Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier: jbggVhVp1mBFAFVUCTQDAbFKEWJQn+C4Wjx9fN0QMhU=
Subject key identifier: 9F:EF:2E:C9:B4:C0:04:49:12:E6:B6:7A:C8:15:52:D6:B0:88:D3:B8
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial: 0199FB45BD7E031C746A06BBF7DE4165BC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number: 02E3
Signing time: Sun 19 Oct 2025 07:01:15 +0000
Manifest this update: Sun 19 Oct 2025 07:01:15 +0000
Manifest next update: Mon 20 Oct 2025 07:01:15 +0000
Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: i7eKHVokKKMv7WY7rNrSvOehwN+jB008gSQ5OKc6yyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:bd:7e:03:1c:74:6a:06:bb:f7:de:41:65:bc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Validity
Not Before: Oct 19 07:01:15 2025 GMT
Not After : Oct 20 07:01:15 2025 GMT
Subject: CN=9fef2ec9b4c0044912e6b67ac81552d6b088d3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:19:20:68:3e:f3:b8:e2:4b:af:b1:f4:f3:
ca:7e:d8:cd:b4:5a:8c:62:b7:fe:f6:8d:ea:d6:6a:
b3:e5:14:b6:33:25:cd:08:6f:7d:57:15:5b:72:17:
95:08:7e:85:f7:7d:ca:2c:cd:42:45:42:34:47:76:
27:48:ea:ca:ad:50:61:9e:de:62:27:34:e8:77:4f:
fb:7b:65:01:c3:b1:6b:49:3f:44:a3:6a:b7:1b:c5:
7f:96:55:73:73:08:e1:2d:57:c8:41:74:16:1f:c7:
ff:db:2b:4f:f6:1d:7e:38:bc:f2:77:4b:ab:78:af:
87:b5:a3:ec:fd:0c:27:fd:4d:0d:2c:26:24:fe:2f:
51:18:11:28:e2:2f:be:df:86:c4:3b:16:c7:b6:1b:
54:e4:95:d3:81:4c:2f:b3:ab:4a:af:6f:c2:d2:11:
05:7d:e8:56:3c:65:3d:5b:72:23:eb:fa:47:ac:e4:
81:a1:fa:44:71:aa:e1:9e:33:a1:41:a6:a1:18:af:
bb:5b:84:25:dc:0c:df:d9:5c:37:0a:a3:5b:39:8f:
5a:e5:63:e2:33:44:39:c5:78:00:93:d6:1e:1b:70:
c8:9a:09:d6:39:db:60:38:eb:1f:84:5c:17:55:a5:
cf:4d:9b:99:32:5a:38:31:a7:4b:c5:61:fe:d5:11:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EF:2E:C9:B4:C0:04:49:12:E6:B6:7A:C8:15:52:D6:B0:88:D3:B8
X509v3 Authority Key Identifier:
keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:79:5f:80:39:27:43:0b:09:c3:78:f3:42:e4:0c:18:4b:6a:
d7:a9:e2:fe:42:6b:fd:f3:13:ec:78:a2:60:22:56:da:d0:48:
cd:3c:21:c2:ea:43:16:67:a1:62:10:e8:00:9e:c0:32:17:8f:
90:21:69:13:ee:19:22:75:01:43:1d:f0:d0:7f:4c:5e:65:8f:
97:73:57:92:02:14:75:93:1e:05:54:6c:25:46:ab:be:12:fb:
4a:a4:60:e1:7e:b5:45:a2:b0:f0:b7:82:91:53:c4:ba:3f:e9:
40:d9:78:b8:1a:09:31:7c:8a:67:df:d2:1c:58:ad:11:7b:cc:
d6:4d:41:d2:bc:82:9d:f5:94:86:59:3a:77:b7:bf:3b:4b:47:
ff:0d:02:67:cc:b7:a9:a7:6a:13:fa:9b:f1:28:7f:89:f5:d1:
9e:c6:ec:fd:cf:5d:ec:21:3e:4a:7f:6f:c0:ea:cd:f3:28:e2:
f4:a5:45:3b:4c:07:74:65:08:14:eb:b9:82:eb:63:f7:d7:24:
f8:be:e4:b5:b1:ec:93:2c:ad:d6:4f:df:1b:4b:77:0d:a6:aa:
64:92:da:f0:0c:ac:85:2d:39:8d:52:38:24:69:ee:1f:ac:cc:
c4:56:2c:e9:d7:1c:a1:3a:03:73:d1:0c:b4:c8:6f:b1:d7:2c:
46:6a:4f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:59 2025 by rpki-client