Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier: cDiBbtplOhg5sWQUOKvbDrK2Rw9QYo1yeP0s5MzPPC4=
Subject key identifier: 04:4C:6E:60:A9:00:39:7B:DE:C5:B7:67:C8:6F:94:8C:B3:4C:D5:39
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial: 019A4E5007F7AAEBED34A924CDF739885572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number: 030E
Signing time: Tue 04 Nov 2025 10:00:59 +0000
Manifest this update: Tue 04 Nov 2025 10:00:59 +0000
Manifest next update: Wed 05 Nov 2025 10:00:59 +0000
Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: E07+D9iZ/Gk5lDwbo/S04+/0Rl3wFNV79xeJO/pDnyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:07:f7:aa:eb:ed:34:a9:24:cd:f7:39:88:55:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Validity
Not Before: Nov 4 10:00:59 2025 GMT
Not After : Nov 5 10:00:59 2025 GMT
Subject: CN=044c6e60a900397bdec5b767c86f948cb34cd539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:14:35:66:72:e8:47:70:32:60:0f:b1:0e:14:
af:f8:2d:48:f8:79:82:7e:ef:4f:0f:9e:72:f4:1f:
77:fa:6a:dd:86:be:08:cd:f6:87:9c:85:73:45:92:
8b:fb:db:4d:c0:7c:d7:45:75:aa:8e:da:ce:d5:bc:
1b:99:da:99:e6:2f:67:b0:41:ff:d2:4f:1e:2f:29:
bf:cc:59:a1:f0:18:78:b3:f5:fe:6d:1e:42:95:7c:
48:f6:8d:4e:bf:8d:c2:fe:fa:37:61:9f:0a:1b:bb:
dc:08:c4:00:07:d1:fe:71:2c:14:f1:bc:e6:9a:69:
4d:4d:ce:7d:08:c3:f0:40:cf:e9:4a:5e:6b:36:98:
07:17:4b:87:eb:44:51:ed:f5:4a:3f:30:b2:6d:ce:
ce:90:c0:0d:24:96:4f:07:15:e4:fb:98:22:95:c5:
09:e8:8f:da:d7:e9:08:2d:cc:7c:6a:4d:37:9f:0e:
78:34:7c:4b:e9:6f:17:85:f3:51:09:d3:35:24:41:
42:69:6f:5e:ed:6f:02:e6:c6:50:3b:95:47:10:b5:
55:47:6a:e9:24:bd:75:23:18:68:29:4c:45:74:2e:
4e:4f:d2:92:c1:da:69:57:6f:84:01:97:74:6b:70:
4e:a4:22:fe:a1:6d:b9:04:f2:9e:c1:b1:7f:92:7f:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4C:6E:60:A9:00:39:7B:DE:C5:B7:67:C8:6F:94:8C:B3:4C:D5:39
X509v3 Authority Key Identifier:
keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6e:7c:7d:93:c9:bf:57:0f:75:f3:ef:c1:e7:58:b1:be:23:
ce:be:eb:d6:a9:14:3f:7f:6e:4b:75:8f:a8:5e:68:a0:31:bd:
20:36:e2:09:e9:f9:ac:a7:d0:7b:b8:b0:60:f1:53:67:42:13:
a3:1c:6d:66:c3:cd:a3:3c:ef:37:5b:e8:d6:f0:1b:5f:e7:50:
c3:0f:57:b2:c6:d1:b9:96:77:d5:3e:6e:f6:df:f8:70:8b:57:
f1:a6:82:e0:c7:44:4c:e9:d7:52:c9:b9:9d:ed:40:dc:5c:4e:
0f:8b:7e:ac:92:b3:61:c1:0f:f2:6d:e5:ca:5d:a3:f0:9a:a9:
3a:a0:3f:8f:5d:22:0f:f4:04:7e:0b:48:fa:f1:37:38:0f:90:
b4:82:d0:b0:7c:74:52:29:a1:a1:20:01:8e:f3:61:7e:e4:04:
59:cc:1f:b6:25:2c:37:6f:bd:04:13:32:dd:b1:15:ae:4e:ed:
9b:2a:5e:cf:85:ab:cd:c1:4b:80:f6:94:7c:7e:95:a8:4d:ba:
d3:ed:f0:53:48:dc:3d:20:4c:0f:31:09:f5:53:61:87:9a:6b:
7d:00:e1:bc:c9:ad:3e:42:bc:5e:06:d4:95:d7:f3:a4:60:43:
bb:84:68:1d:38:2f:ff:15:39:b2:40:e1:22:cc:f5:6c:e8:b4:
af:d3:17:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:08:31 2025 by rpki-client