Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
File: plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json)
Hash identifier: 2mr2ZFKPs5VYShsZxEvPKrGJ5SQ/xbxd9Qff6VkWdOs=
Subject key identifier: 21:23:AE:8A:91:8C:04:66:F6:3F:46:95:FB:7A:D1:F5:38:5C:6B:93
Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
Certificate issuer: /CN=a656830499378698e3e6e6597993cd3b00e1dccc
Certificate serial: 019A71B8D48930B09830332D6A3A34C73E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
Manifest number: 0BF6
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: ObB/S1bj/zSwlWa81kA+IPvxn8QSfceqPMN0ZlgAwEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d4:89:30:b0:98:30:33:2d:6a:3a:34:c7:3e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=2123ae8a918c0466f63f4695fb7ad1f5385c6b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:10:f0:4c:d0:2f:45:f0:ec:f1:6c:26:0d:
6f:96:e4:90:d2:7f:03:b9:71:2e:88:7b:ac:ba:20:
a7:64:1a:50:fd:6c:e0:42:8d:86:a7:26:b6:2a:a3:
9f:74:ce:d2:85:15:04:95:9d:5d:64:04:f5:65:c9:
08:43:d4:b2:0e:40:60:dd:58:f3:84:62:90:7b:2f:
6b:fe:63:86:1a:62:59:30:82:40:1a:b8:ea:b0:e8:
c7:32:14:02:36:22:71:a5:5a:02:3b:12:68:de:e6:
b8:f3:b2:06:d2:31:b2:0e:58:13:71:1d:6c:2b:77:
5e:1e:f3:6f:8b:7f:4c:76:92:bb:5d:59:4f:84:ba:
08:85:b3:55:8d:66:ab:87:c9:ac:45:ba:7f:1a:0d:
e3:c2:dc:f0:8f:87:ea:57:14:14:dc:01:70:63:07:
d0:ea:f7:89:9b:1a:e5:31:9e:64:35:1f:d4:58:ea:
a8:7e:28:40:d8:5b:38:16:c8:03:9c:61:e4:fa:c1:
a4:55:1f:eb:f7:39:c9:82:e1:84:56:1d:fd:16:87:
87:0c:91:ad:22:8e:54:6a:55:94:4b:4f:3b:00:9e:
10:0d:be:c3:13:03:96:07:72:5c:73:24:61:74:39:
29:82:c9:76:2d:b5:d2:6d:1a:42:c7:2a:7d:c4:eb:
10:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:23:AE:8A:91:8C:04:66:F6:3F:46:95:FB:7A:D1:F5:38:5C:6B:93
X509v3 Authority Key Identifier:
keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:98:8d:cc:60:e4:e5:59:eb:0b:e9:62:a3:9d:a3:ff:4f:05:
10:1c:a7:6f:e3:5c:fa:ee:28:8b:0b:e0:e4:6e:7b:4f:78:0c:
7f:07:a0:81:4c:ad:c9:1f:f4:8b:92:af:af:dc:eb:e6:63:83:
cd:4a:fd:f6:79:26:39:b2:6d:59:04:3e:68:29:ce:c9:5a:b0:
bb:29:88:83:5f:f6:ab:1e:75:9f:2e:b1:27:d3:d2:14:7b:32:
9f:30:2a:15:f5:d2:e9:0e:08:84:bc:00:84:c6:a7:83:9d:37:
4a:0d:bf:d6:55:b8:c8:dd:89:18:08:d0:2c:85:a4:36:7c:6c:
09:82:03:49:24:4a:6e:41:5e:b8:27:35:0f:b1:ee:a9:c8:f9:
32:08:6a:ad:80:b6:a7:f1:98:56:ab:da:cd:a8:40:e8:f8:a5:
63:e5:28:97:fb:1b:d4:8a:63:da:ed:e4:5b:2f:61:15:10:04:
56:c3:e8:83:46:71:21:38:e3:05:a2:df:20:07:c7:f8:21:41:
2f:db:c8:39:5a:ab:ab:9e:5b:4f:3c:ad:45:c9:4c:ca:cd:b6:
d6:9d:73:7c:af:3e:e8:1d:74:3f:f9:6b:47:52:ce:41:bf:db:
93:17:bb:40:67:b5:31:2b:00:f0:fd:d6:c3:6a:f9:c0:1d:0e:
2c:0a:ed:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:40 2025 by rpki-client