Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
File: Pl96BiMXb2x_xmVMATvzmcqQxXg.mft (raw, json)
Hash identifier: pSaEhgK7lgQ/h+0Z/Y9XFDW+zvfgaDHXUSC50rK+StI=
Subject key identifier: 45:5B:C5:A0:35:13:68:46:1F:C8:EA:04:7A:FF:92:37:64:45:5F:4C
Authority key identifier: 3E:5F:7A:06:23:17:6F:6C:7F:C6:65:4C:01:3B:F3:99:CA:90:C5:78
Certificate issuer: /CN=3e5f7a0623176f6c7fc6654c013bf399ca90c578
Certificate serial: 01992367C647CBE3B1504FB8FC6A66D1BC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
Manifest number: 19
Signing time: Sun 07 Sep 2025 09:00:27 +0000
Manifest this update: Sun 07 Sep 2025 09:00:27 +0000
Manifest next update: Mon 08 Sep 2025 09:00:27 +0000
Files and hashes: 1: Pl96BiMXb2x_xmVMATvzmcqQxXg.crl (hash: zdr+2FmGHZ+5ERAVASb9GB2I5YaPwtIj1IgWgSOHRuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:c6:47:cb:e3:b1:50:4f:b8:fc:6a:66:d1:bc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e5f7a0623176f6c7fc6654c013bf399ca90c578
Validity
Not Before: Sep 7 09:00:27 2025 GMT
Not After : Sep 8 09:00:27 2025 GMT
Subject: CN=455bc5a0351368461fc8ea047aff923764455f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:74:6e:3b:58:ad:bd:52:96:f6:8a:91:80:
41:5e:22:80:53:be:57:d0:5f:34:19:6b:3b:6a:19:
a8:e1:54:f8:00:d4:e4:b4:0d:e6:a9:76:87:e0:0d:
3d:74:88:e3:dd:1f:5a:ba:20:ff:4e:00:ee:cd:99:
54:43:87:f3:73:8d:29:05:65:0a:ef:9d:8f:85:87:
9b:9b:ef:98:97:10:65:1d:d7:ae:a0:f6:5c:89:9d:
26:70:1d:09:5c:9b:b6:45:7e:88:8e:f3:d1:6e:35:
dd:0b:d0:72:26:12:17:39:4b:10:d0:5c:ae:9b:6d:
50:a4:f0:af:0d:d7:76:ff:69:86:3f:0c:fc:66:85:
56:c2:27:66:9a:9b:9a:a5:51:89:ff:de:f6:6e:e5:
6a:ff:50:57:e8:ee:3e:f8:f6:24:b1:4e:9b:22:e8:
46:ef:a8:f8:42:3b:dc:9a:22:44:a0:3a:c6:4e:26:
78:71:03:e7:8b:c5:fe:b4:f6:38:f5:6c:93:6f:51:
9a:43:86:11:9c:0f:a0:3e:6c:d1:5b:df:52:f3:23:
33:e4:dc:39:d0:5b:39:79:ee:a5:6e:fb:a8:0a:40:
14:f6:ed:08:0c:43:1c:63:19:c2:ae:70:c2:68:c7:
a3:f9:15:55:4b:5b:9f:f2:76:89:d4:3d:04:ef:e0:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5B:C5:A0:35:13:68:46:1F:C8:EA:04:7A:FF:92:37:64:45:5F:4C
X509v3 Authority Key Identifier:
keyid:3E:5F:7A:06:23:17:6F:6C:7F:C6:65:4C:01:3B:F3:99:CA:90:C5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0b:58:13:6c:60:62:93:a5:73:e8:01:69:0a:b5:45:8c:4b:
19:c9:8e:8f:d8:55:76:d8:54:5e:98:17:ef:e2:43:a1:74:46:
4e:d4:86:14:91:11:5a:7a:98:b2:3a:b3:2b:db:f2:aa:ef:a1:
e7:96:0e:b6:ef:0a:46:1e:36:1f:49:7e:5d:87:c2:84:76:22:
77:c9:ec:65:95:a8:37:f5:be:65:21:b7:35:88:32:4a:3a:f9:
8c:3f:e5:70:49:1e:24:cc:94:12:73:1a:64:d5:05:21:68:6c:
60:37:60:83:be:f0:da:83:05:ca:93:b5:e5:6d:21:18:b5:90:
46:cb:ff:58:cc:6f:cf:bc:ca:24:0e:7a:07:20:53:b5:29:98:
d6:ac:9b:fc:00:0e:63:6e:71:63:56:30:69:f1:d3:43:77:4c:
9d:80:3f:47:bf:3c:f8:e4:66:68:d2:1a:06:eb:7a:4c:8a:df:
e7:09:6a:b1:95:03:7f:95:4c:7f:9f:bf:f3:f9:4d:aa:f4:d5:
ef:a3:f7:cb:fe:94:b2:a2:52:a7:9f:78:a1:de:ac:34:57:d7:
4c:bd:e6:77:75:b3:e0:73:ef:c2:7b:fa:bd:d3:bb:99:10:d7:
ae:2d:d1:f3:2d:2d:eb:6c:74:7e:a1:b1:0d:9c:8d:85:60:83:
44:08:d8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:03 2025 by rpki-client