Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier: cqr5PxBAP3biLIkzPq7tjj9GWAbwsyZ4GufP8kYbkfs=
Subject key identifier: F2:0F:EE:28:53:A4:7A:EA:CA:23:B0:6E:17:BD:FF:A6:1B:13:1D:4C
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 019922FA0D2B1EC7D1D980A66315EA23E412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number: 05BB
Signing time: Sun 07 Sep 2025 07:00:36 +0000
Manifest this update: Sun 07 Sep 2025 07:00:36 +0000
Manifest next update: Mon 08 Sep 2025 07:00:36 +0000
Files and hashes: 1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: yMuP2kmwGOJww5/Z2TcN6WKN67zRfr8qBGeYFwHoThc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:0d:2b:1e:c7:d1:d9:80:a6:63:15:ea:23:e4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: Sep 7 07:00:36 2025 GMT
Not After : Sep 8 07:00:36 2025 GMT
Subject: CN=f20fee2853a47aeaca23b06e17bdffa61b131d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:b9:4b:bb:fa:00:b4:c1:49:46:7e:a2:53:
59:91:3d:98:54:0f:06:d2:d5:6d:46:3b:27:f5:e5:
5b:e4:0b:c0:68:05:08:b0:ce:f9:8f:7f:64:76:7b:
e6:f2:57:b8:84:03:f6:23:c3:47:82:97:65:12:20:
bb:b5:78:a9:08:73:d4:af:b4:90:b6:4e:f0:6f:07:
12:c3:29:7f:63:aa:ea:1a:1d:ae:16:56:ab:ce:de:
61:26:7c:66:ca:8a:7e:02:50:e1:50:75:8b:86:bf:
cb:ec:0e:40:f8:0d:1f:fd:b1:12:13:a3:d4:9b:06:
17:0a:63:49:95:a2:f8:5a:4e:e9:82:ed:ae:7c:04:
d1:7e:e9:a6:2b:1e:f9:84:7f:03:a1:b8:f0:bd:e5:
f9:db:0d:b1:70:99:6a:0d:51:db:44:a0:a2:a7:2f:
09:29:44:71:65:bc:f6:0d:87:69:78:2e:5b:2a:a1:
66:be:40:fc:a2:a0:b7:d2:25:2c:59:1d:aa:3e:ca:
e3:f0:c9:0c:b2:ac:d3:04:c9:6e:56:d6:95:cc:d1:
cd:7b:aa:29:eb:9e:df:5c:a4:0f:73:24:3f:59:ca:
0b:5e:6a:27:b2:1c:92:ce:9d:c0:bb:fb:ab:1c:03:
b0:9f:e6:05:b2:9a:af:fe:98:11:db:6d:d8:ad:1c:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0F:EE:28:53:A4:7A:EA:CA:23:B0:6E:17:BD:FF:A6:1B:13:1D:4C
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:08:10:bc:c2:5e:88:69:f5:18:cf:f5:b3:bb:7d:30:e8:2f:
b9:8b:bb:c1:d7:75:15:06:85:e0:9e:27:31:d1:b5:74:34:69:
94:db:dd:4b:74:f9:53:bb:7e:ad:6d:e5:07:33:e7:63:b7:78:
69:7f:d4:c4:e0:dd:b6:01:30:9e:75:c1:bf:2e:f4:73:96:6a:
5a:b1:06:93:db:af:a4:9e:9d:a2:bd:d3:78:56:ee:5b:31:1b:
1a:3f:cc:d9:bd:80:8a:4d:d4:38:a8:ce:c5:a1:97:e3:d2:05:
ea:5b:59:b0:a1:d4:af:a1:04:8e:84:8a:e7:8d:e6:77:06:28:
43:11:88:b9:de:f1:80:1a:a4:0d:75:a0:b6:ef:6c:fd:3a:c2:
df:25:4d:f6:ed:38:46:c2:83:95:a7:03:cd:73:a9:b7:5c:5d:
a2:9e:c5:73:90:65:7d:35:3a:34:56:6a:02:1f:d4:b1:d1:22:
dc:67:d7:52:d9:26:aa:ad:1b:6b:df:9c:33:86:f6:4d:a3:7f:
bd:ac:7d:92:e2:6e:13:d2:6c:de:19:ae:8c:1f:5d:a6:f5:91:
00:18:2d:e1:d3:cd:da:83:42:25:60:1d:cd:45:41:aa:07:fa:
d1:4c:7c:0c:b7:73:04:1c:cb:52:69:87:9f:f5:7c:6b:23:9d:
08:44:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:54 2025 by rpki-client