Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier: m0rIKIgQi74y8jQZG+Pe4UN9HVgcdWIPqfMyu52VU44=
Subject key identifier: 0F:70:A4:EA:24:70:7D:49:5C:23:FE:52:4D:24:AB:2A:8F:08:58:15
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial: 019A4DE234D66991E65952514012777223AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number: 0368
Signing time: Tue 04 Nov 2025 08:01:01 +0000
Manifest this update: Tue 04 Nov 2025 08:01:01 +0000
Manifest next update: Wed 05 Nov 2025 08:01:01 +0000
Files and hashes: 1: NJyfKGT7eHHPjQOAXKwVNKCjCYs.roa (hash: XDn/F11FiIWe6mjWs24N5BRlzAoQS5rK8vutFukkZcU=)
2: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: Vic9cmC4s1aQ0ABjHCEwjaYsZY5Dk62RzYRu1+XTVJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:34:d6:69:91:e6:59:52:51:40:12:77:72:23:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Validity
Not Before: Nov 4 08:01:01 2025 GMT
Not After : Nov 5 08:01:01 2025 GMT
Subject: CN=0f70a4ea24707d495c23fe524d24ab2a8f085815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:d9:67:b2:3e:07:2e:df:a5:34:8a:62:3f:
94:a0:01:71:26:f3:35:93:d6:0f:5d:71:8c:b9:62:
9f:ed:5a:19:f7:45:60:d8:1a:2f:b5:6d:cf:43:29:
ff:6f:c4:6b:8d:5c:47:27:d9:fd:d4:31:61:c2:7e:
bc:87:d7:f0:05:19:cd:91:14:da:30:e7:b8:7e:89:
c4:9f:54:a3:ea:36:78:75:b4:e2:e4:ff:b9:09:19:
5e:2e:a5:78:6c:c6:91:84:8e:25:9b:d3:65:f3:89:
30:4b:98:b7:44:66:70:e9:66:99:2e:6b:0d:34:09:
42:56:da:a5:ff:d2:07:33:75:7d:20:af:e2:9a:c4:
8c:40:7a:b0:96:b2:99:3e:3f:af:b6:b3:fa:5f:09:
cd:d4:e3:d7:59:b6:e7:b9:39:20:b8:f0:59:69:f1:
71:99:ce:55:65:1d:96:47:66:5d:ea:40:2d:26:53:
3c:9c:f2:cd:6e:71:7e:7c:7e:66:d6:9a:47:7e:93:
d8:d4:69:6f:6a:c8:d8:80:48:9c:f7:ac:6c:4f:5e:
53:d3:b0:01:50:f3:d6:d4:2e:de:95:b6:51:0f:db:
c9:85:49:a7:bb:98:5a:ae:62:37:55:dc:d3:4f:64:
0f:7f:4f:20:3b:2c:ee:27:16:87:12:f3:63:e2:f9:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:70:A4:EA:24:70:7D:49:5C:23:FE:52:4D:24:AB:2A:8F:08:58:15
X509v3 Authority Key Identifier:
keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2d:b7:ba:60:f8:ed:d4:8f:b5:80:b1:6f:cc:5c:e6:76:2d:
59:c9:bc:37:b3:7f:66:1a:6e:d6:90:e3:63:06:07:e4:e7:a0:
d9:42:69:5b:68:86:29:20:7f:23:d7:06:29:0b:65:b4:aa:91:
20:3c:75:fd:90:e4:65:b7:5d:39:cf:95:d8:68:f5:cb:9b:90:
66:eb:ff:05:f3:71:6c:2f:ef:83:bd:97:33:a8:e7:e4:04:22:
86:9a:62:93:a8:63:69:80:e7:8b:f0:01:68:68:6d:f5:fb:2d:
97:a7:bf:34:fc:5f:71:57:fe:75:d1:62:31:82:1f:e5:38:22:
ac:51:bb:f1:2a:19:38:3c:cf:4b:8b:bb:08:71:91:4c:91:d6:
2e:17:eb:b6:35:f4:75:2e:58:bf:3f:56:ca:fc:94:9e:c4:c2:
46:65:dd:b2:0e:9e:b1:57:70:98:9f:40:3d:99:46:8f:19:d1:
04:f9:c3:cd:57:cd:da:c2:d8:cf:d6:77:a7:c8:c2:e5:f3:63:
56:91:c6:93:00:48:a0:37:d7:fd:99:22:d2:1e:d6:1b:b8:94:
b7:9f:47:41:61:11:b5:fc:2f:4a:23:d5:06:9f:0c:69:6a:6c:
82:f3:35:d5:45:6a:de:bd:a0:05:2e:f8:a2:0f:ca:37:56:fd:
36:1b:09:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:58 2025 by rpki-client