Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: 59rhgvptlWGwrEPWdsYXJhO5fZ8puXeKFOLleqC1HwA=
Subject key identifier: E3:AA:EE:A3:33:F9:00:07:BC:85:EE:D1:2C:0C:17:FA:69:C4:C7:3B
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019849D3CD9AFEAE5B4F61F146480975B2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 11AE
Signing time: Sun 27 Jul 2025 03:01:14 +0000
Manifest this update: Sun 27 Jul 2025 03:01:14 +0000
Manifest next update: Mon 28 Jul 2025 03:01:14 +0000
Files and hashes: 1: 7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa (hash: sSokJSwDE7TenrNiAqYNMhbgz0iCXtyPGRTOZYronAY=)
2: YVWuJ6FTMU1uU3iR7ed746pUzUU.roa (hash: oVu2kWcJUFQzXCLu/Vci/BnnMXJVo57f7gbHz7uSAXM=)
3: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: M1K0Bxay87nw40sQ23Kr+ljcpx/XO8blQV74Ms4KUwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:cd:9a:fe:ae:5b:4f:61:f1:46:48:09:75:b2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Jul 27 03:01:14 2025 GMT
Not After : Jul 28 03:01:14 2025 GMT
Subject: CN=e3aaeea333f90007bc85eed12c0c17fa69c4c73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:44:3a:79:04:02:97:b2:d8:50:77:29:60:30:
08:b9:e4:bc:16:29:cb:85:87:9d:84:70:78:f6:35:
9b:6f:e8:1a:f8:0d:62:0d:2c:d3:71:81:5c:ce:32:
f0:4f:af:9a:e7:05:8e:0a:27:f9:53:02:ef:23:4d:
a3:8a:a4:a9:06:5b:62:14:5b:44:9d:c8:6d:e9:00:
b1:af:f4:19:b5:f6:48:39:be:b5:a1:df:48:23:97:
12:e0:02:6d:16:fe:14:ef:7a:db:b8:7c:9d:97:08:
e8:5d:83:7e:d9:b6:30:f9:c9:e7:46:2d:16:b2:d0:
30:fa:9e:79:41:5a:24:9d:94:8e:bc:8d:a2:4f:e5:
85:02:24:25:0d:7d:de:c1:23:fe:0e:72:ed:c3:e4:
b2:59:af:4c:10:5a:44:fc:20:c7:d2:48:e8:f4:4f:
47:34:90:51:9a:c0:07:14:de:4d:68:d4:77:f4:9b:
42:cc:ca:2e:80:c4:32:bc:b6:63:c4:24:d4:2e:85:
58:ba:b7:a5:93:a8:d0:30:8f:af:c8:58:4f:f6:b3:
66:8b:9d:46:a7:4a:80:43:2c:28:36:14:72:be:5f:
41:c2:f9:57:bd:e2:28:82:49:52:f2:fe:ec:18:7d:
e7:42:23:7d:59:10:a7:75:38:16:ad:8d:1a:90:58:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AA:EE:A3:33:F9:00:07:BC:85:EE:D1:2C:0C:17:FA:69:C4:C7:3B
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c6:c9:b3:f9:d3:8d:15:ee:e9:e6:b9:32:40:54:af:4a:c6:
00:0f:00:d5:7a:18:d0:41:84:36:92:aa:ab:4c:0a:9b:d0:fa:
2d:f1:9f:6f:9e:8b:f3:20:02:ce:a4:e2:b4:36:42:84:61:cf:
6a:56:5d:a9:35:69:af:21:7b:26:00:2e:10:22:d9:dd:7a:8e:
04:20:5b:e9:f9:ad:30:36:b9:b1:90:80:48:57:1f:9d:ad:a3:
c2:16:8a:8b:5c:e8:0f:91:25:0e:c2:f8:a3:53:1f:e4:0f:5a:
64:8a:04:44:77:9a:75:36:40:53:8c:61:53:98:01:77:44:d9:
8c:39:13:60:86:0c:58:8c:32:a7:4c:ae:c2:9f:80:e0:69:eb:
03:92:14:08:91:ac:d4:41:f1:6f:fe:11:1f:33:14:24:d4:c6:
f1:99:d9:70:d6:c0:25:a5:b8:bf:3f:91:21:f6:cd:1a:f5:45:
fb:82:81:2d:7f:ba:61:99:bb:6a:78:28:31:74:c5:8e:30:21:
19:6a:08:dd:14:8f:90:0b:cd:c4:ad:b7:e7:29:2b:f0:d9:3e:
1f:a3:ff:86:47:fd:6f:8f:83:1a:af:2b:14:b6:1c:de:18:68:
0b:4c:3e:cf:9e:10:e6:b0:70:5b:ed:8d:2a:56:d3:79:ea:5d:
0d:a6:1e:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ082a/q5bT2HxRkgJdbLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjE4Zjk2YWFhMDM1NjdmMjJmYzAyYzQyYTY5MzU3MDg2
NTVhYTkwHhcNMjUwNzI3MDMwMTE0WhcNMjUwNzI4MDMwMTE0WjAzMTEwLwYDVQQD
EyhlM2FhZWVhMzMzZjkwMDA3YmM4NWVlZDEyYzBjMTdmYTY5YzRjNzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0Q6eQQCl7LYUHcpYDAIueS8FinL
hYedhHB49jWbb+ga+A1iDSzTcYFczjLwT6+a5wWOCif5UwLvI02jiqSpBltiFFtE
ncht6QCxr/QZtfZIOb61od9II5cS4AJtFv4U73rbuHydlwjoXYN+2bYw+cnnRi0W
stAw+p55QVoknZSOvI2iT+WFAiQlDX3ewSP+DnLtw+SyWa9MEFpE/CDH0kjo9E9H
NJBRmsAHFN5NaNR39JtCzMougMQyvLZjxCTULoVYurelk6jQMI+vyFhP9rNmi51G
p0qAQywoNhRyvl9BwvlXveIogklS8v7sGH3nQiN9WRCndTgWrY0akFhoBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOq7qMz+QAHvIXu0SwMF/ppxMc7MB8GA1UdIwQY
MBaAFKSxj5aqoDVn8i/ALEKmk1cIZVqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2Ut
YzY5NGYwZWFjYmE2LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2UtYzY5NGYwZWFjYmE2
LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8bJs/nT
jRXu6ea5MkBUr0rGAA8A1XoY0EGENpKqq0wKm9D6LfGfb56L8yACzqTitDZChGHP
alZdqTVpryF7JgAuECLZ3XqOBCBb6fmtMDa5sZCASFcfna2jwhaKi1zoD5ElDsL4
o1Mf5A9aZIoERHeadTZAU4xhU5gBd0TZjDkTYIYMWIwyp0yuwp+A4GnrA5IUCJGs
1EHxb/4RHzMUJNTG8ZnZcNbAJaW4vz+RIfbNGvVF+4KBLX+6YZm7angoMXTFjjAh
GWoI3RSPkAvNxK235ykr8Nk+H6P/hkf9b4+DGq8rFLYc3hhoC0w+z54Q5rBwW+2N
KlbTeepdDaYeMg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:46 2025 by rpki-client