Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier: SodN0iBSLlOAykSPqFIPF/lC0GqE8uW6+hAP8o9b8hM=
Subject key identifier: 5E:41:8B:EF:24:45:AE:4F:8F:16:B0:2D:6F:60:34:7E:CA:76:AD:6C
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial: 01989DB9892E0EC59BEACA5C31168C47EE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number: 022E
Signing time: Tue 12 Aug 2025 10:00:38 +0000
Manifest this update: Tue 12 Aug 2025 10:00:38 +0000
Manifest next update: Wed 13 Aug 2025 10:00:38 +0000
Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: ll4exVjEcb61NjHSu5aj1EMJJDE9+kECkRKIYW9Nhhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:b9:89:2e:0e:c5:9b:ea:ca:5c:31:16:8c:47:ee:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Validity
Not Before: Aug 12 10:00:38 2025 GMT
Not After : Aug 13 10:00:38 2025 GMT
Subject: CN=5e418bef2445ae4f8f16b02d6f60347eca76ad6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:a8:ca:3f:fa:37:8a:43:8f:26:c3:78:ef:
64:b6:5d:b6:a3:2e:84:49:8e:cd:06:cb:1d:f6:9f:
c9:0f:bf:ac:3f:8c:8e:6c:8c:14:f7:32:70:8d:5d:
24:74:db:22:e2:af:ba:1b:52:8b:f6:43:74:b3:71:
22:05:3f:dc:f4:99:da:32:f5:24:43:a8:94:f2:98:
48:9f:22:59:0a:a5:1d:e8:c7:ad:fd:e9:25:17:0e:
cb:ae:da:0b:3e:43:52:fb:65:7d:60:b1:67:32:e4:
fa:13:1a:80:63:6b:7e:13:d1:cc:19:97:f5:da:a6:
d4:35:8d:48:25:ac:13:b4:e4:a4:fe:cf:c2:9c:56:
53:6f:c1:f6:96:c5:ff:20:ee:59:03:8c:e3:a4:11:
64:11:0d:9d:08:8b:9b:f9:09:c0:95:ee:59:0d:09:
62:5e:fe:24:d6:6f:3e:11:4b:6e:23:96:ee:6b:60:
ce:ac:6a:b3:ce:d6:3f:77:2a:0c:a1:3e:f3:72:29:
b6:32:3f:b9:86:2e:8a:9b:fb:21:f6:d4:b0:1e:c9:
1e:4d:8b:07:46:2b:17:ef:67:61:e0:a6:36:e5:29:
f0:7d:77:0e:7d:c8:b4:48:ec:77:94:37:ee:3a:12:
45:a3:07:d3:8e:63:7c:0f:be:21:fb:34:65:79:3c:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:41:8B:EF:24:45:AE:4F:8F:16:B0:2D:6F:60:34:7E:CA:76:AD:6C
X509v3 Authority Key Identifier:
keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9e:23:52:92:00:9e:39:aa:18:f7:0b:50:d7:0d:d9:4e:e7:
ec:6b:95:7f:fd:28:88:47:1a:fe:5a:21:76:3f:73:3a:c3:b4:
7f:d1:47:8e:f2:3d:10:e5:09:23:7e:bf:42:be:7e:58:26:99:
07:f7:68:88:46:02:60:b7:57:8f:64:9c:dd:9d:b7:d8:05:59:
b4:b4:f5:af:de:32:0f:60:4c:da:18:ca:43:b1:49:66:a0:b7:
91:08:df:45:bb:a0:ca:3b:74:03:02:95:23:4c:b8:4c:4c:5c:
93:40:3d:da:8d:bf:f1:3f:36:b7:cd:0d:e9:9c:b2:4e:9b:74:
64:7c:0a:43:a1:52:6d:37:58:8b:51:7b:b1:21:6b:76:54:fc:
f9:1e:3e:d3:38:0c:af:2e:44:cb:2a:ca:a8:03:70:55:6b:4a:
33:63:a4:bd:2d:89:f1:36:b0:1a:90:95:90:e4:4b:c7:cd:47:
ee:e3:e7:8c:06:3a:15:2b:b4:47:18:fb:46:8e:95:a4:9b:3c:
cf:b5:72:49:00:6c:e3:80:78:1d:68:57:d9:0a:48:bb:31:3b:
2f:de:9b:f0:f2:ed:8d:55:7e:cc:06:be:f7:d9:21:7b:53:97:
97:fa:b2:bc:91:0e:35:11:ce:aa:bb:4e:9f:00:43:c4:36:14:
f6:96:63:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:43:46 2025 by rpki-client