Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
File: PplTRJPLqcidveJi-HoVh6Sqmd8.mft (raw, json)
Hash identifier: 401rf7COBzUhUitIjj5kvyvnhlemcSkG/4DPG1Zz7/o=
Subject key identifier: 06:57:7B:0C:CD:33:95:2A:F7:C1:17:55:E4:CC:F7:AE:D4:16:8B:92
Authority key identifier: 3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
Certificate issuer: /CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Certificate serial: 019A2930919D1D709FC7EBC695F546238F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
Manifest number: 012C
Signing time: Tue 28 Oct 2025 05:00:39 +0000
Manifest this update: Tue 28 Oct 2025 05:00:39 +0000
Manifest next update: Wed 29 Oct 2025 05:00:39 +0000
Files and hashes: 1: OGmt6hTizBTWFlQiZVVHVA04Y3U.roa (hash: xCC8yaYb4MbRSmuBq04Jv3nbwpYcLxsiyEFiClMW7jI=)
2: PplTRJPLqcidveJi-HoVh6Sqmd8.crl (hash: JoLJIuwTezcUpEPemZpKp4qxaCLMwOYPCjLiJMQXuoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:91:9d:1d:70:9f:c7:eb:c6:95:f5:46:23:8f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Validity
Not Before: Oct 28 05:00:39 2025 GMT
Not After : Oct 29 05:00:39 2025 GMT
Subject: CN=06577b0ccd33952af7c11755e4ccf7aed4168b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:3c:50:f0:2f:85:00:ab:b3:b0:81:44:7f:
ff:2b:0a:c7:0b:81:94:5a:cc:03:6c:d2:c7:81:a8:
93:c6:90:03:f0:7e:1c:0c:cd:0a:11:0b:23:e7:e1:
28:93:55:22:cd:1b:d2:8e:14:21:9b:65:13:49:2a:
1d:3b:37:0d:15:5c:dd:ae:7d:7f:cc:c5:55:a8:98:
ef:74:dc:37:47:02:b1:5f:59:c4:f7:d1:b9:b2:a7:
0c:67:cd:78:79:56:71:89:42:7b:37:f2:48:5b:e8:
8e:07:05:7b:b2:dd:aa:f9:9d:75:29:90:8b:07:dc:
49:0d:5c:00:48:0a:4f:c3:55:1c:79:58:91:da:e3:
cc:01:b3:9e:e5:3a:17:b9:62:14:77:9f:d0:0e:83:
23:58:7d:d8:3b:8d:22:6e:28:a0:87:47:c5:4c:33:
ae:66:42:6b:74:39:81:38:08:9a:28:ef:59:47:fd:
c1:f2:fc:6b:a5:de:71:c8:13:32:e3:a7:2a:29:29:
79:e0:5c:23:14:43:5c:ec:1d:fc:30:9c:f9:54:c9:
33:b7:09:2d:f3:15:61:d1:eb:a3:31:9d:68:b7:ac:
dc:9f:ee:92:1b:34:66:be:e8:90:dd:83:b7:ee:b6:
58:52:90:69:f7:c1:48:c5:31:57:c8:51:02:37:0f:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:57:7B:0C:CD:33:95:2A:F7:C1:17:55:E4:CC:F7:AE:D4:16:8B:92
X509v3 Authority Key Identifier:
keyid:3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:35:85:c9:20:35:5e:2a:be:17:60:bb:ce:ea:5b:45:80:f0:
a0:5e:2f:55:6b:e3:da:dd:7e:f2:b6:6e:6b:bb:bf:ac:63:b7:
c1:e1:20:d4:e3:74:da:09:2f:21:f8:87:76:2e:8c:88:74:2f:
09:67:04:b2:af:8d:d8:0f:b4:99:01:23:39:c2:5d:3b:b8:6c:
91:73:40:9c:e1:86:90:46:21:9d:a7:c9:c4:15:cc:40:29:51:
5b:b5:e3:14:5a:f4:b6:c7:18:4c:5e:cb:cd:47:5a:39:d0:58:
b1:47:17:e0:fd:0d:df:af:b1:47:19:58:e7:88:27:62:36:eb:
78:b0:ed:e3:3e:8d:90:51:1a:67:58:b2:c3:5f:1f:04:2a:c2:
e9:3a:28:76:a6:67:ee:8e:cd:3a:04:f6:82:a4:07:ae:c0:d4:
0d:4a:be:c0:6d:15:14:1f:4f:19:cf:b3:f3:af:7d:d4:ae:2f:
91:bc:36:5e:dd:70:d0:78:2f:e4:1f:7f:85:4b:51:68:9e:36:
30:f0:38:21:d3:40:fa:96:21:f0:0b:ac:fe:04:38:d5:a6:cd:
c3:43:ca:06:4c:84:b4:ee:60:7e:ad:30:88:b9:14:f3:97:4d:
28:f8:c8:0f:d0:e0:e5:dc:04:15:b1:f6:f4:66:0c:f4:e2:bb:
8c:67:09:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:30:04 2025 by rpki-client