Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: 9KdKTnsAR+3AQ2AfhNV23Cabrjo1fMgnlA3G/1c3Drw=
Subject key identifier: 59:EB:81:51:63:CC:8E:AD:EB:BC:69:62:44:99:0D:D2:AC:01:91:8E
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 019A2E21094DA5FA7D803CB8D0E6A0338400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 0865
Signing time: Wed 29 Oct 2025 04:01:48 +0000
Manifest this update: Wed 29 Oct 2025 04:01:48 +0000
Manifest next update: Thu 30 Oct 2025 04:01:48 +0000
Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: c0vha15CEckDOJcTwe6URzpFEOjLxVvm7nhNVYwLjs0=)
2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:21:09:4d:a5:fa:7d:80:3c:b8:d0:e6:a0:33:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Oct 29 04:01:48 2025 GMT
Not After : Oct 30 04:01:48 2025 GMT
Subject: CN=59eb815163cc8eadebbc696244990dd2ac01918e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:2c:12:44:ed:ec:49:1f:f5:a1:8f:c2:66:
0f:33:af:dd:99:0a:9c:a8:b1:dd:a5:93:98:00:66:
7b:ec:51:bb:25:70:99:0c:21:32:9a:7a:12:56:af:
80:7a:cf:67:97:6d:e3:df:f8:e5:70:73:f0:0d:8d:
b7:e4:ea:9c:5e:37:b6:6c:19:82:8a:f5:ca:15:6a:
2d:a3:0f:64:ff:9b:e0:2a:a0:78:85:88:88:80:59:
2f:1a:3e:f2:68:f7:84:3b:d4:db:9f:fd:0a:e4:97:
98:36:87:d8:49:71:1b:a2:17:bc:d6:49:1c:3a:8b:
95:44:94:5b:2f:c0:6c:bd:bd:5f:db:52:e4:d6:55:
0f:96:23:06:d6:6f:ed:64:ed:b6:5e:4f:f3:bf:35:
7e:c2:a9:ad:a9:68:61:fc:b7:5e:3e:43:54:68:95:
83:bf:40:8a:d4:e4:7a:41:68:b4:34:c4:c0:b0:df:
6e:7a:02:56:0d:d4:2e:07:ed:d8:9f:8f:30:15:f9:
fd:cd:af:f2:9f:96:4d:ed:a0:4f:08:7c:b2:00:c8:
22:c7:97:66:a7:81:f2:34:07:79:ef:5b:f1:c1:d1:
36:a5:d5:eb:e9:ac:a2:2e:cb:a9:71:0a:4b:7b:53:
21:e9:1a:11:d6:7a:81:60:f7:bf:84:fa:80:69:92:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EB:81:51:63:CC:8E:AD:EB:BC:69:62:44:99:0D:D2:AC:01:91:8E
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:34:23:7e:df:96:b9:44:d0:7b:5a:58:8b:7f:5f:1c:7f:bc:
3f:33:f9:7f:4a:4f:11:c5:f7:77:34:15:c8:6e:08:f8:51:d6:
34:08:fb:ea:54:98:bd:69:3c:c6:e6:e6:51:0b:9f:dc:7f:8b:
cd:3d:c0:ea:35:d2:88:f6:a4:1a:c2:67:f0:e1:1e:7a:47:ac:
78:f0:5f:07:f7:cc:ab:08:f4:57:0c:ad:3f:81:58:5f:53:46:
01:00:e9:e8:d9:0c:eb:bd:93:b4:bd:3c:af:76:b5:1c:17:27:
37:bf:6a:a5:7e:d1:c4:e0:63:e1:d8:48:30:85:cf:eb:23:85:
3a:d6:d1:bf:6e:5e:ec:00:c4:38:21:d4:8a:41:ea:f8:3d:45:
bc:66:da:8a:f4:9e:a9:23:8c:2f:f1:7f:0d:3d:a0:de:8e:47:
f4:f4:6a:ac:c1:39:f5:9c:f6:0f:40:9e:b3:16:c3:a4:7e:db:
b1:66:d4:68:be:38:9d:37:18:cf:05:c2:ee:f7:03:cd:4f:0e:
4f:53:4c:4d:78:d3:7e:5b:4d:ba:4d:eb:6e:2a:cc:5c:38:e9:
8b:8e:6e:a5:0b:a9:50:e3:01:eb:6f:1c:e9:ce:1a:ec:8b:49:
cd:06:74:11:06:b6:02:04:16:8d:7f:d7:20:50:0c:59:3a:0b:
c7:3c:17:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZouIQlNpfp9gDy40OagM4QAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjY0NDZiMGM2ZGNkY2RmN2YzYjlhYzQxMTc4N2M2ZjJl
YjdiMjQwHhcNMjUxMDI5MDQwMTQ4WhcNMjUxMDMwMDQwMTQ4WjAzMTEwLwYDVQQD
Eyg1OWViODE1MTYzY2M4ZWFkZWJiYzY5NjI0NDk5MGRkMmFjMDE5MThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwAsEkTt7Ekf9aGPwmYPM6/dmQqc
qLHdpZOYAGZ77FG7JXCZDCEymnoSVq+Aes9nl23j3/jlcHPwDY235OqcXje2bBmC
ivXKFWotow9k/5vgKqB4hYiIgFkvGj7yaPeEO9Tbn/0K5JeYNofYSXEbohe81kkc
OouVRJRbL8Bsvb1f21Lk1lUPliMG1m/tZO22Xk/zvzV+wqmtqWhh/LdePkNUaJWD
v0CK1OR6QWi0NMTAsN9uegJWDdQuB+3Yn48wFfn9za/yn5ZN7aBPCHyyAMgix5dm
p4HyNAd571vxwdE2pdXr6ayiLsupcQpLe1Mh6RoR1nqBYPe/hPqAaZIdFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnrgVFjzI6t67xpYkSZDdKsAZGOMB8GA1UdIwQY
MBaAFKS2RGsMbc3N9/O5rEEXh8by63skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMt
Yzk0ZDM5M2I4YTk3LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMtYzk0ZDM5M2I4YTk3
LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTQjft+W
uUTQe1pYi39fHH+8PzP5f0pPEcX3dzQVyG4I+FHWNAj76lSYvWk8xubmUQuf3H+L
zT3A6jXSiPakGsJn8OEeekesePBfB/fMqwj0VwytP4FYX1NGAQDp6NkM672TtL08
r3a1HBcnN79qpX7RxOBj4dhIMIXP6yOFOtbRv25e7ADEOCHUikHq+D1FvGbaivSe
qSOML/F/DT2g3o5H9PRqrME59Zz2D0CesxbDpH7bsWbUaL44nTcYzwXC7vcDzU8O
T1NMTXjTfltNuk3rbirMXDjpi45upQupUOMB628c6c4a7ItJzQZ0EQa2AgQWjX/X
IFAMWToLxzwXQw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:11:45 2025 by rpki-client