Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
File: plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json)
Hash identifier: A3yPUzsdasd67CNQdDwKkL+SdjhWtmAYKL7pyDKeQX0=
Subject key identifier: 96:7F:FC:A3:EF:A2:86:0A:03:1B:69:1F:2A:A7:5F:F7:26:C0:C0:D0
Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
Certificate issuer: /CN=a656830499378698e3e6e6597993cd3b00e1dccc
Certificate serial: 01984B538AE027FC2FCDAA9D4B63425EE3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
Manifest number: 0AD9
Signing time: Sun 27 Jul 2025 10:00:22 +0000
Manifest this update: Sun 27 Jul 2025 10:00:22 +0000
Manifest next update: Mon 28 Jul 2025 10:00:22 +0000
Files and hashes: 1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: GIxqV+G8gufMZaNpzMdBqz1aXefJNrAU0JFLFyCrafE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:8a:e0:27:fc:2f:cd:aa:9d:4b:63:42:5e:e3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc
Validity
Not Before: Jul 27 10:00:22 2025 GMT
Not After : Jul 28 10:00:22 2025 GMT
Subject: CN=967ffca3efa2860a031b691f2aa75ff726c0c0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:fc:7a:b0:81:36:b3:a8:46:6d:4c:8a:ac:
39:43:79:44:d2:4c:93:4a:62:b7:bf:11:00:1a:86:
8a:11:4a:77:25:81:d8:20:14:f3:63:7c:4f:49:12:
a3:ef:ea:eb:07:49:28:f6:a4:d8:cb:ec:07:5d:ca:
0e:1f:65:0e:8b:0c:c6:6e:88:98:30:1b:51:03:2e:
fe:ca:4b:11:12:f5:39:94:8e:39:d3:0f:d8:c8:de:
3d:71:0d:a5:5f:93:48:d8:91:d2:f1:3d:56:9b:8f:
d8:51:0d:68:e6:b3:ef:fb:13:9d:82:0b:3f:26:3f:
32:55:4f:e7:e6:b7:5d:76:d7:c0:80:40:9c:2d:b9:
51:70:82:98:0e:28:30:f0:c5:da:87:39:10:69:4c:
44:f9:49:d2:5d:9d:42:8e:a1:91:df:b2:cf:97:74:
d8:3f:10:fe:f3:23:dc:63:03:ff:57:a7:46:35:96:
b4:2a:f5:32:3c:9a:10:87:ba:34:9f:86:ce:58:34:
85:ff:c3:dd:d6:b8:25:c2:ec:b7:5a:50:6f:75:34:
8a:13:e5:fc:c1:dc:14:44:09:9a:c9:39:8b:5c:19:
d5:a0:59:01:ca:9c:33:82:31:7b:78:a9:08:02:ab:
3b:45:bf:d5:5c:9f:ea:0e:6a:53:79:4e:52:63:14:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7F:FC:A3:EF:A2:86:0A:03:1B:69:1F:2A:A7:5F:F7:26:C0:C0:D0
X509v3 Authority Key Identifier:
keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b1:96:f4:04:dd:1a:0c:c6:72:28:9e:54:13:52:ed:f3:b5:
96:6c:dd:47:5f:6e:70:26:4d:23:ba:8e:d8:51:91:75:cb:f7:
50:11:ff:8a:5f:e9:a1:49:5e:b9:4b:61:bf:c1:0e:10:cd:c9:
29:d4:ad:11:35:66:f9:51:b4:29:72:fb:32:53:1f:ab:11:af:
3b:bb:73:51:e2:05:a4:3e:2c:b8:c6:9f:70:e1:ee:a5:47:c8:
53:99:6d:13:aa:fe:62:8b:fa:44:81:c3:a0:cb:4b:5e:28:5f:
44:17:14:e1:d5:99:d7:9a:97:eb:a2:4f:0a:a5:0b:da:27:21:
8d:27:6a:fc:8c:6d:15:56:1b:b5:11:3d:3c:36:30:b5:50:7d:
77:1d:4a:79:54:eb:26:38:b7:24:f1:3d:30:bb:9b:45:35:c7:
68:f4:16:ca:db:80:38:83:33:80:7b:a0:b6:5d:66:f6:33:bd:
56:e7:e6:05:cc:60:6d:87:80:cd:14:2c:63:e6:c9:7d:4d:60:
7f:0c:75:24:43:66:6d:ea:67:02:d1:d0:bd:6f:4e:bf:6c:e9:
ad:a5:76:05:17:2f:bd:2c:54:36:4d:ef:8f:fa:31:0a:61:97:
f1:61:ae:a8:e4:ec:ef:71:34:38:45:5c:36:71:3e:e5:4c:73:
6d:9a:57:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:50:25 2025 by rpki-client