Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
File: pPLix3U2Usd9u3nL4GmyurA_YN0.mft (raw, json)
Hash identifier: c9JEut6v1tUPGHEMYVGFsV+3qYdU57ENnygBEGz76nY=
Subject key identifier: 2D:D7:90:FA:0D:95:3F:99:EF:5B:9B:5B:FE:98:0E:44:16:0B:BA:A3
Authority key identifier: A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
Certificate issuer: /CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Certificate serial: 019A714A144D51C3444CB7A908E547579211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:01:11 +0000
Manifest this update: Tue 11 Nov 2025 05:01:11 +0000
Manifest next update: Wed 12 Nov 2025 05:01:11 +0000
Files and hashes: 1: GDxm2zcd8Lnhjk0mCi0fCSfcw18.roa (hash: 2s+mStFbGwTH5aRw2Ej0hEDuLtxVhcXn931+yvpJuwg=)
2: pPLix3U2Usd9u3nL4GmyurA_YN0.crl (hash: hfSpgE0CArPIsFlOk/WZPRxr3d/WQjYSAUv0B9OPVu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:14:4d:51:c3:44:4c:b7:a9:08:e5:47:57:92:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Validity
Not Before: Nov 11 05:01:11 2025 GMT
Not After : Nov 12 05:01:11 2025 GMT
Subject: CN=2dd790fa0d953f99ef5b9b5bfe980e44160bbaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:e8:cf:5b:f7:70:db:b1:91:d2:c5:7f:13:
3c:12:1d:10:44:34:a9:0f:d9:1e:e8:6d:3c:ee:15:
52:4c:7a:a5:cb:50:31:90:bf:fe:bf:5a:6d:df:d9:
c5:35:ec:73:10:ff:63:e9:77:63:75:63:73:6c:ca:
5c:af:ab:54:55:ba:7d:9b:21:24:ae:1b:04:15:3e:
90:9e:6a:6a:b7:8e:b7:dd:a7:08:4f:91:b7:ca:55:
52:a2:c9:50:49:20:b6:69:08:45:55:aa:0d:8f:9e:
9d:bd:e8:4a:c7:59:c8:2c:78:34:7c:17:98:76:d6:
85:29:b0:df:ef:68:19:a6:c5:35:bd:96:88:10:99:
1b:c7:19:de:7f:78:ed:bb:f0:38:29:2f:73:42:80:
e4:21:65:85:fa:e9:c5:f2:09:5e:41:7e:4b:11:08:
be:dd:7d:a6:1f:53:ac:49:8d:78:b7:53:74:4d:45:
1d:3e:7b:ff:c0:c9:27:c2:af:7f:2e:ca:5b:ed:d8:
04:60:1f:e5:f8:85:9d:7d:6c:c8:53:67:7d:55:29:
8c:3b:b6:d9:f9:d2:05:1e:a0:0b:4e:40:27:ae:32:
e7:b0:ce:d5:05:fa:00:7b:d9:94:32:12:80:ef:03:
3d:de:27:9a:85:12:fd:45:34:4d:8b:e7:09:87:c0:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D7:90:FA:0D:95:3F:99:EF:5B:9B:5B:FE:98:0E:44:16:0B:BA:A3
X509v3 Authority Key Identifier:
keyid:A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b2:c1:2c:f9:bc:06:68:72:48:31:4e:68:61:a3:dd:4c:83:
8c:7e:5b:59:ee:4c:48:02:ff:60:53:1e:f7:aa:9a:06:c7:28:
75:0d:c1:42:60:89:0f:19:af:87:03:21:b6:5c:ae:78:ea:af:
2a:62:0a:ca:f4:f9:e2:dd:38:36:4f:6c:84:f7:a4:35:0d:2d:
e4:3a:ed:37:ca:c1:04:ed:33:25:09:5a:3e:4b:51:cc:0f:9b:
9b:28:57:9e:ab:db:aa:26:e0:34:3d:0c:f8:03:fb:1a:3b:78:
02:fb:9a:46:b6:ac:fe:e0:a8:f3:37:ea:ff:49:c3:9a:22:bf:
41:58:43:ea:5f:7e:c2:5a:0c:b2:e8:d3:89:c1:ed:58:5f:7b:
31:fe:bc:01:d0:9e:01:03:f8:2b:1c:28:d7:59:b6:a8:11:cf:
72:c5:0a:4b:57:cf:0e:ae:12:dc:bd:b1:44:fb:9c:00:1c:99:
c1:c3:2a:69:ca:1b:b8:6a:1d:77:aa:6f:bd:34:cf:83:dd:2d:
5b:d8:15:9f:67:6c:2e:95:5b:37:86:d1:3e:5e:59:fa:e6:71:
f8:4f:6d:2c:18:6c:5a:8e:d6:0d:69:32:27:9a:4a:97:c2:43:
4c:21:6c:8c:be:6e:23:e8:53:27:ef:51:67:86:01:21:ad:58:
88:cf:69:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxShRNUcNETLepCOVHV5IRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjJlMmM3NzUzNjUyYzc3ZGJiNzljYmUwNjliMmJhYjAz
ZjYwZGQwHhcNMjUxMTExMDUwMTExWhcNMjUxMTEyMDUwMTExWjAzMTEwLwYDVQQD
EygyZGQ3OTBmYTBkOTUzZjk5ZWY1YjliNWJmZTk4MGU0NDE2MGJiYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqroz1v3cNuxkdLFfxM8Eh0QRDSp
D9ke6G087hVSTHqly1AxkL/+v1pt39nFNexzEP9j6XdjdWNzbMpcr6tUVbp9myEk
rhsEFT6Qnmpqt4633acIT5G3ylVSoslQSSC2aQhFVaoNj56dvehKx1nILHg0fBeY
dtaFKbDf72gZpsU1vZaIEJkbxxnef3jtu/A4KS9zQoDkIWWF+unF8gleQX5LEQi+
3X2mH1OsSY14t1N0TUUdPnv/wMknwq9/Lspb7dgEYB/l+IWdfWzIU2d9VSmMO7bZ
+dIFHqALTkAnrjLnsM7VBfoAe9mUMhKA7wM93ieahRL9RTRNi+cJh8D7cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3XkPoNlT+Z71ubW/6YDkQWC7qjMB8GA1UdIwQY
MBaAFKTy4sd1NlLHfbt5y+BpsrqwP2DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81ODA5YTUtYmJkYy00M2VhLTk0YzQt
OWQxYTJlMDkxMWI5LzEvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81ODA5YTUtYmJkYy00M2VhLTk0YzQtOWQxYTJlMDkxMWI5
LzEvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrLBLPm8
BmhySDFOaGGj3UyDjH5bWe5MSAL/YFMe96qaBscodQ3BQmCJDxmvhwMhtlyueOqv
KmIKyvT54t04Nk9shPekNQ0t5DrtN8rBBO0zJQlaPktRzA+bmyhXnqvbqibgND0M
+AP7Gjt4AvuaRras/uCo8zfq/0nDmiK/QVhD6l9+wloMsujTicHtWF97Mf68AdCe
AQP4Kxwo11m2qBHPcsUKS1fPDq4S3L2xRPucAByZwcMqacobuGodd6pvvTTPg90t
W9gVn2dsLpVbN4bRPl5Z+uZx+E9tLBhsWo7WDWkyJ5pKl8JDTCFsjL5uI+hTJ+9R
Z4YBIa1YiM9pEQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:45 2025 by rpki-client