Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
File: pLZdoXU_tO7tuG_ah906-mnYYtA.mft (raw, json)
Hash identifier: vKdv0pPWUe9CqornxHTNgJl5G4hA9t+l5JmYjwvzI9A=
Subject key identifier: 6A:EF:10:C3:53:09:2A:5E:C2:C6:80:62:9A:1C:A8:B3:BC:C7:13:BE
Authority key identifier: A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
Certificate issuer: /CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Certificate serial: 01987F78F673D4D2F377EBC81010DEF6CBDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
Manifest number: 0997
Signing time: Wed 06 Aug 2025 13:01:30 +0000
Manifest this update: Wed 06 Aug 2025 13:01:30 +0000
Manifest next update: Thu 07 Aug 2025 13:01:30 +0000
Files and hashes: 1: 9VAtH6rT9AmgMjM5y2MsDg-1uuk.roa (hash: wQrCWKGL3Sn9wGoFnk6i9VJ1UdYXoGTZv1+i2lw0LfY=)
2: pLZdoXU_tO7tuG_ah906-mnYYtA.crl (hash: WJxB1xYVXpEkJUmiXK8A5vSgEPVbZLyJ7aXXDCmOy1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:f6:73:d4:d2:f3:77:eb:c8:10:10:de:f6:cb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Validity
Not Before: Aug 6 13:01:30 2025 GMT
Not After : Aug 7 13:01:30 2025 GMT
Subject: CN=6aef10c353092a5ec2c680629a1ca8b3bcc713be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ad:5f:8c:54:3c:80:3f:e8:ae:db:d7:8d:1f:
86:47:8f:9c:2e:5e:54:00:97:78:4e:f0:9e:51:c7:
10:2a:32:5d:2a:79:01:2d:3d:26:f9:f2:f4:0e:65:
3b:21:b7:ba:20:8f:20:d7:44:18:d9:94:e5:13:4a:
bd:97:e1:ca:da:22:f6:21:26:e3:7a:ef:c0:2b:29:
9d:6c:b6:60:c7:a0:12:1f:44:68:52:ca:38:f2:13:
b8:9d:8c:38:4c:b1:89:79:0d:2d:66:2e:f1:9d:0e:
3e:21:00:f1:46:6d:78:ab:25:2d:de:94:44:01:4a:
1c:67:37:99:f8:64:27:5d:b7:e8:6a:c7:fb:34:94:
d1:a3:a0:b0:a5:5c:6c:11:06:50:70:24:8e:44:ac:
2d:7e:10:f5:60:3e:8e:19:7c:97:87:7b:51:6a:4b:
4b:a6:4a:f3:13:67:2e:ed:d3:78:2f:89:28:8a:09:
0a:00:92:66:ef:69:1d:22:71:e7:5a:6c:7a:b5:fa:
d8:d8:52:bd:86:b1:de:e5:a9:ec:b0:21:b4:8f:7d:
8a:c9:7f:eb:9d:9e:01:f3:43:6e:12:77:a5:59:a5:
65:e4:62:32:20:41:53:ea:d2:da:33:90:e5:af:57:
b1:32:5d:f9:27:46:1e:e1:f2:b9:c4:78:6b:5b:a7:
36:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EF:10:C3:53:09:2A:5E:C2:C6:80:62:9A:1C:A8:B3:BC:C7:13:BE
X509v3 Authority Key Identifier:
keyid:A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ad:67:43:ef:8e:fa:3f:2e:91:3f:18:c2:ac:9a:c2:09:d7:
62:9a:3c:55:1c:54:29:20:72:aa:d9:48:5f:f9:15:8b:be:63:
3e:06:11:cd:48:ac:b9:d5:89:a7:a8:74:f1:c7:dd:53:87:54:
c2:0e:d2:1a:e1:51:01:d3:13:01:04:a3:c1:a7:04:ef:f8:11:
36:8a:f1:3e:e9:e8:1a:ae:db:b2:cc:a9:49:e3:9f:e5:15:42:
be:46:06:d9:ff:06:88:56:31:96:6a:20:94:d0:09:13:8c:ac:
f8:fd:df:56:10:87:48:50:b4:46:65:3f:d1:58:69:5d:f3:84:
8f:f3:ff:f1:ec:20:2b:8f:c7:0b:bc:d3:25:b4:33:57:11:84:
bc:13:0d:db:85:66:02:68:ec:c2:67:e0:11:4d:45:7e:c7:a7:
b4:98:e7:a2:2c:4e:42:f3:a8:40:ef:95:68:d3:5c:7c:1e:61:
a3:8e:5b:ed:23:33:44:19:f5:93:1f:b9:e2:c8:f4:6f:87:cd:
a1:26:25:ed:05:f1:43:06:b1:5f:0a:63:ab:14:27:22:bb:e6:
aa:42:61:03:2b:64:79:0a:5b:2a:bf:f4:27:e7:d5:b6:24:21:
0d:fd:86:5e:be:18:7d:0c:b2:39:1f:49:75:51:19:c0:1a:a2:
6b:77:12:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/ePZz1NLzd+vIEBDe9svdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjY1ZGExNzUzZmI0ZWVlZGI4NmZkYTg3ZGQzYWZhNjlk
ODYyZDAwHhcNMjUwODA2MTMwMTMwWhcNMjUwODA3MTMwMTMwWjAzMTEwLwYDVQQD
Eyg2YWVmMTBjMzUzMDkyYTVlYzJjNjgwNjI5YTFjYThiM2JjYzcxM2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq1fjFQ8gD/ortvXjR+GR4+cLl5U
AJd4TvCeUccQKjJdKnkBLT0m+fL0DmU7Ibe6II8g10QY2ZTlE0q9l+HK2iL2ISbj
eu/AKymdbLZgx6ASH0RoUso48hO4nYw4TLGJeQ0tZi7xnQ4+IQDxRm14qyUt3pRE
AUocZzeZ+GQnXbfoasf7NJTRo6CwpVxsEQZQcCSORKwtfhD1YD6OGXyXh3tRaktL
pkrzE2cu7dN4L4koigkKAJJm72kdInHnWmx6tfrY2FK9hrHe5anssCG0j32KyX/r
nZ4B80NuEnelWaVl5GIyIEFT6tLaM5Dlr1exMl35J0Ye4fK5xHhrW6c27QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrvEMNTCSpewsaAYpocqLO8xxO+MB8GA1UdIwQY
MBaAFKS2XaF1P7Tu7bhv2ofdOvpp2GLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExaZG9YVV90Tzd0dUdfYWg5MDYtbW5ZWXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yYTU3YmUtYmU3Ny00NDI4LThlOTMt
YmE1MjAxZWE1ZjgzLzEvcExaZG9YVV90Tzd0dUdfYWg5MDYtbW5ZWXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yYTU3YmUtYmU3Ny00NDI4LThlOTMtYmE1MjAxZWE1Zjgz
LzEvcExaZG9YVV90Tzd0dUdfYWg5MDYtbW5ZWXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOa1nQ++O
+j8ukT8YwqyawgnXYpo8VRxUKSByqtlIX/kVi75jPgYRzUisudWJp6h08cfdU4dU
wg7SGuFRAdMTAQSjwacE7/gRNorxPunoGq7bssypSeOf5RVCvkYG2f8GiFYxlmog
lNAJE4ys+P3fVhCHSFC0RmU/0VhpXfOEj/P/8ewgK4/HC7zTJbQzVxGEvBMN24Vm
AmjswmfgEU1FfsentJjnoixOQvOoQO+VaNNcfB5ho45b7SMzRBn1kx+54sj0b4fN
oSYl7QXxQwaxXwpjqxQnIrvmqkJhAytkeQpbKr/0J+fVtiQhDf2GXr4YfQyyOR9J
dVEZwBqia3cSrQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:46:43 2025 by rpki-client