Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
File: pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json)
Hash identifier: xY1JRc86B76eYV8vc2VtuxUHJBZfvzBwF2M68usF/cY=
Subject key identifier: 0C:61:0A:26:EC:29:5E:4A:14:FF:2C:99:EB:9B:FF:4E:74:E4:0E:AE
Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
Certificate issuer: /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Certificate serial: 019935001FBBDF4DBB701C4223E0C9529B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
Manifest number: 03E4
Signing time: Wed 10 Sep 2025 19:00:24 +0000
Manifest this update: Wed 10 Sep 2025 19:00:24 +0000
Manifest next update: Thu 11 Sep 2025 19:00:24 +0000
Files and hashes: 1: dz9PyU4ctyXKZ49cHOyHFCLYwcU.roa (hash: 3Y8oozkK4fYw8w+acos4s7WtEJkSyImOIymISL/lshA=)
2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: TRbLOV9cSFFZ5/51O0f56YDRcgGtED3QwVq1QEkfVTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:1f:bb:df:4d:bb:70:1c:42:23:e0:c9:52:9b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Validity
Not Before: Sep 10 19:00:24 2025 GMT
Not After : Sep 11 19:00:24 2025 GMT
Subject: CN=0c610a26ec295e4a14ff2c99eb9bff4e74e40eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:68:e8:49:e6:62:00:6a:8f:89:fe:96:94:
ef:3d:f0:e9:c3:76:72:12:33:b6:24:81:64:b1:46:
25:72:b5:1b:7f:86:71:ad:f7:d7:4b:12:a5:71:6c:
bc:6d:a6:79:f1:20:6f:79:30:1f:20:eb:2b:d0:5d:
07:65:17:88:bb:00:7f:51:c2:32:6c:2b:e5:36:e9:
b5:c5:29:01:e4:d1:a3:1a:23:2b:84:ae:b3:18:11:
dd:34:01:59:20:e9:07:77:fc:16:a8:83:65:dc:6d:
47:e0:9e:bb:92:1d:19:f0:c7:4c:04:3a:e7:4c:b7:
38:7f:04:af:31:98:09:1d:d5:a3:78:53:00:c9:21:
10:f8:e2:f0:ff:09:07:ce:45:67:fa:90:3a:ba:0b:
67:01:b6:01:74:83:37:01:74:c2:fe:d8:1e:ba:10:
a6:ff:ec:95:83:b0:8c:ad:d1:29:29:a4:fe:d6:b9:
87:a4:84:ff:88:11:54:05:f9:6d:5c:a9:c0:fc:aa:
88:fe:5b:7e:0b:a6:4d:91:48:24:aa:eb:6e:06:38:
a2:06:e4:7a:56:a2:a5:9f:d2:17:4f:ab:27:92:76:
2c:2d:06:9a:d9:1c:cd:23:9f:fa:e9:4c:ae:e4:e0:
a4:5e:48:c3:24:fa:ea:cd:b0:2c:56:03:40:b7:66:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:61:0A:26:EC:29:5E:4A:14:FF:2C:99:EB:9B:FF:4E:74:E4:0E:AE
X509v3 Authority Key Identifier:
keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2a:74:5c:57:1f:24:d4:40:b6:ff:20:2a:e0:70:25:bb:c5:
e2:72:4b:60:3d:d3:cf:50:c0:87:da:9c:69:10:24:12:5c:91:
67:76:af:86:87:c7:3f:e1:39:3d:6e:04:63:f8:d8:76:03:b6:
8a:f0:2e:1a:e8:05:50:8c:e9:76:e1:6a:7b:cd:28:32:6b:52:
b5:58:fe:d6:e2:18:80:47:18:83:5b:5e:9e:97:34:d0:ab:bc:
30:aa:1f:5e:93:63:4d:af:c9:cc:91:e7:0b:d2:46:de:0b:d5:
59:8c:48:24:10:2c:eb:92:8d:42:6b:57:e2:c1:26:c1:2d:1c:
78:4c:0d:fa:5a:ba:f2:71:b6:e9:39:98:cf:93:50:c5:19:85:
f8:62:0a:dd:36:c2:94:d4:c9:a9:b9:07:1f:ab:7e:43:28:b7:
a9:68:e5:bf:ed:81:4d:03:1c:cd:f9:c6:f7:07:21:eb:b1:eb:
bc:67:fd:a5:86:0b:3d:bf:20:55:6b:3c:d4:3e:50:4e:8d:72:
f3:a2:a3:16:a6:3f:e4:df:96:a8:32:c0:f6:7c:2a:30:48:6d:
55:1c:e9:87:47:b4:bc:ab:67:b0:af:9c:bc:cb:5d:80:74:e1:
4f:20:9b:f3:e9:28:fa:41:14:c8:4f:3e:9f:5c:72:8b:c2:eb:
4b:45:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:17:06 2025 by rpki-client