Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: LZ0R0K2lDDRQ0qJyJChpd39ZAguCCbDmsaEWIQIkUys=
Subject key identifier: 1F:69:BB:79:F9:8B:85:19:84:ED:B6:9E:AE:78:A6:D0:5F:84:43:0F
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 01993501AADCEC487E0EB76301FDE0D2DECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 07E4
Signing time: Wed 10 Sep 2025 19:02:05 +0000
Manifest this update: Wed 10 Sep 2025 19:02:05 +0000
Manifest next update: Thu 11 Sep 2025 19:02:05 +0000
Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: L5npdpUgBm/ERIrj7hXCb7Om0kXScmu6O1YPmjaCwDE=)
2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:aa:dc:ec:48:7e:0e:b7:63:01:fd:e0:d2:de:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Sep 10 19:02:05 2025 GMT
Not After : Sep 11 19:02:05 2025 GMT
Subject: CN=1f69bb79f98b851984edb69eae78a6d05f84430f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:3a:7d:3e:56:f3:65:3b:f6:70:f2:e0:63:
3e:06:91:83:a0:0b:b7:9b:92:bf:00:89:6f:2d:ea:
dc:bf:f0:2f:58:63:f3:ef:18:31:55:fa:7d:55:a0:
8b:70:f6:dd:eb:00:32:73:54:dd:c6:42:3d:1e:f0:
76:44:5e:42:84:ef:fd:e6:60:29:fc:97:2a:40:98:
34:36:46:d1:3d:90:97:74:3c:27:e8:02:6b:70:84:
e0:32:87:17:e7:6d:30:2d:4b:e4:cc:b2:60:54:94:
67:f7:ee:74:a6:84:a6:06:db:ff:45:e7:cb:63:2f:
c3:2d:70:de:4e:52:33:d7:42:b4:71:99:06:bc:8f:
ca:02:44:5e:f7:96:77:c0:b1:8d:cf:4a:ea:2a:0a:
da:a5:5d:de:c2:81:dd:91:7c:e3:44:c2:bc:f5:d6:
e1:f5:6d:6e:56:80:f4:5b:aa:5a:9b:7c:56:14:17:
fc:80:44:15:42:56:e4:6d:a2:f7:91:a9:cc:f6:c4:
e8:16:a1:09:dd:76:25:83:f7:56:92:8c:e5:60:25:
b5:cb:5d:79:88:c1:a8:a4:51:b5:37:66:91:b8:3a:
a5:bb:f9:7a:fe:49:64:32:ae:40:cf:27:bd:15:2d:
77:e9:c4:24:16:f9:9d:cd:a5:30:1b:f7:ce:80:34:
20:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:69:BB:79:F9:8B:85:19:84:ED:B6:9E:AE:78:A6:D0:5F:84:43:0F
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ea:21:49:59:15:a6:f5:10:7c:0b:3d:5a:3b:0a:b2:40:6a:
a2:48:ca:f1:a8:66:44:42:2c:59:7c:f0:a4:86:31:9c:6a:d9:
cb:69:21:6b:e6:2b:0b:46:a9:d7:35:7a:fd:2e:5e:84:fa:78:
51:df:a5:b4:56:f4:4c:56:be:c4:01:9e:2c:7b:e0:c5:a4:d0:
67:99:40:f9:a3:c7:d1:d7:23:e5:06:58:1d:a2:fd:26:fb:37:
c1:47:fe:dd:c0:99:21:ca:3f:11:ea:c5:90:65:98:d1:ee:a0:
36:33:26:3b:d3:99:ba:04:8e:d0:0c:d0:14:c6:6b:a8:ab:91:
29:f1:56:ff:10:58:28:e6:28:56:f6:61:59:4a:55:dd:97:70:
58:43:b3:9f:c9:78:a6:3a:c5:88:70:fd:ba:b6:25:69:ac:15:
2e:6a:de:9f:af:d7:b6:2f:24:59:15:a6:d2:bd:de:c7:a5:cb:
0d:cf:e0:08:58:bb:e7:2f:65:56:02:45:3d:8a:92:11:56:6a:
d6:01:a5:c7:42:bf:36:8c:a0:ea:05:91:42:55:c3:61:72:ed:
83:09:22:e3:65:1c:16:fd:6d:55:e9:61:c4:9d:59:30:f2:8d:
ee:0e:1d:b3:04:26:0c:26:b5:eb:72:38:c1:ee:55:d2:1d:d8:
b5:fa:68:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:22:23 2025 by rpki-client