Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
File: PplTRJPLqcidveJi-HoVh6Sqmd8.mft (raw, json)
Hash identifier: Riu0Fo7WS1mc6hBkGlNeaeNXvzitPZ46/oxXDSZREiY=
Subject key identifier: AD:16:E3:E4:12:B2:DF:7A:C3:C6:D5:5B:94:A6:91:DF:43:BF:21:F4
Authority key identifier: 3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
Certificate issuer: /CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Certificate serial: 0199228C98A1506DEA3103E99C59FD168237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
Manifest number: A4
Signing time: Sun 07 Sep 2025 05:01:03 +0000
Manifest this update: Sun 07 Sep 2025 05:01:03 +0000
Manifest next update: Mon 08 Sep 2025 05:01:03 +0000
Files and hashes: 1: OGmt6hTizBTWFlQiZVVHVA04Y3U.roa (hash: xCC8yaYb4MbRSmuBq04Jv3nbwpYcLxsiyEFiClMW7jI=)
2: PplTRJPLqcidveJi-HoVh6Sqmd8.crl (hash: 16loZ0oQ8T5J9dNiqyjJH1xP6f3HsVAkS3iviALCQxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:98:a1:50:6d:ea:31:03:e9:9c:59:fd:16:82:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Validity
Not Before: Sep 7 05:01:03 2025 GMT
Not After : Sep 8 05:01:03 2025 GMT
Subject: CN=ad16e3e412b2df7ac3c6d55b94a691df43bf21f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:66:12:5a:0d:7f:9d:d9:a8:e8:40:20:fe:
1d:d2:11:07:76:16:3b:0c:dc:e1:2e:db:75:49:9f:
44:36:6f:cf:f4:fd:a0:19:ca:59:30:c2:ea:57:5d:
53:5f:ea:a9:ca:67:04:8e:1d:8c:83:c9:5e:5e:de:
25:6d:1d:9d:06:ca:e3:b7:30:c0:22:e3:65:34:5f:
00:5a:06:80:4f:e2:3b:27:47:10:27:db:69:a4:28:
3f:b2:58:85:aa:e1:e9:bb:8e:75:45:c1:cf:0c:97:
27:3a:1a:d9:e0:a3:61:30:9f:75:e4:2f:5c:96:f8:
9c:37:04:7e:92:09:03:85:65:95:e6:1a:0b:6d:e2:
92:c7:b2:92:24:07:fc:29:bf:09:4d:e6:fb:b0:5b:
72:54:e3:77:6a:6d:3f:a9:c1:0d:bd:a1:30:ac:6c:
0a:cf:a0:18:18:56:32:60:d9:22:98:be:c4:5e:8d:
3d:6d:8b:02:02:2f:20:ec:21:3f:06:f3:d0:d6:a3:
e5:19:41:a5:b3:69:b3:f3:e8:d1:b0:c1:15:89:52:
09:6f:0f:10:2c:ee:f1:f3:ff:ce:77:e2:64:d4:0e:
d4:62:e9:69:93:f9:89:5f:f8:a5:20:ad:42:f2:db:
37:7e:97:68:00:82:ee:c5:3c:4c:b3:9b:35:30:1d:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:16:E3:E4:12:B2:DF:7A:C3:C6:D5:5B:94:A6:91:DF:43:BF:21:F4
X509v3 Authority Key Identifier:
keyid:3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:48:f1:ed:fe:f9:ef:fc:5a:c4:a7:4f:9c:dc:23:ee:af:2d:
96:f1:a9:55:44:dc:0d:7d:71:4e:ae:55:f2:23:7f:0f:de:0b:
5a:6e:28:2e:1c:e2:eb:62:c7:cf:71:2f:03:46:a4:00:ee:7c:
a2:8a:ee:76:51:92:cb:e7:46:17:09:6e:33:3b:74:d6:96:e0:
e2:0f:63:13:5e:d3:85:8d:ae:7d:d8:39:3e:93:30:d5:58:e9:
4f:2a:e7:64:44:95:57:fd:27:e5:26:e2:8f:09:1f:f3:94:8a:
86:43:b1:42:1d:17:e8:02:6b:45:b5:81:18:10:fd:ae:fc:fc:
02:89:71:b6:1a:f8:38:90:0e:9a:75:78:7c:c7:fa:d2:f9:f9:
28:ea:3b:ad:06:14:d3:41:e6:c2:72:6f:1e:6b:8c:ca:4f:e5:
be:4c:23:41:98:fa:0f:2a:cc:69:d8:8c:85:7a:5f:01:8f:65:
8f:23:da:22:8f:0c:7a:e4:7c:f4:03:6a:cf:e6:a9:b2:17:48:
85:ea:ee:5b:8c:9d:bb:a2:4b:60:08:5b:ef:74:0c:4c:f8:cd:
9f:d9:52:64:58:c4:07:0c:98:1a:57:72:a5:c1:4f:95:06:db:
04:5d:a5:c1:6b:bd:f8:ec:bd:09:cc:5b:d1:9c:c6:2f:10:29:
af:10:3a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:03 2025 by rpki-client