Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: uVjh00IyJcv0TmYWt35ArT2dhgE7wvVlT68EeFec+IQ=
Subject key identifier: 87:3B:60:0C:B0:B2:7C:2F:0F:BF:EF:29:DC:05:FA:05:B4:C0:0C:29
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019A13F1C95E22F2EEB3C8758A8E2AADF48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 129D
Signing time: Fri 24 Oct 2025 02:00:03 +0000
Manifest this update: Fri 24 Oct 2025 02:00:03 +0000
Manifest next update: Sat 25 Oct 2025 02:00:03 +0000
Files and hashes: 1: 7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa (hash: sSokJSwDE7TenrNiAqYNMhbgz0iCXtyPGRTOZYronAY=)
2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: RoP1uJo2nnIZHxNHHqUIo29Kqku4mTswrCvm98Vu+ac=)
3: trffbMiTH6DrGuiy0X3enBvY_Oo.roa (hash: o0rF0YmxKHHBrS/g1LKn0ZhHqi9U3j4NE3U+lGfKC3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:f1:c9:5e:22:f2:ee:b3:c8:75:8a:8e:2a:ad:f4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Oct 24 02:00:03 2025 GMT
Not After : Oct 25 02:00:03 2025 GMT
Subject: CN=873b600cb0b27c2f0fbfef29dc05fa05b4c00c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:d9:88:38:d7:bc:83:f7:28:82:0f:04:e6:
eb:87:7e:43:74:55:87:20:2e:58:c4:a8:55:6a:c3:
f8:20:e7:f7:78:cc:0b:4a:c0:71:87:09:b0:55:d1:
9f:29:e8:88:58:73:bb:b7:ff:b0:75:cb:79:16:7b:
e9:53:cb:59:dc:96:87:c8:e0:12:b2:d1:0e:31:e5:
6e:28:5b:8d:ea:9f:99:c5:56:77:9f:bb:1f:ab:fb:
40:fc:c0:69:0e:62:0d:f9:91:45:b8:83:bc:70:db:
41:ce:b9:8e:88:34:4f:09:a9:0e:c9:16:d2:b3:b4:
33:8a:33:45:39:79:76:7a:4a:1c:43:c3:67:b5:30:
85:4a:c9:38:12:34:46:97:d4:e3:d7:04:49:9c:dc:
0c:8e:c6:eb:2e:e6:a3:02:af:51:91:2e:34:2e:e4:
d1:d6:fc:f8:3c:9a:13:46:25:9f:f5:9f:ba:78:63:
16:96:41:d7:a8:ff:2f:b9:8b:bc:cc:4d:0c:e1:e1:
68:38:3a:bf:a5:59:64:d0:21:ff:d5:e8:f3:2a:fa:
59:66:21:69:66:6b:9d:42:be:8d:58:85:96:f9:14:
18:99:0d:43:e3:eb:8d:ff:fa:7d:0a:ae:d5:7a:e8:
d8:cd:2e:95:04:91:76:df:a0:a3:6c:f2:6c:39:43:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3B:60:0C:B0:B2:7C:2F:0F:BF:EF:29:DC:05:FA:05:B4:C0:0C:29
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c6:dc:de:cb:6a:69:b3:9a:29:b2:ee:25:24:27:87:ab:b3:
10:4f:d2:72:11:cb:c0:37:aa:ad:82:31:11:0a:23:0e:8f:d5:
0a:b2:90:a0:ba:65:77:bf:ee:85:9f:91:d2:b4:d8:60:98:80:
68:6a:a0:0e:e3:3f:18:7a:c8:62:76:65:27:3c:b7:61:d4:f8:
9b:4c:77:6a:98:6d:29:cc:7d:e8:9f:bc:66:d5:50:f6:55:f9:
75:18:41:a6:d6:ac:e6:63:4e:12:89:a5:0c:02:57:22:00:6a:
5b:aa:a3:c9:a6:ca:a0:48:63:34:61:a4:47:54:7b:75:be:b1:
46:61:dd:29:ea:7b:47:8a:a7:e9:bf:ee:fb:7c:8a:de:ab:52:
90:08:fc:dd:b1:f3:53:18:b3:2d:7e:bc:4d:29:5a:31:25:40:
5d:31:b9:d2:75:72:13:a6:cb:93:71:24:e8:b1:60:25:59:4b:
ec:4a:4e:80:48:1c:52:d2:64:a4:e7:ae:31:59:47:3b:6d:fb:
10:3e:01:f1:e1:4a:5b:b6:1b:14:35:5b:8f:c0:73:0c:46:dc:
bd:db:af:7c:d4:d1:60:b4:f7:4c:1a:7d:d6:f0:c7:bb:de:67:
fc:d6:da:7b:b5:a2:38:8b:0d:48:ef:f1:d8:c5:f1:6f:e6:49:
d0:89:25:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:09:56 2025 by rpki-client