Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
File: plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json)
Hash identifier: vtKdHetu2JBrj7tNGDne0Fy+mQco9F2/7OJ6J2/QmDg=
Subject key identifier: 0F:52:85:2B:77:AB:40:4B:92:3C:A1:AB:FC:0E:03:2F:D7:B2:1D:4B
Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
Certificate issuer: /CN=a656830499378698e3e6e6597993cd3b00e1dccc
Certificate serial: 019A4EF5B3C80D4D55F47D2DC321F913C802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
Manifest number: 0BE4
Signing time: Tue 04 Nov 2025 13:01:56 +0000
Manifest this update: Tue 04 Nov 2025 13:01:56 +0000
Manifest next update: Wed 05 Nov 2025 13:01:56 +0000
Files and hashes: 1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: 1VVxiS2Me8RYq45FVrdVvBuFQq3iirOKpwV3tZ2oS+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b3:c8:0d:4d:55:f4:7d:2d:c3:21:f9:13:c8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc
Validity
Not Before: Nov 4 13:01:56 2025 GMT
Not After : Nov 5 13:01:56 2025 GMT
Subject: CN=0f52852b77ab404b923ca1abfc0e032fd7b21d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:ec:af:b7:0f:14:81:cc:20:39:3a:a3:64:
8d:26:e0:26:44:cc:19:88:65:dc:74:87:f2:b9:37:
93:f4:11:cc:9b:4a:e2:4f:97:5e:7d:80:2c:bd:c6:
28:e7:ec:84:62:48:72:1b:39:8b:cf:78:58:79:07:
38:ba:62:ba:dc:2d:1f:82:d3:45:8a:5c:c7:c7:0c:
70:f3:8f:8c:cd:79:50:4a:ac:2f:90:16:21:94:d5:
76:f7:31:b5:58:1d:dd:13:b5:88:87:9b:b8:52:e9:
e7:6a:f2:c1:2d:ca:48:86:04:5f:54:8a:a2:66:5d:
b9:eb:7b:dd:c7:dc:dc:07:fe:b3:f3:49:ff:d0:2f:
d7:4e:24:f6:f4:33:ef:0f:13:82:29:13:55:f0:6b:
2e:20:22:a8:89:c3:0f:3b:8c:e0:07:6c:5a:51:d3:
a3:ff:d2:7b:b5:5f:2a:0a:5a:b5:9a:0f:ac:b5:4c:
3d:41:12:cc:cd:5d:a0:3c:cb:a8:e6:b8:68:c6:80:
ad:3d:d9:51:f4:32:0b:73:44:bc:32:b3:4b:a9:38:
aa:cc:f2:60:81:35:ce:06:45:cb:e1:bc:56:7c:50:
96:08:84:4c:bb:b3:d0:19:54:14:e8:e4:99:d5:0b:
3b:c9:50:5b:36:ff:ed:c8:ab:4c:7a:4e:bf:f1:ed:
29:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:52:85:2B:77:AB:40:4B:92:3C:A1:AB:FC:0E:03:2F:D7:B2:1D:4B
X509v3 Authority Key Identifier:
keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6c:c0:c1:1c:0f:a0:53:10:d4:3f:ca:b3:99:f5:4d:35:4a:
a0:83:a7:e9:ed:06:bb:a6:18:bf:cb:9e:3c:61:2c:2c:8e:c7:
48:e8:b7:bd:8b:2c:42:a5:53:4d:c3:91:1f:d0:19:e7:4b:bd:
8b:0f:a1:ab:da:f3:33:79:1b:ae:07:e0:e6:7c:2e:a8:bb:d3:
24:27:1f:af:a2:a1:05:e8:d3:82:f8:af:8e:e0:11:6e:85:d7:
30:a7:32:a9:9b:f0:11:06:a4:4e:1b:35:73:c0:08:51:58:9a:
d0:e1:3a:61:6e:f5:34:55:61:69:99:c6:28:3c:5b:1a:03:86:
5b:00:f4:d1:75:fe:88:f7:86:31:e1:c4:99:4f:d9:24:16:03:
4f:bf:d7:0f:2b:84:63:95:45:c4:ba:62:8e:a2:39:a8:f2:2d:
88:c9:de:ad:3b:a5:41:40:da:cf:86:9b:8a:cb:f1:68:de:55:
01:5d:60:5b:93:75:f2:b6:06:b7:4f:a6:86:07:f5:01:db:dd:
87:16:d9:c2:f9:d7:1b:82:82:29:76:67:46:5b:b4:b0:e8:31:
77:ae:a7:68:b6:39:93:f2:9a:5c:cb:16:16:a8:14:74:c9:48:
14:6f:a8:cd:9a:52:f0:b1:96:77:e1:6e:a6:c6:d9:55:1b:a2:
97:24:b9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:54 2025 by rpki-client