Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier: CLuyliBKoOD+ix0xSCSFDkLtdOxtbZojvlAPK3bHdhE=
Subject key identifier: EE:A3:CF:A3:7F:7A:28:D9:79:1C:61:45:57:1A:C3:44:F0:46:50:7B
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 019A4E4FCC3DF86100213713FE98A6613410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number: 0656
Signing time: Tue 04 Nov 2025 10:00:43 +0000
Manifest this update: Tue 04 Nov 2025 10:00:43 +0000
Manifest next update: Wed 05 Nov 2025 10:00:43 +0000
Files and hashes: 1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: r9ILz0MMrrrAIx+OerJXkycMiS85hyF7ZvFoU3QajfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:cc:3d:f8:61:00:21:37:13:fe:98:a6:61:34:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: Nov 4 10:00:43 2025 GMT
Not After : Nov 5 10:00:43 2025 GMT
Subject: CN=eea3cfa37f7a28d9791c6145571ac344f046507b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:48:10:d4:d4:fe:13:8a:94:16:36:d2:0b:
6e:10:4c:37:ee:d9:ab:79:6b:de:32:52:c4:7c:5a:
50:61:f8:0b:18:95:85:8f:18:47:91:a1:9e:30:e0:
98:e2:90:e9:72:82:f9:a2:fa:11:77:1a:4e:37:72:
31:2d:4c:09:2a:03:ff:da:20:e1:7e:56:42:25:59:
81:b4:78:b1:32:99:25:67:82:46:7f:48:6a:5a:68:
a7:b2:b3:9d:5e:c6:ae:e3:1d:56:3b:14:8b:14:cd:
20:cc:e0:b2:6b:20:62:51:b7:fe:7d:f6:94:f0:94:
b7:8c:f7:69:62:83:6e:b2:9e:ed:b1:87:cc:5c:70:
2a:af:69:d3:f3:af:b9:c3:02:92:6e:a1:0f:54:aa:
f7:fe:09:9f:9a:29:fd:3b:92:bf:91:c4:25:29:76:
31:07:47:13:d0:db:f0:7f:77:1f:3f:cb:94:9a:69:
4e:76:82:e0:f8:08:bd:9c:97:a2:c7:74:5f:82:17:
51:62:0c:a7:de:4f:ff:4c:99:8b:c7:83:7c:d3:22:
0f:f6:f6:3e:3a:ec:70:8a:62:c9:74:16:63:4f:9d:
0b:93:17:c9:8c:39:47:5a:84:91:58:ab:fc:58:66:
b6:dd:ec:2a:20:62:ee:00:fd:d5:a6:4e:79:0a:b4:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A3:CF:A3:7F:7A:28:D9:79:1C:61:45:57:1A:C3:44:F0:46:50:7B
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9e:4d:8a:9a:57:48:a5:06:36:80:f3:3e:14:d9:3f:6e:4f:
8a:a8:07:4a:31:40:13:18:6f:4b:e3:19:a8:03:24:db:6a:b5:
45:43:4b:d7:8e:01:f7:b7:f6:77:c6:42:30:d6:96:d9:5c:eb:
f5:bb:4d:bb:40:26:f6:84:ad:95:9a:c4:2e:36:d2:0c:a0:55:
3c:a9:0c:eb:d2:e4:31:ba:08:1f:4a:72:d2:c8:d8:6c:01:4c:
9a:f8:5e:1e:3b:80:2f:75:5a:c4:71:67:de:3f:7c:6a:0f:5b:
9a:87:04:ec:55:fc:4e:bd:d6:95:4d:a2:2e:00:f8:d2:e3:dd:
3d:a3:7f:17:6f:fd:80:84:5d:b7:ac:46:62:7b:93:3d:0f:e0:
6b:40:82:85:98:ae:54:d5:19:ad:7d:cd:d4:55:5a:db:6b:da:
fc:22:56:7c:86:a5:74:d8:2c:80:d4:a4:42:2b:7f:8e:eb:70:
c7:45:e7:66:90:3a:e5:6d:84:9b:ee:9c:93:a5:45:41:e9:d5:
49:5f:a9:3d:8f:b4:9e:79:46:de:e5:ef:ee:b6:e0:2a:bf:76:
72:50:59:ff:83:4d:2e:78:b2:21:43:6a:e5:07:d3:ce:11:d5:
d1:1e:58:f2:b0:da:c5:a7:79:e8:29:f1:a2:09:8d:84:d3:bb:
6f:f3:0e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:09 2025 by rpki-client