Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File: PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier: wx+v7VcHG2a9w3h1gmc3HlOH4cRC4deRybfEmsIoeSo=
Subject key identifier: 60:EC:CF:52:71:56:C7:E3:1A:4D:F4:85:83:A0:14:BF:91:78:33:F5
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer: /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial: 019A71130F779CE515C7C350215BA0E7C8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:01:05 +0000
Manifest this update: Tue 11 Nov 2025 04:01:05 +0000
Manifest next update: Wed 12 Nov 2025 04:01:05 +0000
Files and hashes: 1: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: 03nO7RQYC0Wsot+GSLe1Sym2uRfUr+EglRjWagtjs0o=)
2: _Y1GXKJ5A67loqKl1i2V9S3MWKg.roa (hash: V3o7sWDlYKkS4Nqv4VMpbKGi6d6rMWmkClDxQRZCgxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:0f:77:9c:e5:15:c7:c3:50:21:5b:a0:e7:c8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Validity
Not Before: Nov 11 04:01:05 2025 GMT
Not After : Nov 12 04:01:05 2025 GMT
Subject: CN=60eccf527156c7e31a4df48583a014bf917833f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:b5:5c:5c:30:d6:39:e6:d1:e3:34:dc:84:
23:0f:6d:c8:f1:a4:93:27:5b:84:5a:5b:9d:98:8d:
c2:2a:38:d9:d3:ba:fa:4b:93:94:5f:15:a1:b4:01:
3b:48:af:c2:b6:23:f2:6d:22:5c:21:8b:10:33:4a:
89:f0:c6:ab:b3:43:0f:0e:b1:7e:8d:27:3f:b5:1a:
8c:41:30:b2:a9:f2:68:12:e9:c6:89:35:ba:e1:e1:
cb:46:5f:8e:e1:59:90:1a:f6:ee:a8:61:33:c4:51:
43:ed:74:2a:43:64:d3:40:18:d7:5a:87:9b:c2:56:
5a:f8:d7:42:85:75:3f:9e:34:7f:29:44:99:6e:91:
b4:87:9a:0a:d3:f8:34:3e:eb:8d:f8:9f:27:1f:3e:
9b:5e:8c:09:0c:f0:94:7e:8e:30:f3:5d:d5:a6:44:
56:d1:4b:b1:4d:34:21:5e:9f:9e:99:af:55:1d:93:
21:3e:88:c1:44:34:9d:94:7b:e4:4f:b3:31:cb:31:
dc:26:d4:18:ad:7a:80:ec:ab:bf:c8:f6:d2:ab:1b:
66:b5:81:2a:6d:7f:59:76:6d:0d:0e:21:8b:38:f7:
d2:5f:d7:4b:50:ac:46:6c:a6:84:3f:23:e1:45:18:
40:41:fa:03:95:97:17:f8:88:61:4d:85:d5:97:a4:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EC:CF:52:71:56:C7:E3:1A:4D:F4:85:83:A0:14:BF:91:78:33:F5
X509v3 Authority Key Identifier:
keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:29:77:db:cf:a2:12:17:83:5e:09:4d:a3:cf:6f:4f:c6:63:
f6:26:56:8a:66:f8:97:55:eb:a6:6c:24:71:75:79:e1:0a:81:
04:d5:0f:b8:1d:db:2f:13:ca:e4:2a:59:a7:46:e8:e6:2f:da:
60:a9:d1:36:3b:4a:19:06:81:e9:bc:b3:89:fd:75:d5:1b:9f:
2f:ea:be:24:d3:06:99:27:4c:e5:2e:e2:6d:b4:cf:7c:c7:04:
16:49:ce:ad:c1:8e:b9:a7:1a:e2:43:39:73:44:c1:25:ce:71:
d9:67:87:2f:cc:b0:32:8f:f1:8f:a6:ac:61:7c:15:5b:dd:5c:
57:80:24:5c:12:c4:af:5d:85:e7:ef:d9:cd:8f:91:56:48:1f:
b5:eb:9c:4d:b8:de:ed:56:3b:46:d4:a8:96:37:76:db:e2:87:
d5:ee:7b:5f:ed:27:11:a8:c3:61:a9:fd:fc:d9:c9:e5:86:bf:
31:2b:18:9c:f4:6c:77:cc:a1:72:bb:bb:52:38:e1:f8:9b:dd:
b5:e2:07:0f:61:b6:8e:88:e1:71:d6:a1:09:12:df:d7:ee:30:
2b:21:cb:7d:43:81:7b:aa:14:71:69:c7:0b:e8:8f:c1:7b:5f:
50:63:65:bb:18:0b:f3:43:34:a5:b3:fe:43:87:34:2a:0c:1d:
de:93:d9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:21 2025 by rpki-client