Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
File: pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json)
Hash identifier: Mc2TKTuo8WQFTESvc4luG+myedWrNFYO+k9Sbp6pbfQ=
Subject key identifier: 43:48:D7:65:43:3A:8B:0E:29:5D:8D:B1:83:E7:05:08:EB:D3:54:42
Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
Certificate issuer: /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Certificate serial: 019A4EF54567517E7BF9D5B455919DDCB078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
Manifest number: 0476
Signing time: Tue 04 Nov 2025 13:01:28 +0000
Manifest this update: Tue 04 Nov 2025 13:01:28 +0000
Manifest next update: Wed 05 Nov 2025 13:01:28 +0000
Files and hashes: 1: dz9PyU4ctyXKZ49cHOyHFCLYwcU.roa (hash: 3Y8oozkK4fYw8w+acos4s7WtEJkSyImOIymISL/lshA=)
2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: tJdLjrPzCGLPmjjoTme5+nuQpNsnRjGFS973rPbxDL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:45:67:51:7e:7b:f9:d5:b4:55:91:9d:dc:b0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Validity
Not Before: Nov 4 13:01:28 2025 GMT
Not After : Nov 5 13:01:28 2025 GMT
Subject: CN=4348d765433a8b0e295d8db183e70508ebd35442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:e5:03:bf:aa:6e:1c:f6:0d:e0:35:38:29:
17:b4:90:f9:85:60:4d:8a:ab:b2:48:79:9e:9f:53:
86:41:9d:fb:51:56:c1:e8:f1:43:e5:bb:76:9f:9b:
90:46:69:81:b2:40:ec:23:d5:92:d1:2a:eb:00:84:
f5:a1:12:41:3e:c1:f6:da:0b:ef:b5:c3:06:f6:1e:
18:48:ac:fe:43:ea:45:4c:d9:ca:c7:3a:d1:80:f0:
3a:a9:b1:3a:14:a0:92:bc:ef:f2:f4:77:03:32:07:
42:c4:6d:ae:e2:35:3b:cc:0d:e0:4e:e9:61:01:b3:
05:aa:d2:d3:73:e2:9e:49:fe:6e:a4:fc:47:43:a6:
b4:b7:66:df:f1:a0:88:e2:d9:82:6f:50:d7:7a:4a:
3a:04:dd:0a:a4:46:79:b3:c8:ad:f6:8b:94:ac:83:
14:1a:1d:2e:ef:b4:6e:47:9c:85:18:14:93:3e:9f:
98:8b:d7:8d:a5:9e:c3:63:e8:cc:11:fb:59:bf:33:
37:62:58:f6:a4:6d:39:9c:a4:9a:2c:45:40:8e:c3:
ca:a7:a3:7a:c8:8e:da:07:1f:dd:f9:54:3f:da:f6:
97:99:e1:ba:8a:e2:10:00:5d:85:cd:78:07:33:fc:
1c:f7:f2:89:17:9c:3e:ee:48:e3:29:0d:65:1e:35:
40:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:48:D7:65:43:3A:8B:0E:29:5D:8D:B1:83:E7:05:08:EB:D3:54:42
X509v3 Authority Key Identifier:
keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:03:a5:a2:4a:47:80:73:96:85:63:96:c5:23:03:23:a0:d3:
3d:32:c9:8d:38:27:b0:8b:96:22:64:d9:5c:fe:0d:2c:a7:fe:
30:75:15:15:b5:b8:f0:48:fc:05:d2:99:84:11:d1:12:d7:7d:
96:36:a8:c4:d6:0b:75:10:be:1b:c2:9c:92:80:79:28:c1:1e:
58:de:88:36:09:3a:b1:60:d6:f2:2f:b2:17:14:cc:03:85:71:
ab:c4:92:88:c8:e5:71:90:3a:e2:c8:c1:47:ea:cd:7d:51:31:
14:32:e2:56:90:20:06:27:10:5b:d9:7b:83:16:05:bf:2d:6f:
c8:d4:74:1e:3b:48:cf:ec:36:12:5a:19:97:a0:81:d2:30:bd:
ed:d3:25:de:0f:8e:d3:3c:a1:d6:39:ae:d2:4c:c2:7d:13:60:
68:1c:cf:ef:33:53:ae:48:3b:20:8f:f7:90:1f:45:0d:d9:cb:
ec:01:13:fa:60:ba:24:34:3c:92:b6:21:01:bf:ed:86:4a:83:
12:2b:ef:9a:32:67:4a:b6:17:64:94:29:b4:e5:71:37:8a:08:
f3:e8:73:b6:92:73:d8:de:a5:a7:d0:07:4e:b3:74:72:7f:f1:
2a:57:ba:db:7d:07:ee:ed:27:c8:df:1b:25:2d:87:c5:80:02:
c2:d5:76:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:24 2025 by rpki-client