Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: Mc6wF33Zv8q9WzSyxxugymQ/5u3COgybo8z64zUZvsw=
Subject key identifier: D0:A7:54:21:43:24:2D:7C:BB:6C:CB:36:A3:9C:CF:CE:A0:0B:6D:52
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019A4E18B74CF15C8DC016B6F89C5793351A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 0679
Signing time: Tue 04 Nov 2025 09:00:33 +0000
Manifest this update: Tue 04 Nov 2025 09:00:33 +0000
Manifest next update: Wed 05 Nov 2025 09:00:33 +0000
Files and hashes: 1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: 7A8M82qZb4uca1lDE+Sj+8PbZ0Dnc7p8qCjjT3gapyw=)
2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=)
3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b7:4c:f1:5c:8d:c0:16:b6:f8:9c:57:93:35:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Nov 4 09:00:33 2025 GMT
Not After : Nov 5 09:00:33 2025 GMT
Subject: CN=d0a7542143242d7cbb6ccb36a39ccfcea00b6d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:bb:b2:c4:08:74:a2:3a:d3:b8:4c:b5:a5:
db:f3:00:08:8c:86:5f:a7:d4:81:7d:57:4f:65:27:
2f:02:f3:42:dd:26:2a:d7:72:02:da:41:a7:bd:20:
02:76:24:7b:98:32:78:1c:77:d5:75:da:2e:7d:6b:
9b:98:09:f4:dd:32:5e:a9:28:dd:64:16:dc:97:9f:
d1:10:b9:36:36:c2:a4:cc:52:44:3c:e2:d5:7c:23:
f7:7f:7f:de:c5:a1:fa:32:24:ad:20:0d:88:6f:42:
08:87:7a:1b:f0:34:4b:00:6e:af:84:ee:4b:d1:58:
ad:b8:49:46:b9:bd:a2:c2:e7:f7:2a:9c:ce:76:8d:
df:5c:2b:9f:3b:4c:e8:74:41:d7:ea:3b:95:4a:17:
fa:24:64:3e:ce:96:27:ea:f4:b1:67:17:aa:2b:fe:
cb:2e:34:4d:c3:61:ba:9e:1f:56:d5:98:61:c2:8d:
54:25:53:04:88:9f:db:b5:95:7f:9d:27:65:17:39:
60:c0:30:dd:72:c8:fe:df:de:57:be:7b:34:8b:68:
10:94:1c:3f:e6:d4:13:95:42:75:a2:79:8e:66:48:
5d:8f:7f:e9:68:e9:57:f0:11:4a:b0:7e:81:d8:d6:
9a:46:60:ad:fb:0e:e6:e3:97:48:aa:91:b7:48:2f:
e0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A7:54:21:43:24:2D:7C:BB:6C:CB:36:A3:9C:CF:CE:A0:0B:6D:52
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:20:61:ac:f0:f3:18:59:23:a9:5b:56:0d:d2:34:0e:12:dd:
a6:fa:01:25:29:9e:49:67:1d:74:44:a3:19:a3:3a:38:4c:8c:
ed:4d:68:89:d5:d5:fb:b3:e2:b5:27:eb:8a:b4:c4:8d:66:dc:
cf:be:d2:94:72:5f:0a:3e:6f:1e:3a:a6:ab:80:42:df:ce:c0:
b9:ba:17:a2:e0:e7:48:f8:04:a8:0a:ec:46:d2:9f:1b:7a:96:
1e:05:db:a4:61:b6:fe:b9:d5:71:81:0c:1c:b9:56:60:78:6f:
30:b1:7b:e5:51:ac:91:59:1e:b3:55:11:dc:3d:b8:7f:07:1c:
52:3e:14:53:d6:a6:6d:39:7f:a2:93:c5:f4:57:ac:18:a2:de:
9d:f2:91:8f:b9:eb:ab:e6:71:b9:4f:4d:39:2b:0e:6f:b4:9c:
84:28:f9:5c:f7:76:a1:67:05:60:35:81:d1:0d:0c:ee:5f:bd:
0b:31:21:40:5a:72:e4:d2:c6:89:85:98:dd:22:a6:76:6b:52:
3f:b8:90:d4:18:25:3c:a0:d0:e2:1c:00:6e:a0:2f:34:0b:97:
4d:4d:0c:80:52:69:9a:ad:74:00:cb:8b:12:24:a1:a6:10:d6:
0f:95:93:f5:a5:ec:52:09:e6:43:6a:b5:87:6f:95:d2:1b:e2:
b1:0a:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:27 2025 by rpki-client