Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: k64yvsS+Zq66kSVe0LExbtj/jgb1zkjRtu0lYA9t6Hc=
Subject key identifier: 94:B7:74:FE:23:B2:32:AE:CC:34:6A:66:DE:A4:67:95:09:AE:52:32
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019784D83AC713F1822D88C2FF1B704B985E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 1148
Signing time: Wed 18 Jun 2025 21:00:52 +0000
Manifest this update: Wed 18 Jun 2025 21:00:52 +0000
Manifest next update: Thu 19 Jun 2025 21:00:52 +0000
Files and hashes: 1: 7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa (hash: sSokJSwDE7TenrNiAqYNMhbgz0iCXtyPGRTOZYronAY=)
2: YVWuJ6FTMU1uU3iR7ed746pUzUU.roa (hash: oVu2kWcJUFQzXCLu/Vci/BnnMXJVo57f7gbHz7uSAXM=)
3: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: Qq4YpiQXtLmdoWz6Upr5HHQRlexGDXJLyZl3FUGqpc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:d8:3a:c7:13:f1:82:2d:88:c2:ff:1b:70:4b:98:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Jun 18 21:00:52 2025 GMT
Not After : Jun 19 21:00:52 2025 GMT
Subject: CN=94b774fe23b232aecc346a66dea4679509ae5232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:29:1c:9d:40:f4:c1:31:37:c5:d0:4f:57:f9:
8e:99:39:4f:a3:bc:d7:ed:2b:8d:33:75:a0:5b:51:
05:23:eb:7f:72:d6:41:d0:8b:b1:df:e0:38:b1:c0:
54:ed:2d:ac:45:11:9c:0a:78:ca:87:54:32:9e:01:
e9:72:a9:4d:76:f6:c6:c5:21:67:c8:bb:e8:ea:d9:
7b:89:7d:05:12:e8:33:13:bd:a2:0c:74:4a:ef:f6:
99:9e:23:41:33:b7:dc:f5:0d:e8:68:37:94:2d:7e:
03:78:d9:27:1e:06:55:29:4e:9b:44:ff:6f:65:83:
05:b4:ea:8e:5a:9b:bc:6b:53:e2:1d:59:7a:18:b2:
6e:2c:44:20:7b:3d:fa:b0:0c:b8:30:9a:26:bf:f8:
37:46:2c:9a:9e:d9:2f:40:13:70:b0:89:57:e4:69:
56:59:a2:3e:1b:fb:a7:cb:c3:cf:b8:13:93:06:ca:
b0:f3:fd:c4:f3:ed:e4:06:24:86:ce:25:8e:2e:71:
3b:79:8e:d1:88:7d:94:e6:08:84:4b:3b:6c:e3:cb:
70:85:dd:ba:ec:b5:09:76:81:bb:f5:b1:fe:1e:8c:
3d:48:75:2f:c5:30:7b:9a:63:a8:f4:75:52:5e:81:
65:9e:0c:f1:6d:45:14:c7:c7:ba:26:de:d0:95:5f:
ff:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B7:74:FE:23:B2:32:AE:CC:34:6A:66:DE:A4:67:95:09:AE:52:32
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ac:d0:8a:29:60:ae:70:51:4c:c1:1b:1c:62:c8:42:c0:d4:
c1:dc:65:6a:30:d8:05:3c:bc:65:9e:43:84:af:85:fe:c8:b4:
f0:8d:4d:eb:ed:d3:80:30:7f:b5:c8:1f:78:2a:fa:88:2b:83:
23:08:0a:7c:b2:b0:0f:2e:db:ab:98:98:c6:28:51:3d:53:9b:
12:1e:72:4d:04:65:67:cc:2e:c1:15:2e:aa:52:03:3a:6a:84:
1b:41:2c:75:e9:64:fb:ca:0f:27:28:d5:c4:28:d3:54:4f:f9:
e9:43:56:9a:6b:36:ff:64:62:68:00:f5:e7:01:7c:0f:21:d3:
59:1a:6a:c8:4e:8e:84:45:0b:76:02:4c:04:ed:fe:97:86:7f:
3d:1d:ae:a1:02:c9:e6:54:d4:95:fa:bc:ad:1d:16:16:09:49:
01:43:ce:24:ac:02:1c:4e:e9:ea:c0:56:ed:4d:95:c4:19:23:
4e:7c:bc:ba:de:fb:01:91:bd:38:87:9d:75:cb:26:8a:1b:24:
b6:1d:80:75:cf:e0:ae:7a:3b:83:7e:b5:01:03:19:41:cf:be:
7e:6d:55:5c:a4:b1:1d:ac:b2:d8:3a:e4:cd:20:64:44:a5:84:
0c:cd:92:9b:7d:33:da:3a:f1:a0:3f:08:11:fb:38:4f:c0:10:
ba:8f:35:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeE2DrHE/GCLYjC/xtwS5heMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjE4Zjk2YWFhMDM1NjdmMjJmYzAyYzQyYTY5MzU3MDg2
NTVhYTkwHhcNMjUwNjE4MjEwMDUyWhcNMjUwNjE5MjEwMDUyWjAzMTEwLwYDVQQD
Eyg5NGI3NzRmZTIzYjIzMmFlY2MzNDZhNjZkZWE0Njc5NTA5YWU1MjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SkcnUD0wTE3xdBPV/mOmTlPo7zX
7SuNM3WgW1EFI+t/ctZB0Iux3+A4scBU7S2sRRGcCnjKh1QyngHpcqlNdvbGxSFn
yLvo6tl7iX0FEugzE72iDHRK7/aZniNBM7fc9Q3oaDeULX4DeNknHgZVKU6bRP9v
ZYMFtOqOWpu8a1PiHVl6GLJuLEQgez36sAy4MJomv/g3RiyantkvQBNwsIlX5GlW
WaI+G/uny8PPuBOTBsqw8/3E8+3kBiSGziWOLnE7eY7RiH2U5giESzts48twhd26
7LUJdoG79bH+How9SHUvxTB7mmOo9HVSXoFlngzxbUUUx8e6Jt7QlV//1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJS3dP4jsjKuzDRqZt6kZ5UJrlIyMB8GA1UdIwQY
MBaAFKSxj5aqoDVn8i/ALEKmk1cIZVqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2Ut
YzY5NGYwZWFjYmE2LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2UtYzY5NGYwZWFjYmE2
LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKzQiilg
rnBRTMEbHGLIQsDUwdxlajDYBTy8ZZ5DhK+F/si08I1N6+3TgDB/tcgfeCr6iCuD
IwgKfLKwDy7bq5iYxihRPVObEh5yTQRlZ8wuwRUuqlIDOmqEG0Esdelk+8oPJyjV
xCjTVE/56UNWmms2/2RiaAD15wF8DyHTWRpqyE6OhEULdgJMBO3+l4Z/PR2uoQLJ
5lTUlfq8rR0WFglJAUPOJKwCHE7p6sBW7U2VxBkjTny8ut77AZG9OIeddcsmihsk
th2Adc/grno7g361AQMZQc++fm1VXKSxHayy2DrkzSBkRKWEDM2Sm30z2jrxoD8I
Efs4T8AQuo81UA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 05:56:58 2025 by rpki-client