Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: TYXH46L86ONSLQT0TXvcJbygkpkmmH6Mg7eNTRgkOZw=
Subject key identifier: 92:D9:43:91:85:08:C7:D0:B3:0A:91:47:F9:C2:66:17:D6:E7:2C:9C
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 01989524764F95EB22C38F0B79E0FC0D95F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 11D5
Signing time: Sun 10 Aug 2025 18:00:51 +0000
Manifest this update: Sun 10 Aug 2025 18:00:51 +0000
Manifest next update: Mon 11 Aug 2025 18:00:51 +0000
Files and hashes: 1: 7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa (hash: sSokJSwDE7TenrNiAqYNMhbgz0iCXtyPGRTOZYronAY=)
2: YVWuJ6FTMU1uU3iR7ed746pUzUU.roa (hash: oVu2kWcJUFQzXCLu/Vci/BnnMXJVo57f7gbHz7uSAXM=)
3: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: sHIyQ4+Z2egi2Y+KuD8y55ZWL+Y1kmfp2yNx3TnGdhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:76:4f:95:eb:22:c3:8f:0b:79:e0:fc:0d:95:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Aug 10 18:00:51 2025 GMT
Not After : Aug 11 18:00:51 2025 GMT
Subject: CN=92d943918508c7d0b30a9147f9c26617d6e72c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:27:11:a3:49:10:2f:73:79:b0:53:62:62:f3:
31:73:90:34:b9:de:de:03:f2:b5:52:41:56:ad:e0:
a9:65:f3:d7:be:9b:68:d5:8f:e8:54:5c:99:dc:7a:
c0:80:d3:0e:21:dc:95:ce:46:18:fb:b6:db:ba:82:
77:77:a2:2b:41:7b:6c:ad:dc:05:64:b5:28:8f:81:
0f:f0:19:16:49:c9:4b:2d:7f:b6:e7:68:58:dc:ce:
ba:6c:54:1f:ce:64:28:95:01:60:61:6d:55:96:27:
0a:ad:07:f4:e3:13:4d:32:bf:a3:c9:de:d9:e0:23:
97:ff:92:5c:c4:c7:90:3f:0f:b6:83:b8:6d:cf:13:
48:97:2a:31:b0:db:2d:23:96:fb:fa:e2:2e:17:f7:
3f:79:8b:04:c0:57:03:aa:2e:ab:7b:4f:3b:d3:40:
7c:d4:66:12:4d:c3:46:41:fe:ee:0f:20:dd:44:d3:
ed:6d:6f:53:b3:21:af:fd:2c:07:7b:e9:5b:57:3b:
41:9c:1a:d9:fc:ed:6c:66:d8:8b:f6:7c:36:98:c9:
43:02:ea:30:21:cb:4d:6d:f6:f6:31:23:01:33:3c:
49:42:30:d5:e6:94:11:3c:9b:e6:4c:41:12:ef:64:
48:7a:aa:d4:ae:53:94:e5:c0:d0:2a:f7:c2:ae:eb:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D9:43:91:85:08:C7:D0:B3:0A:91:47:F9:C2:66:17:D6:E7:2C:9C
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:df:c2:b2:8d:3c:69:3b:8c:08:2f:27:a7:4a:7e:1e:dd:8a:
b4:94:9d:9c:02:c5:56:ea:78:a6:7e:68:7b:fb:e0:4b:49:6a:
d0:30:01:08:77:9f:7d:7e:9f:57:92:6a:8a:6f:f2:2e:09:4d:
d3:4b:4a:9d:50:c1:8f:3b:b9:0c:78:00:77:8b:65:ee:39:1d:
48:b9:06:dd:d7:8b:0e:ae:79:04:76:e5:d9:68:fe:28:68:c6:
6c:6b:5b:5e:6c:cb:95:0b:e6:47:d1:9c:e3:c0:cd:dd:b8:8b:
5b:f6:64:b0:59:9b:7a:c8:47:5c:85:eb:2d:ea:b0:cd:7b:de:
ff:10:be:c2:e7:21:64:02:05:d6:be:47:6c:3d:f8:7c:db:b3:
fe:3c:b4:e3:29:be:68:42:5f:8a:85:af:1e:7d:0e:03:44:0b:
30:b2:a3:81:84:d8:ce:22:81:09:06:18:5f:9a:a5:1d:69:eb:
36:79:22:70:a8:36:26:15:45:de:2c:84:5c:d1:fc:06:74:8d:
7f:cf:a9:e6:5c:a3:1f:b6:bc:4d:48:a3:dd:3d:ed:d6:12:f5:
4a:0f:a4:cb:b0:9f:ec:97:43:f8:19:c0:08:6d:89:f5:4f:87:
6c:97:6c:65:f0:51:19:e8:ee:54:bf:8f:af:a1:c8:6b:e6:ad:
a9:ab:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:58:42 2025 by rpki-client