Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json)
Hash identifier: DX/Fv/lUmhQJE88V5agVVGf662/kjwi4lt3z4thSrFw=
Subject key identifier: 99:8B:F7:E8:AD:E0:4B:AB:73:30:83:2E:A6:C8:0B:96:2C:4A:85:40
Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Certificate serial: 019A71B914FC93428E65F340D8F554FD6F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: /bRb2/IlHAZjK+R7cSfZkMvtRTEDyfuo6q97bwNZgbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:14:fc:93:42:8e:65:f3:40:d8:f5:54:fd:6f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=998bf7e8ade04bab7330832ea6c80b962c4a8540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:fd:d9:39:f8:9e:af:e1:29:37:a7:53:af:
62:5e:25:cc:bb:d4:29:37:ca:ee:45:12:5c:31:c0:
d1:18:71:18:44:dc:91:05:4b:9f:98:c4:e9:27:3e:
a9:b2:08:a4:72:78:2f:46:79:1d:a2:60:f8:25:14:
9a:88:2a:e9:84:ff:ba:c1:a2:df:db:4f:69:d0:6a:
3b:d3:1c:12:20:17:f0:ef:0c:24:45:31:85:7f:20:
62:73:ef:c4:c5:b2:db:31:45:3e:b7:a6:59:29:81:
3f:8b:ff:99:5c:a5:4e:85:c6:4e:0a:59:f2:3d:13:
aa:d4:f6:c4:84:84:08:84:56:54:af:bd:d4:70:35:
0f:16:8c:17:fd:78:4d:c8:52:6f:57:a7:4c:07:8e:
f1:7f:38:29:d5:ca:ed:ea:49:52:82:22:6d:fb:cf:
1b:e6:25:0e:b7:76:9b:10:d5:00:c8:ae:f2:bb:3e:
01:ec:fd:d8:39:a1:ba:ff:67:5c:d5:79:bc:9b:eb:
8c:87:29:f6:d5:33:69:7c:a5:72:62:e7:d5:19:d1:
74:80:0c:0b:d5:28:07:03:53:4a:9f:e7:dc:90:6c:
ae:66:e9:71:2f:3c:10:aa:4e:0f:34:11:3b:3f:ce:
e8:38:93:17:c6:35:7e:af:63:14:e2:fb:41:4f:71:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8B:F7:E8:AD:E0:4B:AB:73:30:83:2E:A6:C8:0B:96:2C:4A:85:40
X509v3 Authority Key Identifier:
keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:de:23:6c:e4:ec:4a:76:cf:e8:24:42:2c:de:3f:43:5f:c3:
8e:ac:5f:88:fa:dd:5e:35:d3:1e:aa:a0:7f:4e:c5:93:8f:8f:
28:f1:2f:cc:d4:e2:98:96:a3:35:f7:44:9c:a3:d0:2d:88:67:
3a:34:52:05:35:46:7b:7b:02:22:a5:04:c2:e8:a0:59:3d:f1:
95:dc:c3:66:f3:d9:26:68:3b:77:02:2b:69:14:84:b1:2c:0d:
0f:c3:2d:f7:1e:5a:23:84:cf:23:2d:5f:4b:30:7a:74:aa:4f:
23:5c:a5:8b:d8:ea:e3:4a:61:a8:cc:d8:a1:9d:0a:85:77:4a:
3d:9f:ba:4a:3b:be:a3:b2:33:d2:75:26:44:0a:7c:9f:1e:0d:
b1:ba:0c:98:bb:ad:6a:ea:3a:a7:3c:d7:54:e8:d1:42:75:fa:
bf:76:cc:59:ec:23:ed:07:1c:67:2f:32:c7:a3:6f:a1:04:95:
45:e0:c0:93:21:96:f5:ac:63:a0:ed:2c:08:f5:34:be:a3:9b:
c8:33:c1:fe:f5:af:6a:fa:7e:2d:60:6a:f7:95:5b:4d:c7:74:
4f:ba:9b:c2:ad:58:01:7a:a1:bb:a3:72:e9:7c:ec:16:fb:78:
21:3d:cb:08:8d:e0:1e:e6:6b:df:a3:40:90:9f:87:e1:6e:9d:
6b:5b:f2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:48 2025 by rpki-client