Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier: mVcum6yPVUveL15wFliQxE9WUPTmNTuo3L2EVfVgcZM=
Subject key identifier: 07:97:BB:2C:F8:18:07:F0:2A:ED:6C:0D:33:E9:F7:D1:7B:91:18:91
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial: 0198D5BBDAF5542FF67B313AB66069CE2B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number: 024B
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: qbWkwM7rJiJAdUo91M1+zTVsaPQes4imFsrUwXxTTSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:da:f5:54:2f:f6:7b:31:3a:b6:60:69:ce:2b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=0797bb2cf81807f02aed6c0d33e9f7d17b911891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:45:35:fb:b1:75:6a:f9:9d:5b:5e:29:c8:
6a:69:f4:c4:0e:d5:b0:6f:ff:cf:e5:d8:e5:a6:67:
44:58:b8:cc:59:6b:1d:49:ff:ac:fd:af:30:ee:01:
b9:0a:71:3d:ce:35:51:82:ef:cb:14:b8:ce:3b:ca:
21:a9:37:ac:a8:45:16:55:18:e7:cf:ed:0b:84:38:
80:17:38:27:b6:d3:37:90:69:d5:28:90:5b:92:4a:
50:98:f5:5b:3e:98:7a:6d:c2:8d:ea:42:47:8b:04:
53:55:37:d7:cc:02:53:1d:b0:68:34:5f:42:1c:97:
ea:8d:30:7c:80:b6:8e:8f:41:e7:22:a3:97:94:c0:
d0:9d:11:d5:6a:a2:e2:2e:0c:2e:8d:a3:5f:b7:b1:
ec:89:25:3e:41:22:79:fb:f0:3a:09:76:43:e1:a2:
eb:8b:b1:a0:bf:51:eb:c4:b2:28:6a:05:65:c2:d9:
a3:b1:5d:84:2a:6c:d3:1a:02:07:a4:ae:bc:5b:8b:
b8:6c:e5:b7:45:57:fb:56:f8:9d:d9:a8:7d:f1:43:
42:12:10:82:2e:b3:bb:b7:d7:13:67:54:ea:5b:14:
2e:27:a2:4b:4f:ca:9e:2f:c6:bb:82:39:c0:92:f5:
9c:21:c0:ac:8c:e4:10:b5:cc:87:57:d9:75:68:47:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:97:BB:2C:F8:18:07:F0:2A:ED:6C:0D:33:E9:F7:D1:7B:91:18:91
X509v3 Authority Key Identifier:
keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:cc:bf:34:89:fa:cb:ff:1f:4b:10:89:b4:30:99:34:4c:b7:
69:45:5c:2b:f1:fa:e8:59:a7:1e:0d:29:e9:59:fe:ae:87:1d:
a5:12:1a:8e:00:66:ab:6f:01:ee:c6:83:9c:ac:43:16:c6:f5:
fa:e1:29:83:1a:ea:4d:5e:7b:9c:63:1d:34:06:05:4d:db:c2:
ac:1a:82:b1:2b:a8:5f:94:f7:7c:04:af:78:a7:a1:b7:02:36:
d0:85:73:5a:5d:82:3a:b8:d2:39:c9:8a:d8:6b:89:84:25:e6:
29:d9:9f:f0:91:d5:eb:94:ea:35:a0:5d:b7:a6:cd:0a:44:6d:
88:88:f1:56:8a:48:7e:46:01:f0:d8:ac:0d:d0:ad:79:4b:e4:
9b:62:a7:41:22:33:52:55:24:23:64:ca:67:74:45:ac:9f:00:
12:b5:88:38:cd:26:a0:08:8b:f0:86:b3:27:40:ec:9e:39:b5:
21:cf:74:e7:07:bd:19:d8:37:7d:55:60:fa:a6:63:4f:5f:71:
d1:d2:f8:e2:bc:e0:b4:27:58:1d:78:c8:a8:56:39:04:8c:23:
de:e1:0d:13:4e:da:eb:54:aa:53:93:2c:76:55:cf:90:ff:a5:
0f:15:f7:08:39:73:d0:d6:9c:c6:0f:d5:53:63:65:8f:4b:d0:
7f:34:29:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu9r1VC/2ezE6tmBpzisXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTk3MTE2N2Y5M2ZjMzRiM2JjNDc5YmIyMWZmNjJkM2Jm
M2M5ODQwHhcNMjUwODIzMDcwMTU0WhcNMjUwODI0MDcwMTU0WjAzMTEwLwYDVQQD
EygwNzk3YmIyY2Y4MTgwN2YwMmFlZDZjMGQzM2U5ZjdkMTdiOTExODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iNFNfuxdWr5nVteKchqafTEDtWw
b//P5djlpmdEWLjMWWsdSf+s/a8w7gG5CnE9zjVRgu/LFLjOO8ohqTesqEUWVRjn
z+0LhDiAFzgnttM3kGnVKJBbkkpQmPVbPph6bcKN6kJHiwRTVTfXzAJTHbBoNF9C
HJfqjTB8gLaOj0HnIqOXlMDQnRHVaqLiLgwujaNft7HsiSU+QSJ5+/A6CXZD4aLr
i7Ggv1HrxLIoagVlwtmjsV2EKmzTGgIHpK68W4u4bOW3RVf7Vvid2ah98UNCEhCC
LrO7t9cTZ1TqWxQuJ6JLT8qeL8a7gjnAkvWcIcCsjOQQtcyHV9l1aEf2zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeXuyz4GAfwKu1sDTPp99F7kRiRMB8GA1UdIwQY
MBaAFN6ZcRZ/k/w0s7xHm7If9i0788mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BseEZuLVRfRFN6dkVlYnNoXzJMVHZ6eVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kOWJlNDAtY2Q0Mi00YTZjLTlkNGUt
MWRmYmQxZWZkNWQ0LzEvM3BseEZuLVRfRFN6dkVlYnNoXzJMVHZ6eVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9kOWJlNDAtY2Q0Mi00YTZjLTlkNGUtMWRmYmQxZWZkNWQ0
LzEvM3BseEZuLVRfRFN6dkVlYnNoXzJMVHZ6eVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs8y/NIn6
y/8fSxCJtDCZNEy3aUVcK/H66FmnHg0p6Vn+rocdpRIajgBmq28B7saDnKxDFsb1
+uEpgxrqTV57nGMdNAYFTdvCrBqCsSuoX5T3fASveKehtwI20IVzWl2COrjSOcmK
2GuJhCXmKdmf8JHV65TqNaBdt6bNCkRtiIjxVopIfkYB8NisDdCteUvkm2KnQSIz
UlUkI2TKZ3RFrJ8AErWIOM0moAiL8IazJ0Dsnjm1Ic905we9Gdg3fVVg+qZjT19x
0dL44rzgtCdYHXjIqFY5BIwj3uENE07a61SqU5MsdlXPkP+lDxX3CDlz0Nacxg/V
U2Nlj0vQfzQpfg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:30 2025 by rpki-client