Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: 1GHp0dshQZv4gNO3VS0mCFTA+NR24cOMv3GubjTUkzk=
Subject key identifier: 13:83:C0:E8:FE:BB:53:52:7E:5C:9E:55:F5:8C:4E:19:85:67:CA:E1
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019A51BEC8993C5A5E6DE71423E7EA8B2F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 12BD
Signing time: Wed 05 Nov 2025 02:00:48 +0000
Manifest this update: Wed 05 Nov 2025 02:00:48 +0000
Manifest next update: Thu 06 Nov 2025 02:00:48 +0000
Files and hashes: 1: 7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa (hash: sSokJSwDE7TenrNiAqYNMhbgz0iCXtyPGRTOZYronAY=)
2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: DC2FRh2txyvp6WjaYYpJ5/cUYNwyivo1BqTQFLltdnA=)
3: trffbMiTH6DrGuiy0X3enBvY_Oo.roa (hash: o0rF0YmxKHHBrS/g1LKn0ZhHqi9U3j4NE3U+lGfKC3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:c8:99:3c:5a:5e:6d:e7:14:23:e7:ea:8b:2f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Nov 5 02:00:48 2025 GMT
Not After : Nov 6 02:00:48 2025 GMT
Subject: CN=1383c0e8febb53527e5c9e55f58c4e198567cae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:8f:a5:a1:e7:7e:a0:80:9c:d7:57:5e:bf:
ed:12:25:b5:e5:7f:73:e9:82:81:db:2f:b7:ef:cb:
f4:dc:bb:0f:f0:d9:38:37:af:50:d4:0e:9f:1b:3c:
55:33:37:46:34:ee:ce:71:96:34:7a:45:d6:99:3d:
22:27:14:b2:a8:eb:1d:4b:af:24:29:f7:22:d3:07:
a5:0e:37:1f:a5:f5:6c:d3:bb:70:0c:e5:36:0f:0d:
fd:e1:dc:5f:f1:0a:d3:d4:a8:0d:fc:d2:28:ae:88:
52:59:a1:8b:37:2c:ad:27:98:17:7b:61:ee:55:db:
c2:8e:88:56:9d:c5:fb:ad:8c:af:23:a1:94:76:7e:
76:23:e5:7f:0c:68:46:f6:b7:20:8d:57:15:64:db:
d5:e5:d0:e9:c7:63:f1:1c:2f:8a:b1:0d:36:be:5c:
77:8d:28:8f:38:77:58:79:1b:4c:f3:53:25:9e:53:
94:f6:8b:92:fb:29:0e:6e:c2:96:5b:63:6e:be:1f:
a7:b6:b5:a5:fe:57:01:ea:72:b0:56:56:42:b5:75:
43:8c:10:f1:e2:d9:12:ae:63:6e:c9:1f:16:7a:18:
35:47:f5:51:bf:72:c4:00:e7:dd:7a:6e:4a:45:07:
cf:c2:ca:38:18:73:32:e7:6e:61:46:43:d7:46:4b:
88:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:83:C0:E8:FE:BB:53:52:7E:5C:9E:55:F5:8C:4E:19:85:67:CA:E1
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:43:75:e3:9d:63:6c:a7:e2:28:72:e0:d5:62:bb:6e:dc:12:
ca:01:95:81:75:e2:a8:15:62:8d:fa:90:f1:f4:cd:77:d5:c7:
3c:63:bb:cf:fc:66:fd:8d:a2:d9:9c:3e:29:4d:c6:f6:79:83:
71:93:41:72:10:38:ad:0c:e4:90:51:7d:5f:10:84:1f:89:33:
92:3c:75:28:af:4c:14:3a:2d:54:4b:b8:58:d1:6a:ef:d9:27:
85:88:11:a3:5c:ed:03:15:1a:fe:64:89:10:04:e4:0c:fa:c3:
92:e5:73:36:78:64:eb:23:a3:41:e7:45:53:4d:19:de:5a:0f:
91:92:c8:ca:c0:da:a3:43:ee:1f:d5:48:38:38:50:5e:31:cc:
f4:ba:37:cb:50:f2:10:94:27:f2:c1:33:5c:7d:c1:87:ea:fc:
85:a7:7f:81:6c:0e:e9:6e:02:38:7e:fa:f6:ff:44:18:89:58:
8e:d6:58:11:00:5e:4d:20:7a:d1:c2:ee:54:aa:6d:e8:08:5b:
73:b8:18:d5:9c:b0:f1:68:09:70:cf:95:70:29:0e:eb:19:ff:
57:0a:09:e4:20:0c:ef:6a:ea:f9:56:3f:cc:2f:c9:0c:b4:7f:
83:5d:ed:c3:ef:df:bd:a3:c3:78:25:d6:01:d4:3d:fc:18:41:
2a:0a:ce:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:31:24 2025 by rpki-client