Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier: vRTdHnyxg0ytHi2Hj6JuLNcaxbunM+P80gzDyVj7nbQ=
Subject key identifier: CF:3E:21:E3:32:BA:74:05:A1:3D:CB:CD:E7:1E:DF:44:EF:AB:29:C7
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial: 01984476215EDB5E935657EE015DFB5D8048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number: 025A
Signing time: Sat 26 Jul 2025 02:00:49 +0000
Manifest this update: Sat 26 Jul 2025 02:00:49 +0000
Manifest next update: Sun 27 Jul 2025 02:00:49 +0000
Files and hashes: 1: NJyfKGT7eHHPjQOAXKwVNKCjCYs.roa (hash: XDn/F11FiIWe6mjWs24N5BRlzAoQS5rK8vutFukkZcU=)
2: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: A71U/0gJLIOb2B6qq5oNubebwnZ3aKHNuW1L8XqjcKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:21:5e:db:5e:93:56:57:ee:01:5d:fb:5d:80:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Validity
Not Before: Jul 26 02:00:49 2025 GMT
Not After : Jul 27 02:00:49 2025 GMT
Subject: CN=cf3e21e332ba7405a13dcbcde71edf44efab29c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:4b:c8:a4:72:a7:e4:cd:05:3d:41:eb:2c:
7e:cd:f9:f4:58:28:a4:22:4f:f4:f2:45:bd:b5:4f:
e5:4c:fd:20:21:00:88:ce:db:82:00:55:27:7f:ab:
b7:65:5b:88:d7:21:4e:03:d6:5b:0d:de:72:e7:ab:
09:51:73:b2:0e:52:3b:2c:2b:1c:c6:55:34:3a:56:
86:9e:04:b0:20:18:16:20:0d:fe:e5:7b:de:59:f3:
53:ee:07:68:9a:70:58:76:74:37:ac:84:63:eb:88:
3b:94:b9:b7:7b:c1:e0:e3:1c:c7:f0:05:cb:a4:46:
1c:79:d1:54:0d:0f:a1:81:2f:e4:6c:bd:f9:04:a6:
b7:9c:9b:ff:b5:19:3f:22:d9:17:26:50:c3:ab:84:
e6:0a:14:8c:a1:df:08:2e:20:03:68:15:ab:aa:2c:
07:ff:9b:c4:28:ab:74:7b:da:67:ef:f9:a0:be:e6:
97:78:85:85:6a:72:69:6d:50:04:06:00:7f:2f:76:
69:57:1b:40:1e:35:cc:50:1a:e7:17:8f:fd:00:8c:
4f:cf:a2:c7:42:03:71:0c:7f:3c:15:c1:b5:3b:25:
48:25:01:30:c5:48:6d:ec:03:52:02:de:43:69:0d:
89:ff:fd:12:26:8a:af:5d:0c:82:26:00:df:4c:8a:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3E:21:E3:32:BA:74:05:A1:3D:CB:CD:E7:1E:DF:44:EF:AB:29:C7
X509v3 Authority Key Identifier:
keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:16:66:55:1c:59:d9:29:cc:fb:c3:f1:6a:e9:07:c5:c5:52:
09:3e:c5:a9:9c:7f:f9:90:20:d3:d9:15:53:8f:95:c9:cd:9c:
1d:02:f2:47:ca:37:58:fc:cc:05:97:ff:a4:f5:21:35:a2:1f:
50:9e:2b:bf:f2:6d:46:8d:f8:8e:ba:45:7b:95:bf:49:3e:7e:
cc:d0:cd:04:26:f5:36:05:13:1d:ea:72:9e:7a:6f:9b:c8:92:
60:67:d1:91:b9:92:b1:aa:8f:b6:e1:85:2a:c0:3c:c9:1e:48:
c9:cc:71:a2:a1:ca:4a:55:a2:ca:cd:38:c7:f7:c9:6d:b9:8a:
35:a7:2e:e1:bb:1f:e2:43:cf:ed:c9:4c:b8:e9:9d:96:a8:c1:
6c:dc:7c:25:7b:b5:1d:90:08:98:ce:97:37:b2:5c:88:14:64:
74:ad:4f:9b:d9:ac:73:d9:08:76:b7:12:a8:f5:ba:6a:a4:fe:
f5:88:f7:ca:bd:e5:a2:04:cc:9b:f0:30:76:3a:fb:eb:f0:16:
0c:1e:44:98:69:bc:bc:78:30:e1:b0:6d:50:a1:94:d4:10:e8:
a4:a6:a6:bc:d0:fa:dd:70:f3:3a:45:16:70:2a:df:6d:31:c2:
7b:d8:bc:8f:f1:26:e3:41:ac:91:60:2c:0d:bd:e3:be:0f:ac:
22:d3:ad:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:48:58 2025 by rpki-client