lc6gO1aAMaHcDwAB/zlk=)
3: FxcmiLw90HwD6v-zIS8fyho2YJk.roa (hash: dVrudewN+D6RoriyTNX+xlGTNvGmJTbMWvHDD/OWxyw=)
4: OEu5ipvpOLx1mjS_wILLKGz31L8.roa (hash: Q2sxz01wDrr3ZAHG0Y04l4+NHZqPRdGf0GS6aM12Hm0=)
5: SEB5OEPvww_MDPNqy0IOytIoU5Y.roa (hash: Hk1UHlI4MNvzvFdVBIIEujtjKPWtAbdmnPIpzDItuaM=)
6: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: erSPUANyODbtJDit7Mvp7w3egDfMTqrjMc+rmCg93t0=)
7: tRPDFQwkqeY70X00aJumJ-RrQBw.roa (hash: xE1IIp9t6Le0FK50+hsN7HGx6bGGBI6DRxHK2qYkXVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:43:df:8d:3f:53:6c:38:ad:ce:e5:92:62:31:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Validity
Not Before: Nov 4 18:00:44 2025 GMT
Not After : Nov 5 18:00:44 2025 GMT
Subject: CN=ba43973d554fe27905812b03f2ce407af971b38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:07:0d:cc:94:8b:27:84:aa:a1:4e:6e:82:
6a:0a:6b:35:b9:04:d0:4f:c8:7d:45:1f:aa:a5:cb:
9f:02:09:9c:64:09:b4:a3:2a:8d:88:a7:0a:c4:1e:
81:b9:be:8b:a3:09:c1:3d:48:5f:14:e3:a9:33:63:
ac:05:ef:d7:04:08:3d:c1:33:bf:da:cf:1e:0b:f4:
69:c7:f2:fc:f4:d0:20:6e:cb:11:fd:fd:cd:ab:d5:
1c:72:22:b8:5d:0d:f3:fe:8b:a4:b8:c9:e2:74:8d:
f3:b1:ac:c5:b5:fa:86:8a:52:d7:b6:3d:c7:85:be:
7e:3c:90:1f:da:fb:54:87:78:42:e2:b6:51:1a:84:
a4:6e:56:b8:02:cf:e9:48:70:91:e8:77:6c:17:19:
49:de:3e:7a:d3:94:93:a5:30:ba:05:8f:c3:6b:f9:
1c:0e:0b:ab:84:af:f2:0a:6f:8e:66:54:f9:c1:ae:
de:2c:85:a0:65:37:15:54:2a:40:2b:78:96:ec:17:
00:b7:b7:34:5b:ed:ac:c7:ce:1b:f9:51:f0:e4:68:
f9:79:ec:0f:7c:47:5f:58:0f:1f:12:67:85:df:10:
a8:25:70:33:60:9b:ea:95:f7:81:3e:3c:12:f1:71:
f7:9e:31:d0:79:56:0c:6c:85:e4:8e:af:37:0e:0a:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:43:97:3D:55:4F:E2:79:05:81:2B:03:F2:CE:40:7A:F9:71:B3:8C
X509v3 Authority Key Identifier:
keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bb:6c:04:9d:52:e7:53:a7:32:fd:32:f6:da:ee:b6:e8:2b:
bd:ed:ec:cd:aa:5d:e5:53:ad:50:29:97:33:3d:bb:41:5d:15:
ae:f4:1d:c9:15:65:5f:c9:b2:e3:10:06:81:ba:ab:6d:ec:cc:
75:9e:b3:67:ac:7d:17:9b:10:04:43:0b:42:e8:25:a0:d1:74:
4e:6d:b0:bf:a5:6c:48:71:ae:95:3a:46:a3:3f:f8:45:f3:d8:
21:0e:bb:7b:0a:1e:96:f1:64:56:c2:23:64:20:38:a6:bd:9c:
bd:bb:33:c2:ca:ef:86:74:fd:ac:ec:44:ba:69:e2:0a:23:0c:
c3:96:69:82:c1:24:53:3e:d8:57:3b:62:6f:20:65:d5:50:84:
22:3f:fa:f4:9f:68:15:3a:36:0d:78:b1:62:eb:24:16:3b:51:
67:ab:2c:bb:15:27:28:78:22:d5:a6:9c:62:7f:53:d3:98:5b:
0c:5e:e2:80:e7:b9:aa:34:89:41:b6:ca:7a:56:9e:87:22:0b:
66:1f:30:2c:6d:08:b5:79:b0:64:5d:f9:8b:38:7a:45:ce:d0:
88:e1:02:de:b1:bc:5b:d2:dd:bc:d8:40:4a:2e:7a:6f:f1:9b:
7c:04:22:29:2a:75:c1:6e:fb:3c:c0:ef:6e:00:e6:d1:6a:9e:
63:3a:49:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:29:24 2025 by rpki-client