Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
File: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft (raw, json)
Hash identifier: dfyHTI9X0umwSzfR6AY6gOevNmsNA+R9IlPAiFbcaik=
Subject key identifier: 23:80:46:C2:50:0D:F7:D7:D0:F5:3A:C7:8B:5A:6C:0D:50:93:F5:AC
Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
Certificate issuer: /CN=a4b707300e869467be5e5273222d90e0b618f924
Certificate serial: 0198CD94B4918F7187DDE953ABE5270A133C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
Manifest number: 38
Signing time: Thu 21 Aug 2025 17:02:11 +0000
Manifest this update: Thu 21 Aug 2025 17:02:11 +0000
Manifest next update: Fri 22 Aug 2025 17:02:11 +0000
Files and hashes: 1: Da4NL5ou2Ng6yl8t-CCdMuLCewQ.roa (hash: w8OukO5+kU54dtVhEXa7iFOMv+PZYBgOzEl0TR/qCD0=)
2: MR_f-x3g7wcjluP2eCx_et2XgAo.roa (hash: bnbauqYg41qtiywoh5HUkv8me54R7s04AvQU8Lpnw6o=)
3: P5sDSR0HZnHki4I0AlMWpThVrhE.roa (hash: e88MDF3UQ11sNY2bgPKcHFav86x/WiIPqzESbe9NCCs=)
4: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl (hash: f+DgweK8fw+L4NTKZrVOZTW7mqDEhnoRJbQYz2Ccirs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 15:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:94:b4:91:8f:71:87:dd:e9:53:ab:e5:27:0a:13:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924
Validity
Not Before: Aug 21 17:02:11 2025 GMT
Not After : Aug 22 17:02:11 2025 GMT
Subject: CN=238046c2500df7d7d0f53ac78b5a6c0d5093f5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:2b:77:8d:53:d0:6b:ad:e2:d0:2e:7e:d6:
e6:e4:ae:87:08:24:68:82:34:55:8c:da:e1:87:01:
d4:c2:7a:fc:42:fb:fc:ee:81:ab:fd:f6:28:2a:ed:
c6:0c:98:10:a7:cd:95:de:cb:ee:1a:f5:d4:6e:38:
65:ab:87:72:0e:e7:8b:c8:39:8f:fb:52:26:ab:ae:
54:c2:ae:8c:56:47:1c:49:5f:a4:50:a7:c0:39:9e:
f8:2d:79:52:9d:d7:5c:4d:8e:60:19:96:c3:00:2a:
7f:ae:61:2c:54:e0:49:e9:d8:99:e8:f3:1c:1a:47:
72:aa:b6:d2:2a:3b:54:4e:63:6c:84:e7:ec:bb:d7:
42:03:af:01:a8:5c:a1:0d:91:24:1c:b0:cc:63:90:
41:8b:20:9d:2e:58:60:18:9f:20:90:d3:c1:53:90:
81:c8:32:5d:8a:85:d1:69:12:e4:15:00:cb:5d:a5:
12:7c:61:1b:d2:11:bf:40:43:89:63:8a:2a:a1:14:
b9:3a:8f:62:22:cc:3c:db:14:71:37:e8:df:5a:c5:
08:48:76:b3:f6:f8:f8:48:26:4b:a0:c3:3f:a5:bd:
06:7d:2c:5d:d7:73:a5:78:93:ab:81:6b:53:d6:f2:
f3:c2:e0:22:27:da:b0:df:ba:af:0a:0e:47:50:1a:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:80:46:C2:50:0D:F7:D7:D0:F5:3A:C7:8B:5A:6C:0D:50:93:F5:AC
X509v3 Authority Key Identifier:
keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2c:98:d4:29:f5:1e:de:68:1e:07:ad:b3:1b:c9:66:89:5a:
ce:f2:f5:6e:f9:e8:76:f1:dc:d6:25:29:9d:37:0d:82:0f:1a:
a9:ec:c6:e0:34:ad:21:cc:ab:a1:9e:db:16:28:d2:67:3f:3b:
f5:ca:87:31:4c:43:6c:7e:ad:79:c5:b6:58:0a:f6:6c:19:91:
67:87:76:6f:cc:59:4e:f0:06:2f:37:86:45:db:46:0c:dc:1d:
cd:ff:67:5b:14:38:1d:15:4b:89:25:19:6a:d1:37:fd:0e:08:
e1:2c:70:06:dc:ee:aa:d6:b5:30:d0:17:61:6b:af:a0:ea:e5:
4f:c9:83:50:d4:47:c7:09:4a:65:b6:82:49:a7:26:75:c9:16:
0a:62:de:39:e7:1b:77:5d:28:24:d4:80:1a:05:41:37:f2:0d:
d2:a0:6f:45:ca:03:b5:5e:69:25:fd:44:c7:20:0e:f3:f8:7d:
1a:72:49:ca:a9:c3:65:65:19:32:79:f3:df:81:97:bc:4b:c4:
e3:82:ad:1b:42:f1:d3:b5:87:65:e2:c2:2f:bd:6c:b2:9b:7a:
bb:8c:fd:7f:aa:e3:5b:d8:c2:d8:7f:59:d6:e6:88:10:d7:2a:
22:45:22:66:a0:e0:3c:99:0f:8f:dd:92:98:00:1a:a4:77:45:
ee:4f:ad:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 19:00:59 2025 by rpki-client