Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
File: pLZdoXU_tO7tuG_ah906-mnYYtA.mft (raw, json)
Hash identifier: W9XA3YaBm3scXKqeooeNq3TKqqDnYO3JFfPIQLd6S4E=
Subject key identifier: 50:26:67:16:CE:59:88:BB:E8:75:4C:BF:97:2B:DC:33:6E:B7:B6:AD
Authority key identifier: A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
Certificate issuer: /CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Certificate serial: 019A71B8D022B9F336267E711FCE1F4B97A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
Manifest number: 0A99
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: 9VAtH6rT9AmgMjM5y2MsDg-1uuk.roa (hash: wQrCWKGL3Sn9wGoFnk6i9VJ1UdYXoGTZv1+i2lw0LfY=)
2: pLZdoXU_tO7tuG_ah906-mnYYtA.crl (hash: hauuWDRnqEzqnEvQtwTxSPhB7qk0lpzFOvG2e0g/viQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d0:22:b9:f3:36:26:7e:71:1f:ce:1f:4b:97:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=50266716ce5988bbe8754cbf972bdc336eb7b6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:c8:bb:4b:c8:53:ca:64:cb:bf:8b:5c:1b:
7c:ee:7f:94:72:eb:9d:bc:c2:d2:cb:cb:bb:ed:61:
a0:65:a0:80:3d:df:9a:2f:75:e7:2f:cf:f2:80:fa:
83:e9:31:a1:6f:23:f9:49:40:ba:b9:36:12:b4:23:
e0:10:91:4b:69:99:0d:66:aa:17:77:16:03:6e:b8:
75:bb:46:9e:84:19:09:97:19:7c:4e:5c:7c:73:12:
70:dc:46:3b:7e:3d:79:c0:d5:39:86:ac:86:71:7d:
c0:89:56:2e:06:a4:d5:34:2f:ad:6d:3a:81:e6:7e:
5a:90:1d:96:6e:cf:8d:f1:28:76:07:3e:c0:76:3d:
35:6f:fc:50:3b:79:52:13:13:0a:b2:13:4a:23:b9:
e4:fa:b5:0b:86:8d:94:a5:3e:96:06:ee:34:10:06:
01:d5:1d:82:09:ba:92:23:03:00:8e:a6:bb:b1:00:
6b:02:bf:2d:b4:4d:1d:45:69:bf:3a:53:e5:56:24:
e9:ac:b3:9b:9e:6a:0d:8e:8d:30:e2:d9:69:3b:14:
56:9d:88:51:5a:cb:2e:93:0f:48:41:e9:6a:5f:61:
a3:d4:ea:0c:88:9c:cf:a9:fb:6a:77:40:cb:2f:56:
28:e8:15:70:98:49:65:0f:31:15:a2:3a:87:01:09:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:26:67:16:CE:59:88:BB:E8:75:4C:BF:97:2B:DC:33:6E:B7:B6:AD
X509v3 Authority Key Identifier:
keyid:A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1a:b5:a5:06:c5:d8:b8:e4:a8:57:23:83:42:24:20:21:31:
cd:b0:d0:76:e5:93:b1:d6:12:39:ff:59:f3:51:e1:17:dd:5a:
9b:47:65:de:17:74:74:55:14:a7:c2:a1:5b:08:4b:98:bd:21:
12:62:ec:a3:70:38:f2:bc:64:19:e3:4f:9e:9a:4e:83:71:3d:
20:90:29:59:45:2b:c9:5f:48:78:59:ec:68:e9:96:ef:42:29:
64:47:41:dc:d7:9c:aa:62:d9:5e:32:80:67:2e:e6:fd:01:2b:
18:2d:66:1b:60:08:89:9d:e7:6c:6f:40:2a:ec:79:6e:91:e2:
9d:f1:86:8f:de:84:fe:42:b4:d7:b0:0c:33:49:df:bf:a6:a1:
c9:83:db:91:3d:4b:93:dd:33:38:c3:2b:ad:45:4e:ee:bc:f2:
fb:59:e1:4a:c0:37:aa:23:57:37:c7:95:a3:e4:6e:27:16:97:
7f:0b:9c:51:d9:8e:5b:5d:51:9c:86:52:de:78:2e:c2:66:02:
31:07:25:ca:da:98:1e:a9:f8:f4:4c:0a:77:e0:10:0f:d0:27:
e5:6d:e8:6f:db:b8:fa:40:3a:c3:7c:73:7b:2a:35:08:a4:5a:
ae:95:de:bc:b1:7c:d2:b3:08:5f:87:f2:c5:f4:06:3d:89:30:
29:7d:42:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:32 2025 by rpki-client