Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier: yXRUpHfJeIGIK6drVxdXiBSv+kkVnpkoxqE4vBNDTD0=
Subject key identifier: 8B:50:D6:5C:9D:9B:8E:D8:4D:D9:5A:41:68:87:3E:32:96:90:F3:83
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial: 019846D1F12D7917DD39CED7AA6687EA44BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number: 0201
Signing time: Sat 26 Jul 2025 13:00:20 +0000
Manifest this update: Sat 26 Jul 2025 13:00:20 +0000
Manifest next update: Sun 27 Jul 2025 13:00:20 +0000
Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: XFDa1RE7cfp39G5pbEtsUqG10rDya9oFXUkpYFdTP2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:f1:2d:79:17:dd:39:ce:d7:aa:66:87:ea:44:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Validity
Not Before: Jul 26 13:00:20 2025 GMT
Not After : Jul 27 13:00:20 2025 GMT
Subject: CN=8b50d65c9d9b8ed84dd95a4168873e329690f383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:31:15:dd:d8:67:6b:fe:26:a7:6c:6d:6f:
bc:2c:cb:b2:5d:63:2e:8a:53:5c:36:52:a9:b8:a3:
87:45:91:cf:dc:a0:f4:b0:8e:c1:37:b8:be:81:47:
28:27:0d:99:55:8c:88:4a:78:a7:1b:b8:80:03:8f:
4f:34:77:f3:2b:4f:fe:17:be:fd:54:35:e3:c7:35:
74:a7:e6:b3:91:69:2f:16:93:bb:c6:43:49:d9:eb:
e5:a1:d0:68:8d:16:f2:5c:91:fc:29:d0:36:30:8c:
96:78:d6:7b:cb:8b:c3:86:01:d4:eb:9b:85:1c:0b:
b0:15:d9:f6:fa:29:b7:50:5f:3f:e4:be:d8:6b:1d:
25:e7:21:84:85:21:64:09:45:90:43:49:c3:59:a4:
3d:58:cf:f0:b4:59:77:c6:16:02:b1:34:ec:6a:e1:
3a:94:0a:50:18:a6:62:66:e5:e9:a7:32:f5:26:a3:
36:9e:68:6d:d5:36:82:17:4b:ed:98:aa:0c:85:86:
5d:00:52:8f:bc:c7:77:df:83:a8:62:65:97:34:30:
01:d6:01:e8:c7:3d:96:b8:59:53:34:8f:b4:8f:ad:
21:fa:76:72:bb:64:05:c6:a5:27:08:1e:a1:63:12:
e2:9f:25:76:ae:a6:d2:19:5d:32:05:23:d4:b3:a7:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:50:D6:5C:9D:9B:8E:D8:4D:D9:5A:41:68:87:3E:32:96:90:F3:83
X509v3 Authority Key Identifier:
keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4b:70:85:a4:07:50:31:9a:8e:7d:b8:9a:36:2a:9f:a3:43:
33:66:9a:5b:cc:0b:04:04:43:3a:ad:f5:4d:d6:e5:b7:f8:0e:
14:b5:ce:b9:f5:3d:d1:f0:52:1a:37:85:75:96:b3:51:a5:b8:
69:08:3b:c8:4f:1b:ad:5d:f7:b8:9c:a7:db:57:32:b8:be:cc:
df:05:cf:db:c7:b1:19:9b:14:9b:c3:35:2c:79:c6:8a:74:bf:
4d:91:8a:de:a0:1a:ce:eb:79:ed:c4:b7:d0:8f:54:be:e4:9f:
0b:25:eb:29:8d:da:42:08:a3:a2:d7:ce:ad:5f:de:24:a9:1c:
4d:0b:2a:71:33:32:4f:a2:a2:34:33:76:14:bb:64:55:83:e3:
ad:69:7f:3b:d9:7a:19:f6:ec:61:b8:c6:47:a7:8d:3b:81:e4:
65:79:d2:f4:57:bf:92:ef:19:f7:54:e8:d4:43:ae:d1:62:21:
96:a1:74:58:bf:a4:a1:8a:9f:2e:05:fe:50:7c:5b:ef:3e:54:
7e:d3:6f:48:85:b4:2d:16:49:4d:f3:8c:c5:5c:ba:b5:1a:73:
7e:45:54:60:54:e7:78:d0:8f:c6:04:13:db:f8:48:9b:7e:e0:
28:bd:9f:dd:2c:79:05:df:42:6f:c6:85:cf:51:49:a9:25:55:
e2:95:45:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhG0fEteRfdOc7XqmaH6kS9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTk3MTE2N2Y5M2ZjMzRiM2JjNDc5YmIyMWZmNjJkM2Jm
M2M5ODQwHhcNMjUwNzI2MTMwMDIwWhcNMjUwNzI3MTMwMDIwWjAzMTEwLwYDVQQD
Eyg4YjUwZDY1YzlkOWI4ZWQ4NGRkOTVhNDE2ODg3M2UzMjk2OTBmMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybAxFd3YZ2v+JqdsbW+8LMuyXWMu
ilNcNlKpuKOHRZHP3KD0sI7BN7i+gUcoJw2ZVYyISninG7iAA49PNHfzK0/+F779
VDXjxzV0p+azkWkvFpO7xkNJ2evlodBojRbyXJH8KdA2MIyWeNZ7y4vDhgHU65uF
HAuwFdn2+im3UF8/5L7Yax0l5yGEhSFkCUWQQ0nDWaQ9WM/wtFl3xhYCsTTsauE6
lApQGKZiZuXppzL1JqM2nmht1TaCF0vtmKoMhYZdAFKPvMd334OoYmWXNDAB1gHo
xz2WuFlTNI+0j60h+nZyu2QFxqUnCB6hYxLinyV2rqbSGV0yBSPUs6cR9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItQ1lydm47YTdlaQWiHPjKWkPODMB8GA1UdIwQY
MBaAFN6ZcRZ/k/w0s7xHm7If9i0788mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BseEZuLVRfRFN6dkVlYnNoXzJMVHZ6eVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kOWJlNDAtY2Q0Mi00YTZjLTlkNGUt
MWRmYmQxZWZkNWQ0LzEvM3BseEZuLVRfRFN6dkVlYnNoXzJMVHZ6eVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9kOWJlNDAtY2Q0Mi00YTZjLTlkNGUtMWRmYmQxZWZkNWQ0
LzEvM3BseEZuLVRfRFN6dkVlYnNoXzJMVHZ6eVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUtwhaQH
UDGajn24mjYqn6NDM2aaW8wLBARDOq31Tdblt/gOFLXOufU90fBSGjeFdZazUaW4
aQg7yE8brV33uJyn21cyuL7M3wXP28exGZsUm8M1LHnGinS/TZGK3qAazut57cS3
0I9UvuSfCyXrKY3aQgijotfOrV/eJKkcTQsqcTMyT6KiNDN2FLtkVYPjrWl/O9l6
GfbsYbjGR6eNO4HkZXnS9Fe/ku8Z91To1EOu0WIhlqF0WL+koYqfLgX+UHxb7z5U
ftNvSIW0LRZJTfOMxVy6tRpzfkVUYFTneNCPxgQT2/hIm37gKL2f3Sx5Bd9Cb8aF
z1FJqSVV4pVFOg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:49:49 2025 by rpki-client