Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
File: pLm08Dm8goYBw44OrUwZWrvf_mM.mft (raw, json)
Hash identifier: 14qL+zB+kdMPGetGJg9qIJYltGaShVhgNzLhxvSt1c0=
Subject key identifier: 8B:43:36:5E:B9:37:11:1B:EF:E6:27:B0:4B:A1:67:2F:44:7E:A1:81
Authority key identifier: A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
Certificate issuer: /CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Certificate serial: 019A559B0F215004430530EA01FF77D8A4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
Manifest number: 017B
Signing time: Wed 05 Nov 2025 20:00:16 +0000
Manifest this update: Wed 05 Nov 2025 20:00:16 +0000
Manifest next update: Thu 06 Nov 2025 20:00:16 +0000
Files and hashes: 1: bbObKOeu6H0tOgWKFFpKvP9AQ5Y.roa (hash: 46+pO6LmE1DlkXffkxBwf62bOZBzvEVVCFmRWPQeevU=)
2: pLm08Dm8goYBw44OrUwZWrvf_mM.crl (hash: NM+hYBTtA6gkOEGY6nk9WbD+hv4P9v4P6HrgYSMkl3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:0f:21:50:04:43:05:30:ea:01:ff:77:d8:a4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Validity
Not Before: Nov 5 20:00:16 2025 GMT
Not After : Nov 6 20:00:16 2025 GMT
Subject: CN=8b43365eb937111befe627b04ba1672f447ea181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:b3:53:64:62:97:cf:58:52:42:d5:1b:f0:
cd:d8:61:76:91:05:bb:82:56:a5:d8:8a:b4:76:0a:
de:d6:57:0c:af:03:01:f9:b6:48:7f:90:3c:72:81:
5b:b9:e1:07:ea:6f:60:55:c6:a6:54:85:b1:29:a0:
51:16:9d:a6:36:b2:bc:8d:54:5b:78:d4:31:d2:3d:
91:2a:3a:43:1a:26:22:e9:27:c7:57:71:e1:96:7a:
00:32:56:47:5b:73:c7:f1:fc:f0:ba:90:4d:d6:b0:
a0:5c:f7:cc:11:fb:6d:d0:91:ec:f6:66:b3:87:c5:
78:1f:27:8e:7f:df:26:4a:f4:72:60:96:79:02:39:
34:b4:43:11:c3:29:62:ae:4b:5e:cd:46:ba:3e:89:
a7:c4:70:54:20:5f:af:79:3c:61:1c:7c:c2:92:30:
56:58:6d:c2:1a:52:7d:d4:27:c8:fb:41:c5:67:eb:
62:a4:a7:47:7f:c8:76:3d:a4:56:6e:fb:fd:57:03:
26:3f:ac:f8:f8:8c:bd:9d:2a:94:cd:ec:33:3c:75:
3c:de:18:13:18:4f:62:78:ab:a1:61:b6:1d:8f:f0:
2c:27:62:fa:d7:97:d4:30:a8:d2:11:1a:c3:03:72:
98:58:0d:8e:ff:09:39:28:50:ea:69:4f:69:b4:05:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:43:36:5E:B9:37:11:1B:EF:E6:27:B0:4B:A1:67:2F:44:7E:A1:81
X509v3 Authority Key Identifier:
keyid:A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b9:27:c1:59:2b:f5:95:58:89:81:96:aa:65:7d:73:cc:73:
61:20:f5:e6:bd:02:42:e7:47:0d:0e:09:e9:5d:0d:03:b8:d7:
3b:6b:06:7e:05:88:0c:6c:6f:30:0d:e7:7c:74:eb:50:52:83:
28:00:29:53:61:b4:f6:30:46:8e:18:fd:99:08:0d:5d:db:44:
0d:f5:f4:d4:7f:1d:d0:e9:0c:72:6e:eb:34:d6:34:53:a8:54:
1d:0c:06:2c:24:3e:b8:e7:32:3c:91:f0:69:8d:d9:85:b9:8d:
df:e2:89:fa:db:1e:a9:3b:f4:5c:40:a3:6a:a2:fa:71:fb:5f:
0c:b7:88:bf:93:84:08:56:2e:b7:d8:ec:ae:82:f8:68:e1:e2:
51:98:b8:36:10:87:f1:44:e6:f0:6d:6d:00:9e:f9:a3:99:0d:
c8:4a:9d:a2:be:15:80:c5:1d:31:d6:59:7f:d6:ef:ae:ab:e0:
71:e1:65:51:13:af:1d:e3:b5:b5:81:75:d8:92:6a:5c:54:97:
4b:71:d3:0e:5b:02:e5:76:41:4e:fc:d6:bf:c7:35:31:c3:c7:
be:99:bf:d7:97:17:36:7e:79:29:ce:a9:9e:54:cf:5f:62:0f:
a5:df:14:6a:2c:43:1e:17:7a:a2:cf:d0:e5:e5:b0:a3:9f:78:
37:ea:ba:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:58 2025 by rpki-client