Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier: RfPfsZTWOiXDmA4kqYxfMX0S1dB5+ID97AaGzae5Mv0=
Subject key identifier: CE:43:15:51:EF:3B:4F:8D:C3:95:53:1B:9C:A1:42:32:06:DB:70:34
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 019768BC054B78990958A1D5DC2CBE220FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number: 04D6
Signing time: Fri 13 Jun 2025 10:00:41 +0000
Manifest this update: Fri 13 Jun 2025 10:00:41 +0000
Manifest next update: Sat 14 Jun 2025 10:00:41 +0000
Files and hashes: 1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: jM8PTSV18LipwhQH6qI3aGMm3fA5dFAljgzRHS7+9xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:05:4b:78:99:09:58:a1:d5:dc:2c:be:22:0f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: Jun 13 10:00:41 2025 GMT
Not After : Jun 14 10:00:41 2025 GMT
Subject: CN=ce431551ef3b4f8dc395531b9ca1423206db7034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:52:2c:57:e7:7a:1c:db:05:02:9e:40:52:
16:87:7b:62:3a:cd:70:d2:72:25:d1:b1:46:1e:e9:
b8:a7:2e:d3:b3:2b:ad:30:40:64:6d:0e:85:ef:65:
1e:0f:b0:b6:9d:93:73:a9:9e:a8:95:2a:15:77:f4:
c0:6e:f9:29:12:58:1f:a7:d9:9f:b0:9c:6a:82:5e:
c1:9d:90:7b:8a:0e:f1:a9:91:56:f9:32:8d:66:9e:
61:ff:5f:88:5a:3a:12:7d:58:4c:d1:75:b9:e1:7a:
b9:7b:eb:e8:f3:9c:0a:70:a4:a7:55:01:b9:0a:2a:
ce:24:f8:a7:d5:bc:29:cc:1f:c6:3f:89:cb:2d:f9:
a9:f0:51:d5:0f:3d:dd:d3:cf:10:d1:13:01:61:ac:
d9:5a:a4:09:f2:64:6b:ab:b2:b2:74:e4:aa:bf:c9:
08:6f:a3:2d:a5:12:e2:ff:2b:dd:28:13:0b:11:14:
b3:39:2b:20:53:8b:ae:ac:e5:72:5a:15:16:49:1e:
41:56:9b:2f:8b:66:b7:24:b5:21:9f:7e:73:50:82:
d7:1d:37:43:ac:bf:28:d8:1e:41:15:46:81:b5:19:
d4:8a:b3:c5:53:5a:dd:b7:32:42:b2:77:4a:fc:5a:
23:6d:3f:c4:a4:aa:f7:e2:95:a2:9d:f0:e0:be:d7:
76:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:43:15:51:EF:3B:4F:8D:C3:95:53:1B:9C:A1:42:32:06:DB:70:34
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ae:e7:96:db:9e:7b:a4:5a:8d:00:26:65:b2:e1:94:85:cb:
ca:fc:55:03:44:42:93:53:ef:18:c6:1b:fe:0d:ff:52:56:69:
d0:3a:06:ad:8e:6e:02:97:ab:98:d1:72:60:59:b9:32:56:8b:
06:85:49:fb:39:10:f9:b4:c3:2c:15:8f:2c:1f:cd:0a:31:11:
aa:1e:15:29:5b:62:47:ca:c4:7b:8e:80:27:39:28:1d:da:56:
14:7f:9d:55:67:c1:07:20:11:3f:d0:91:9c:0c:9e:e4:ac:1c:
b1:c5:d8:8a:a7:ad:86:f9:33:af:22:ee:d7:07:ef:83:c2:7d:
50:45:65:01:5a:cb:c3:25:c9:bf:34:a0:d3:6e:40:64:93:e2:
7e:57:0c:ee:46:b7:40:d3:4d:a3:03:07:3b:66:7d:b6:63:ea:
27:e1:48:c8:f2:24:80:2a:4e:72:2b:8a:65:d9:c6:34:13:94:
80:c4:8a:be:74:24:5c:6c:fb:e5:a1:1a:08:a9:d1:a4:43:6d:
0d:c4:2e:80:34:85:91:00:58:56:51:ef:e9:e6:4d:56:12:78:
0b:05:56:59:40:8c:51:1a:14:33:4f:a2:ab:1d:2a:0b:38:6a:
5c:bd:06:bd:9d:9b:e4:e9:e0:a4:b7:0a:23:da:d1:03:e6:13:
03:26:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:07 2025 by rpki-client