Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
File: PplTRJPLqcidveJi-HoVh6Sqmd8.mft (raw, json)
Hash identifier: woJXVdjSmncwFQe27rGtZCYmoo2VPZUQfumhLOJ5Y+M=
Subject key identifier: E7:12:E2:89:96:D9:4A:B3:81:FE:5C:9A:DD:C5:5B:63:DD:7A:04:60
Authority key identifier: 3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
Certificate issuer: /CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Certificate serial: 019A53ACF69C12E13A13C632F2177E65B799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
Manifest number: 0142
Signing time: Wed 05 Nov 2025 11:00:35 +0000
Manifest this update: Wed 05 Nov 2025 11:00:35 +0000
Manifest next update: Thu 06 Nov 2025 11:00:35 +0000
Files and hashes: 1: OGmt6hTizBTWFlQiZVVHVA04Y3U.roa (hash: xCC8yaYb4MbRSmuBq04Jv3nbwpYcLxsiyEFiClMW7jI=)
2: PplTRJPLqcidveJi-HoVh6Sqmd8.crl (hash: bSVpxxFxTIZMf3QssDtGg22YEa0/MV6zWFv/5MAExs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:f6:9c:12:e1:3a:13:c6:32:f2:17:7e:65:b7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Validity
Not Before: Nov 5 11:00:35 2025 GMT
Not After : Nov 6 11:00:35 2025 GMT
Subject: CN=e712e28996d94ab381fe5c9addc55b63dd7a0460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:31:34:21:2b:d4:96:39:a3:fb:80:d1:5c:
52:7f:4d:e9:97:cc:aa:47:35:89:ce:cd:84:9b:42:
3f:a9:5b:ef:69:e8:07:e5:41:4a:7a:79:a8:87:d2:
26:1b:65:3b:3c:db:17:73:06:ba:ef:3c:40:ab:6f:
fa:7f:fe:a7:f8:8c:02:3e:11:ee:fb:89:3f:f3:97:
76:33:d3:1a:ee:79:35:b2:5f:dd:7b:17:bc:b2:5f:
86:c2:9b:b5:82:7b:c3:10:aa:66:46:59:bb:d3:79:
65:c4:b3:cf:80:12:87:bd:95:10:63:6a:03:b1:fc:
a2:8c:ae:41:22:d2:08:7e:2c:6e:e7:02:2e:ce:58:
a6:53:4b:9b:a3:b5:de:97:fe:9e:60:2b:a3:a0:18:
b1:57:ec:42:07:9c:52:e2:f2:df:65:50:b7:d5:1c:
46:7a:e3:f5:16:3e:64:25:c1:f7:13:e8:7b:46:d5:
e2:bd:da:37:64:0a:93:f3:67:51:65:47:89:3d:e2:
37:9c:03:e8:cc:b3:ef:a9:e9:b6:d4:da:bd:d9:2a:
9c:e0:5e:6c:8e:8e:aa:32:c7:ed:cf:f3:1d:8b:f1:
27:f0:5a:ab:28:a1:1b:0c:28:4b:04:72:8f:f9:bf:
e9:7c:89:2d:d4:22:b5:aa:83:03:af:83:16:90:40:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:12:E2:89:96:D9:4A:B3:81:FE:5C:9A:DD:C5:5B:63:DD:7A:04:60
X509v3 Authority Key Identifier:
keyid:3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8e:a6:36:0a:2e:27:79:15:76:99:33:a0:9c:fa:f6:52:45:
9f:ca:50:6b:50:c2:2f:a4:cb:38:7c:15:37:a4:10:23:63:2d:
46:28:47:b4:7c:4a:97:6b:6a:d0:81:88:8e:4b:8b:8f:c0:1a:
8f:c6:42:9a:cc:65:f3:6f:18:55:3a:2b:96:d1:e7:ec:84:06:
2f:a6:17:ee:a0:d3:75:f5:f8:7b:eb:82:df:30:8b:bf:58:8e:
b9:50:76:f9:a7:a5:f0:1d:2f:22:54:a5:09:6e:c2:1a:9a:a0:
1c:ea:57:7c:a4:1b:fd:ae:e8:00:d0:3b:aa:2b:ac:ca:10:49:
bc:b6:d5:53:15:48:1c:39:d1:23:a0:a6:c2:e9:61:3f:aa:3d:
f9:36:49:b0:61:9b:d8:ea:f5:20:fc:af:30:1a:35:3f:7a:ac:
a7:2b:68:50:ff:85:dd:f4:90:bf:01:fa:e0:e4:cb:1c:6b:91:
70:42:ae:f6:94:c7:6b:a9:f3:bd:2c:d3:ba:c2:92:ff:5b:a3:
df:ea:aa:b3:df:a8:bd:2c:31:6e:af:4e:7d:7c:f1:2f:78:bb:
01:08:d2:30:06:d4:ca:4f:2e:49:ef:70:33:4a:65:f5:42:2b:
4a:84:6a:f5:7a:1a:57:ec:61:0d:c4:a4:fb:20:2d:50:ce:6d:
57:ad:a0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:37:31 2025 by rpki-client