Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
File: pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json)
Hash identifier: 0G8+f9fiJBuMV5E6qxlAs2S1qo3IBbwdtQ+uiFFp/bM=
Subject key identifier: 40:4F:E0:A2:17:96:20:09:98:FE:93:1A:AA:41:05:B5:41:D8:BB:C8
Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
Certificate issuer: /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Certificate serial: 019873E1CCECD70C7BE50C666D4167685501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
Manifest number: 0380
Signing time: Mon 04 Aug 2025 07:00:34 +0000
Manifest this update: Mon 04 Aug 2025 07:00:34 +0000
Manifest next update: Tue 05 Aug 2025 07:00:34 +0000
Files and hashes: 1: dz9PyU4ctyXKZ49cHOyHFCLYwcU.roa (hash: 3Y8oozkK4fYw8w+acos4s7WtEJkSyImOIymISL/lshA=)
2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: wNCu/1n0Lj7yBd/tztMl3OQiP3SAh9I+VAs6z8b2WFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:cc:ec:d7:0c:7b:e5:0c:66:6d:41:67:68:55:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Validity
Not Before: Aug 4 07:00:34 2025 GMT
Not After : Aug 5 07:00:34 2025 GMT
Subject: CN=404fe0a21796200998fe931aaa4105b541d8bbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:70:6e:6e:15:c2:80:0c:0c:c9:6e:fb:c6:93:
df:3a:87:42:4b:20:12:ff:4b:af:9d:d0:9f:4e:7f:
bc:d2:18:45:e2:2b:d0:65:a6:68:94:ef:b2:a4:23:
89:c6:2f:8c:0a:17:35:5e:ed:78:8b:32:a4:2d:97:
97:aa:b3:d6:e3:77:2e:a8:cb:83:89:3a:c7:c4:3f:
1a:0b:54:da:ba:ea:0f:ac:97:bf:9f:cd:90:4c:8c:
d3:e4:8d:34:32:f3:4c:1e:23:80:b9:d7:66:14:04:
65:11:73:0c:b3:2a:dd:eb:00:7c:12:92:7a:0d:8e:
f2:d1:d4:e7:f0:4c:d0:3d:fe:4c:1c:1d:3f:ad:37:
02:31:b4:3f:0b:4a:f2:93:73:86:ce:c0:96:44:cc:
16:2f:6e:a5:ac:3b:d5:34:c5:a2:d3:86:79:a7:f9:
8a:68:50:f4:b5:3a:9b:e2:ea:92:e0:2b:a3:c2:eb:
a8:aa:e2:e9:21:dc:5d:09:8b:bf:13:25:fd:94:01:
be:78:51:23:5e:ab:0b:88:cf:80:85:2b:0d:60:7f:
98:88:cc:7b:25:c3:8d:1f:c8:a2:f7:8c:35:14:cd:
5e:f5:1e:ab:40:b6:9d:cb:1f:f5:44:1b:5f:c4:60:
3d:93:4f:7e:2a:0b:5f:94:bf:87:15:58:96:06:ae:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4F:E0:A2:17:96:20:09:98:FE:93:1A:AA:41:05:B5:41:D8:BB:C8
X509v3 Authority Key Identifier:
keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c9:32:ca:63:e3:90:1f:53:d6:f8:55:e5:1e:7f:21:47:e2:
18:4a:33:be:49:d9:9a:51:d8:37:36:62:d5:29:95:54:14:39:
dd:70:dd:cd:3f:49:69:5b:0a:1f:28:32:d9:89:27:3e:57:80:
8b:53:00:f1:85:fb:d7:1b:c3:8b:bc:21:cf:bc:9f:d8:01:07:
c5:81:e4:19:6a:8b:39:ec:e2:42:31:f3:64:2d:ea:fc:b5:bc:
2e:46:e8:e6:ad:b2:53:d1:b0:50:08:cc:7b:ad:dd:9c:8c:15:
15:aa:e6:16:64:c8:c5:37:12:70:44:c4:58:06:f3:1a:29:ea:
20:f4:43:d6:89:25:25:f8:aa:64:18:c2:8c:e3:08:44:85:cc:
f8:c4:99:f5:2f:93:75:83:9a:2d:91:f7:df:ab:7e:9d:bb:dc:
52:c6:0a:c4:c5:3d:b0:51:9e:bd:d2:c9:30:34:a0:c2:e7:8d:
5a:9d:95:c5:01:47:18:3c:ab:c4:03:cd:52:5f:5f:be:61:fb:
f9:f1:8f:72:46:33:03:cd:61:63:42:72:a9:2f:a9:87:66:f3:
5d:08:28:e2:0b:1f:d6:b0:2e:b0:33:a0:a6:f7:5d:64:a9:2e:
de:42:06:60:79:68:76:74:3f:da:ec:b2:c6:0a:0e:93:55:0e:
c8:cc:9f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:10 2025 by rpki-client