Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier: ueXZZVzFCIvEX/9e5vI37zcaRe7xa83iFu48fBqscEU=
Subject key identifier: 28:B0:32:04:06:30:EF:CD:18:6B:63:FA:B0:FF:76:84:4A:11:31:9B
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 0199FD345EA808A5C485D3370D7F525E1DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number: 062C
Signing time: Sun 19 Oct 2025 16:01:31 +0000
Manifest this update: Sun 19 Oct 2025 16:01:31 +0000
Manifest next update: Mon 20 Oct 2025 16:01:31 +0000
Files and hashes: 1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: skwyy89ZhtH/oGZivGRRMjySXVF/XTxbDHthiSorPaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5e:a8:08:a5:c4:85:d3:37:0d:7f:52:5e:1d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: Oct 19 16:01:31 2025 GMT
Not After : Oct 20 16:01:31 2025 GMT
Subject: CN=28b032040630efcd186b63fab0ff76844a11319b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:3b:1d:a3:b3:d0:00:96:36:24:a9:42:f3:
bb:da:55:f0:37:4c:1b:e8:75:d6:0f:60:67:49:9c:
e4:8b:b5:8e:67:cf:b7:20:b8:45:c0:ae:90:1b:ec:
e5:09:45:31:ec:ed:33:ac:39:68:eb:9d:47:07:f7:
64:71:f3:3b:9c:94:d1:a7:7c:fe:23:ba:18:c3:c9:
08:89:5a:c2:30:fa:96:44:a4:06:c0:d2:41:0b:1a:
b7:92:7e:7d:73:d0:cb:a9:a4:c9:7b:79:2e:11:c8:
e5:27:59:49:b9:17:62:2e:8e:e3:2a:23:4b:6f:09:
ef:75:04:a4:39:00:bf:6c:6e:87:a0:ad:d7:cd:bf:
50:03:1f:c3:27:b9:c6:ad:47:8b:5e:df:27:63:60:
01:71:13:ae:bf:65:ed:26:bd:6d:d1:e8:04:f0:99:
02:27:00:1f:41:20:0c:d4:6c:9c:e2:2e:cc:bf:e2:
b7:70:96:f4:6c:5b:f6:fc:1a:c8:23:5b:23:6f:a5:
5d:33:8a:40:db:48:43:64:28:12:db:eb:04:84:9b:
32:8d:71:21:16:4e:eb:a5:7e:05:ee:fc:0f:db:c0:
4d:23:1e:97:13:a8:9a:f7:d7:59:3f:7f:5b:b0:a1:
cb:8c:48:ae:01:2e:1c:94:99:9b:44:b8:dc:b0:75:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B0:32:04:06:30:EF:CD:18:6B:63:FA:B0:FF:76:84:4A:11:31:9B
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:62:3d:a5:f0:3d:63:e9:70:8f:9d:80:2b:4c:b0:84:b2:99:
e1:ba:51:10:b5:68:f6:5b:0a:8f:d6:64:d3:fe:e3:3d:ee:49:
95:52:20:35:08:e5:6f:28:d7:56:78:96:c5:6c:d7:e4:88:d1:
f8:04:0c:8a:00:c8:ed:28:fa:75:06:24:80:f3:d9:dc:42:12:
76:ce:d3:83:ff:a8:43:e6:50:f3:d5:fd:dc:9d:bb:a3:dc:54:
d2:15:ec:9e:c9:83:d4:c9:73:73:ff:d1:b2:a5:b3:8f:4d:36:
5d:b5:66:ac:13:09:12:b5:9b:b2:74:53:82:43:85:79:1e:c7:
16:c6:57:ef:7c:f3:a7:51:8a:65:31:3a:ca:86:d7:da:b7:54:
3d:c1:28:45:67:ea:3d:82:aa:15:f0:b6:a8:57:8f:f8:ae:d7:
42:d6:d3:2f:0f:08:1c:5c:6c:d3:b0:12:03:8b:83:d8:f3:dc:
67:da:b6:e6:2d:ef:05:84:a1:e0:76:82:c4:9f:ab:5f:80:ae:
98:8c:24:b2:1e:59:81:92:98:d1:19:cd:28:e9:26:6b:ac:d1:
03:50:31:ae:07:1e:a6:64:a3:de:5c:93:e1:5d:94:8b:1d:5d:
ab:1f:03:38:52:25:09:c7:23:fa:a5:fd:04:4d:1a:35:d6:95:
ca:d3:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:19 2025 by rpki-client