Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: edSQ42+5o9DsjehxKvHc234X1qDDnycaptj5AAVQOVk=
Subject key identifier: C6:6D:97:7E:58:C6:CF:E9:2E:1C:D7:61:8D:73:F3:80:1C:3E:F2:F8
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019A19F422C068E06F1E8C71282498AA764C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 065E
Signing time: Sat 25 Oct 2025 06:00:21 +0000
Manifest this update: Sat 25 Oct 2025 06:00:21 +0000
Manifest next update: Sun 26 Oct 2025 06:00:21 +0000
Files and hashes: 1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: eZcg/I8GwG8omOhY/MB1woms5TNBLhGdSBWz0fJN+q4=)
2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=)
3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:f4:22:c0:68:e0:6f:1e:8c:71:28:24:98:aa:76:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Oct 25 06:00:21 2025 GMT
Not After : Oct 26 06:00:21 2025 GMT
Subject: CN=c66d977e58c6cfe92e1cd7618d73f3801c3ef2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:68:d2:8f:c0:cd:42:e4:8b:ad:4d:09:65:
68:da:ad:c4:5e:42:93:45:20:81:cd:8e:1a:a8:5d:
bd:6d:87:f5:42:3e:c1:d7:82:ad:0d:07:8a:72:ae:
67:8d:70:5b:cd:db:8f:6b:12:31:32:da:39:e0:4a:
ff:ca:49:25:cf:ed:13:34:fd:d5:4b:ca:cb:e4:34:
21:76:02:93:f9:69:96:0d:cb:63:ef:5d:75:04:c3:
b1:0a:e5:8a:35:f7:65:f8:cf:c5:c7:da:a6:f2:70:
e3:5e:cf:dd:d7:0e:f2:20:2b:00:6a:ab:e0:f7:1d:
9b:03:0d:17:b5:62:50:4f:6e:e3:a7:e5:0a:df:72:
b1:fb:19:5b:ca:d8:5a:75:1b:6e:36:30:a0:32:7f:
ff:2e:b7:bb:e6:9d:6e:a2:a9:81:56:2f:e5:d5:d5:
27:94:6c:4f:65:93:aa:8f:c2:c8:f0:85:c8:31:78:
7c:31:03:ea:80:d0:a3:b5:b4:05:c4:cd:39:4b:04:
ad:99:ac:72:86:9c:56:a4:72:6c:5a:27:b9:61:a9:
3c:e3:23:de:2f:1e:98:3b:a0:13:dd:45:a1:dc:bc:
bd:56:77:c8:80:cc:4a:b6:eb:7d:cc:b1:0b:86:25:
6d:78:e4:7c:51:fb:0d:f5:b5:52:1d:dc:dd:84:07:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6D:97:7E:58:C6:CF:E9:2E:1C:D7:61:8D:73:F3:80:1C:3E:F2:F8
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9a:9d:aa:33:95:e7:81:c3:fa:7b:88:a9:3a:96:da:a9:98:
1f:73:ab:82:d7:fc:f2:f5:de:cd:c4:20:29:e9:91:65:f3:48:
e9:99:00:be:66:73:dd:d7:10:b7:13:8b:fa:24:14:ff:6d:6f:
51:67:66:f3:de:0b:0e:aa:5b:10:d7:82:60:d4:f6:b1:58:5d:
eb:ce:ad:ad:54:85:a0:bf:c0:87:96:37:f5:4e:26:58:8a:92:
1c:e9:28:1d:f4:89:c1:85:52:57:9a:fa:ea:0e:fa:fa:98:d1:
e9:52:1d:77:07:4e:88:ce:eb:42:e0:95:42:fa:ad:be:0e:8b:
74:da:f7:c3:aa:ad:e6:e1:ea:6c:5a:d4:4b:ec:72:e9:f0:8a:
e3:a9:58:08:11:13:3d:0b:f4:7d:94:b5:93:a1:3e:a8:be:b4:
9d:57:87:18:dd:fd:35:25:57:09:70:1c:e7:18:78:5e:bf:6f:
07:14:c4:ea:d0:db:15:d5:c3:7e:09:0f:c6:74:a4:c6:01:58:
df:e9:96:a2:a1:4d:d8:07:0c:43:5c:d2:5f:ac:0d:64:06:40:
82:8d:e6:52:3a:8d:22:05:10:99:68:d8:5d:91:50:7c:d5:83:
9b:10:b7:c4:10:a1:99:94:6a:9f:f9:cf:4d:ce:af:51:a9:43:
72:0b:f9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:52:01 2025 by rpki-client