Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
File: PplTRJPLqcidveJi-HoVh6Sqmd8.mft (raw, json)
Hash identifier: YxcwF225vSJzJYq8R6WXfvTZYnVwIaqSjgigkpJjBEE=
Subject key identifier: 73:32:3B:37:EF:4E:B3:0D:3C:76:54:81:09:0A:AF:F5:A4:B9:D5:72
Authority key identifier: 3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
Certificate issuer: /CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Certificate serial: 0198277E7AF9F3691040E96C518BF9830461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
Manifest number: 22
Signing time: Sun 20 Jul 2025 11:00:57 +0000
Manifest this update: Sun 20 Jul 2025 11:00:57 +0000
Manifest next update: Mon 21 Jul 2025 11:00:57 +0000
Files and hashes: 1: OGmt6hTizBTWFlQiZVVHVA04Y3U.roa (hash: xCC8yaYb4MbRSmuBq04Jv3nbwpYcLxsiyEFiClMW7jI=)
2: PplTRJPLqcidveJi-HoVh6Sqmd8.crl (hash: 6B/FgWiCqUcKLuW3KfuSvZOrt+JeW7fZfoARY9jIAbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:7e:7a:f9:f3:69:10:40:e9:6c:51:8b:f9:83:04:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Validity
Not Before: Jul 20 11:00:57 2025 GMT
Not After : Jul 21 11:00:57 2025 GMT
Subject: CN=73323b37ef4eb30d3c765481090aaff5a4b9d572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:f2:a0:e1:06:43:b5:96:20:46:09:f2:03:
ca:1b:d7:10:82:f7:dd:c0:27:75:ad:39:48:fd:e1:
02:2c:5f:7f:c4:3e:02:db:93:d6:4b:7d:06:f5:11:
78:16:01:51:98:17:12:7c:46:29:9b:4d:60:63:14:
11:af:5c:89:88:fd:9e:78:92:99:3d:7e:87:f5:c8:
60:64:95:ca:de:1f:05:a4:86:94:e4:a3:10:3b:26:
a1:16:73:12:39:7b:6a:59:cb:31:99:1b:e1:01:db:
79:62:3d:cd:5d:c8:73:41:8a:21:08:82:3f:42:17:
f3:cc:e8:02:6f:4b:4d:4f:0a:7f:38:ec:8b:97:ac:
0f:e0:9f:77:9d:9b:ac:6d:ae:9f:f0:ea:6e:ae:6d:
ca:83:84:1c:f7:e4:7c:d6:ae:49:17:20:3d:45:be:
41:ab:70:3d:00:a0:87:80:13:ad:60:b0:11:5f:32:
a1:d0:51:e6:f8:5e:7f:70:d4:88:e5:fd:ed:75:d6:
6e:91:ac:d9:c8:49:a5:59:f1:21:05:18:99:8d:26:
68:32:d4:da:96:90:2f:3c:ea:c6:da:0c:d7:5c:d1:
46:bb:20:ed:29:9c:3f:5c:f6:4b:2b:90:1f:42:09:
25:4b:86:39:a8:aa:4b:e9:e9:d8:fc:3d:07:94:15:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:32:3B:37:EF:4E:B3:0D:3C:76:54:81:09:0A:AF:F5:A4:B9:D5:72
X509v3 Authority Key Identifier:
keyid:3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0a:2c:18:a2:e5:e5:3c:ba:07:88:f5:b2:68:53:c5:79:44:
2f:bd:53:f5:74:d5:b6:03:c8:f1:41:10:ea:ef:52:17:64:d2:
5c:68:af:fe:21:68:4b:85:68:d5:2d:11:f8:fc:0a:45:80:fe:
29:ad:31:03:b0:18:f3:c6:6c:52:87:53:14:b2:2c:01:4d:2a:
df:f5:c0:62:94:cf:0a:8e:6a:bc:9c:4c:69:17:99:e4:70:24:
33:25:0c:f6:21:55:7f:14:01:15:59:32:6c:bb:da:11:c6:6c:
47:80:82:d5:04:a5:ea:14:a3:32:e5:19:0f:50:9d:ac:d4:31:
1f:09:bd:d4:29:92:ae:09:6a:7b:53:70:95:f0:26:c6:2e:f3:
cd:71:02:e3:f0:85:0e:77:7e:ff:66:16:93:8d:ed:69:38:10:
f1:40:83:e6:a0:7a:9a:a1:24:ec:5c:6f:cd:63:1e:66:ec:83:
98:86:f4:2b:b7:70:6a:69:69:5a:78:da:f0:d2:87:7f:3f:0d:
c0:e2:2c:45:da:1b:fa:20:3d:f9:5d:44:95:d4:de:0d:3b:d4:
3e:b8:80:1c:dc:ef:d9:d9:19:8b:ea:b8:80:d1:6e:ce:e6:68:
b3:f0:0e:34:96:73:00:e5:62:6b:1e:fc:a6:7b:30:ce:ea:30:
fd:06:23:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:25:54 2025 by rpki-client