Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
File: pl-8tOowipiwk5diXmOGY4PBbdA.mft (raw, json)
Hash identifier: YlRsf009dp1hSP7+8DpBMC1vBJM0p819hJtr9E447/E=
Subject key identifier: 8F:9A:F1:33:EE:01:B2:68:F0:51:75:B3:B3:BC:36:DC:96:AA:DA:30
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial: 019A4D3D2043635225F21530C8CA54698DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
Manifest number: 1166
Signing time: Tue 04 Nov 2025 05:00:42 +0000
Manifest this update: Tue 04 Nov 2025 05:00:42 +0000
Manifest next update: Wed 05 Nov 2025 05:00:42 +0000
Files and hashes: 1: WVsTj7MenBGl38xhkFqi5Z0aczs.roa (hash: 7b6SsFE3NdlNY/Clv2Hjf1UktFQZh/V54AuKRqY5yFI=)
2: Z7WMX0zmtWSwL1nl_bRrocAt96g.roa (hash: vascd8IZpBAaNc+5SLZNF4hkGl3zooaWaRamiX+4Grw=)
3: pl-8tOowipiwk5diXmOGY4PBbdA.crl (hash: QQbt+edrnSgwWlVz05q8O/V7FruOh6mSwl/69dulxn0=)
4: zGOXqDkKzJdU0p47Wrv4dob9WRY.roa (hash: h/PYhmoQAY7EhuYv56qskYi6sqC9Lx5gg5uwdXV3h5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:20:43:63:52:25:f2:15:30:c8:ca:54:69:8d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Validity
Not Before: Nov 4 05:00:42 2025 GMT
Not After : Nov 5 05:00:42 2025 GMT
Subject: CN=8f9af133ee01b268f05175b3b3bc36dc96aada30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:97:86:75:34:be:df:a5:4e:40:61:cb:60:
18:47:89:4d:59:39:42:8f:a5:38:25:5e:0b:51:61:
d0:02:cf:a2:e1:84:07:93:2f:cd:90:05:4f:6d:df:
4e:7a:90:7d:3c:ce:38:43:fd:ea:9e:96:95:6c:be:
a2:2e:ab:d5:6f:10:20:f9:02:e8:f2:c5:58:78:64:
f3:5c:69:b0:01:ee:6f:fa:b5:05:38:59:a2:cc:6e:
3f:50:4a:04:7a:7a:55:a9:71:ee:04:3e:a1:f8:2f:
9a:9f:ea:63:e8:7c:52:d8:b0:26:bc:65:23:39:02:
71:2c:22:88:d7:d7:8b:6f:9c:11:28:e7:0f:8a:87:
c5:33:b1:e3:2c:2e:52:4c:63:fe:62:a7:d7:90:fe:
08:20:09:e9:0b:8b:8b:41:90:73:e0:7b:42:a1:19:
a4:d7:eb:12:c4:50:e9:a6:ee:29:e7:5d:7e:61:05:
cb:82:56:86:c6:bc:b5:97:a5:90:00:93:41:d7:77:
0a:02:09:d3:a3:0d:2d:65:0b:cc:6d:3b:ee:43:3b:
0c:70:b9:71:95:62:19:5f:f6:23:e5:2c:26:1f:39:
41:c5:09:99:9d:ab:6b:64:b4:ec:a9:45:f3:9a:67:
35:93:ef:37:bf:95:b1:e0:be:99:ca:62:92:d0:e7:
cd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9A:F1:33:EE:01:B2:68:F0:51:75:B3:B3:BC:36:DC:96:AA:DA:30
X509v3 Authority Key Identifier:
keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8e:47:4c:78:2b:b0:9f:de:a3:62:5d:ef:dc:e3:bc:e4:9c:
6a:41:b5:b7:53:d0:fd:20:a9:92:c2:7d:3f:c0:46:6b:09:cf:
65:70:ba:2a:f4:4c:a7:30:8d:ad:8b:84:3c:d7:04:0f:d8:b8:
fe:dd:34:06:a8:33:2e:0d:c3:13:09:b2:3d:4e:3d:bb:89:05:
41:f1:01:4a:19:55:38:9a:f4:96:d1:94:d4:11:77:ce:3f:95:
ba:79:60:73:2e:32:13:ea:82:12:07:b5:a4:40:7c:e7:9a:d3:
eb:f7:79:82:7c:f2:81:1b:2b:06:47:b7:92:82:9f:d8:0a:73:
85:13:8c:35:d8:9b:87:93:73:48:91:d1:4f:ae:54:59:da:cf:
64:d1:d2:fc:54:c1:cd:29:8e:e5:02:09:22:b6:df:2a:d4:5e:
f3:a9:ce:06:c3:23:d9:d4:e1:7b:b7:5f:9f:b5:48:4c:65:40:
d1:b7:ef:60:0b:d9:46:8a:11:21:64:3b:4a:5c:6c:aa:16:66:
5a:87:b2:f6:dc:ba:db:7f:da:4d:cc:60:3d:f3:08:92:4c:c2:
2b:86:19:d7:f0:87:96:69:7f:94:93:5a:42:f2:43:49:86:05:
3d:8e:ac:17:ec:75:51:44:2b:a3:97:5d:64:b3:7b:cd:e5:25:
f5:5f:0e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:57 2025 by rpki-client