Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File: PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier: s0rzhlYpPje/5nSEqLPAW6jQ2eW/doYTKXYPv8H0dJ4=
Subject key identifier: C3:5D:D7:C2:C8:C9:CF:1B:11:C0:C8:E2:B8:57:BE:C4:F3:41:C5:79
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer: /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial: 0198D54DD311C519CA72BB3AF8692D6AD8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:01:43 +0000
Manifest this update: Sat 23 Aug 2025 05:01:43 +0000
Manifest next update: Sun 24 Aug 2025 05:01:43 +0000
Files and hashes: 1: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: gDmWWaw5A9FG8ESxar68uO1LeMFB6aDN4jtrP2YLRsI=)
2: k0fv_0lBTVHhkgh3M6y4FfdKWug.roa (hash: NS6EWo/2W4cdxM4+yYUneBPcsKtB9dlJYih0Lk7s4iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d3:11:c5:19:ca:72:bb:3a:f8:69:2d:6a:d8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Validity
Not Before: Aug 23 05:01:43 2025 GMT
Not After : Aug 24 05:01:43 2025 GMT
Subject: CN=c35dd7c2c8c9cf1b11c0c8e2b857bec4f341c579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:49:81:e5:e3:56:49:42:1b:d6:73:c1:59:56:
a1:65:65:93:1c:28:cd:6a:2c:51:d3:67:81:40:c0:
95:3a:02:81:6f:bc:08:a9:df:4a:dd:15:d8:04:bb:
9c:96:00:85:1e:28:63:a4:28:ac:0c:60:21:5c:ff:
32:a4:04:36:04:28:e1:81:4b:dc:13:3b:a9:6e:fb:
3d:20:bf:c3:91:15:83:d1:0c:f5:22:67:93:52:ba:
d4:38:08:91:30:38:80:77:54:56:99:0c:76:2d:71:
40:43:19:fa:82:64:47:99:74:61:46:fd:ce:c0:52:
2c:39:aa:5d:6a:d7:ba:63:58:d1:17:0a:ca:15:d8:
03:91:61:17:41:d4:78:7e:9a:c2:e6:e7:0b:f2:dd:
d7:88:ab:55:0f:76:1c:c3:5a:da:bc:22:46:dc:2f:
f3:25:27:b0:b8:ba:06:f4:c4:63:6f:81:22:47:84:
56:d0:04:cd:6b:ba:57:80:5f:12:fd:e7:17:62:d6:
93:b0:75:72:d9:06:71:f9:4e:8f:ab:cf:fd:c7:8a:
1f:d3:24:b2:0e:91:73:6d:32:c1:21:37:c6:bf:56:
74:13:72:bc:14:23:d7:79:31:c8:ae:d3:27:0d:7f:
59:d8:99:d1:67:01:e5:92:b9:66:ed:96:c0:cd:88:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5D:D7:C2:C8:C9:CF:1B:11:C0:C8:E2:B8:57:BE:C4:F3:41:C5:79
X509v3 Authority Key Identifier:
keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ad:b1:31:ec:02:a6:51:a0:e0:4d:19:e7:e7:cd:03:70:91:
5a:9c:6e:22:38:6b:36:c2:33:c6:b9:34:a1:bf:52:60:07:59:
ba:fa:a3:46:d9:07:c0:31:16:d1:a9:33:5a:7c:89:05:c3:a6:
d8:9d:59:1d:89:e7:24:71:6f:f1:8d:5f:a3:e0:ca:c8:83:5f:
86:1b:1b:e2:2c:46:b7:e8:18:8a:c5:65:38:97:5c:d4:45:62:
f7:ea:cc:ee:c2:36:24:64:94:53:50:2b:b5:d6:48:00:0c:b2:
81:ea:b5:65:7e:d8:2f:a0:9b:e4:0f:e8:62:96:8a:f0:a1:75:
18:45:9f:d7:fa:24:03:a8:1c:93:56:b2:59:01:0b:5d:91:53:
cd:30:4d:21:87:be:a8:d4:4a:e5:1b:d4:5d:a6:9f:c3:8a:a3:
75:c2:47:27:1c:1b:2c:4c:04:05:b8:92:69:50:81:8d:ad:0c:
0e:53:26:87:19:7e:ad:7b:47:7f:9a:fb:06:f9:46:f5:cf:4e:
42:0f:a6:a6:14:06:35:cb:c7:9f:8b:ff:d9:c1:72:fc:6c:55:
4b:b3:3f:fe:ac:58:e4:16:fc:ea:66:4e:ba:5a:5a:bc:4a:21:
83:fb:01:bf:fa:bf:f1:9b:32:cd:a4:e8:1b:ee:0e:4f:79:29:
57:47:d6:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTdMRxRnKcrs6+GktatjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNTBkMWRkMzFiYzc0NDliYWNjMTg2NGIwMWFmOTk0YzU0
N2VmZDMwHhcNMjUwODIzMDUwMTQzWhcNMjUwODI0MDUwMTQzWjAzMTEwLwYDVQQD
EyhjMzVkZDdjMmM4YzljZjFiMTFjMGM4ZTJiODU3YmVjNGYzNDFjNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kmB5eNWSUIb1nPBWVahZWWTHCjN
aixR02eBQMCVOgKBb7wIqd9K3RXYBLuclgCFHihjpCisDGAhXP8ypAQ2BCjhgUvc
Ezupbvs9IL/DkRWD0Qz1ImeTUrrUOAiRMDiAd1RWmQx2LXFAQxn6gmRHmXRhRv3O
wFIsOapdate6Y1jRFwrKFdgDkWEXQdR4fprC5ucL8t3XiKtVD3Ycw1ravCJG3C/z
JSewuLoG9MRjb4EiR4RW0ATNa7pXgF8S/ecXYtaTsHVy2QZx+U6Pq8/9x4of0ySy
DpFzbTLBITfGv1Z0E3K8FCPXeTHIrtMnDX9Z2JnRZwHlkrlm7ZbAzYj3aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNd18LIyc8bEcDI4rhXvsTzQcV5MB8GA1UdIwQY
MBaAFD5Q0d0xvHRJuswYZLAa+ZTFR+/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC82ZWMzOWMtYTlkNC00YTEyLTgxMGEt
NGYwNjUwZGE1NDViLzEvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC82ZWMzOWMtYTlkNC00YTEyLTgxMGEtNGYwNjUwZGE1NDVi
LzEvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG62xMewC
plGg4E0Z5+fNA3CRWpxuIjhrNsIzxrk0ob9SYAdZuvqjRtkHwDEW0akzWnyJBcOm
2J1ZHYnnJHFv8Y1fo+DKyINfhhsb4ixGt+gYisVlOJdc1EVi9+rM7sI2JGSUU1Ar
tdZIAAyygeq1ZX7YL6Cb5A/oYpaK8KF1GEWf1/okA6gck1ayWQELXZFTzTBNIYe+
qNRK5RvUXaafw4qjdcJHJxwbLEwEBbiSaVCBja0MDlMmhxl+rXtHf5r7BvlG9c9O
Qg+mphQGNcvHn4v/2cFy/GxVS7M//qxY5Bb86mZOulpavEohg/sBv/q/8ZsyzaTo
G+4OT3kpV0fW6g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:40 2025 by rpki-client