Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier: 3W6i+GIoGJ6yoDAOCX7jCq+GSFty9Iw//BXVdG8sS74=
Subject key identifier: 7E:54:E6:5A:B2:33:09:2E:E9:99:CA:D1:BA:03:F5:EB:99:8A:AA:71
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 0198D5BBB5A45A8F92ABAD1BAD13BAF28A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number: 0593
Signing time: Sat 23 Aug 2025 07:01:45 +0000
Manifest this update: Sat 23 Aug 2025 07:01:45 +0000
Manifest next update: Sun 24 Aug 2025 07:01:45 +0000
Files and hashes: 1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: gcEdan0ppay1ovc5nkddSrveL3xG6UlW2Xwj9eq+Cwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b5:a4:5a:8f:92:ab:ad:1b:ad:13:ba:f2:8a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: Aug 23 07:01:45 2025 GMT
Not After : Aug 24 07:01:45 2025 GMT
Subject: CN=7e54e65ab233092ee999cad1ba03f5eb998aaa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:c3:dd:19:02:a9:c8:d1:e7:3c:88:c5:57:
a0:6c:08:88:be:e9:80:52:2e:4f:e4:8a:5e:23:83:
81:2e:fc:b8:6b:f2:43:8a:1b:97:82:07:a1:2b:1a:
e9:5f:c6:44:fb:17:9a:10:6e:09:29:d6:1a:b4:22:
e5:2f:34:89:91:b8:4d:12:0d:dd:ff:c9:55:8b:47:
cc:53:7b:de:21:36:86:7f:16:8b:14:25:04:a7:76:
d4:f2:49:b7:ab:de:3c:de:63:ef:3c:85:54:16:4b:
fa:ff:08:c4:7a:6e:a3:ea:d8:fe:c6:12:2b:75:99:
84:78:06:e3:5c:ca:63:6b:3f:25:4f:75:a3:94:a9:
99:6d:76:e0:4d:7b:81:15:df:d0:9d:34:f2:0a:d0:
48:b5:cf:1c:ce:d5:cd:77:01:37:24:37:c9:fc:ac:
bd:32:14:d8:05:7d:b3:3e:63:74:50:8d:c6:5c:fb:
6f:49:66:41:4b:ad:12:c7:44:5d:d7:1d:b6:c6:2d:
60:cb:be:2f:a6:da:8e:15:ea:83:c8:a5:1b:a6:b5:
40:dd:c7:4a:76:04:ac:81:17:c8:26:22:86:57:bf:
86:ed:fa:83:23:1d:6a:8e:a1:64:be:12:1b:dd:1c:
9e:dc:f7:98:11:6e:6b:df:35:0f:52:6e:2a:ad:27:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:54:E6:5A:B2:33:09:2E:E9:99:CA:D1:BA:03:F5:EB:99:8A:AA:71
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c0:6f:62:a8:6c:63:24:a5:b2:26:bf:b1:1e:b1:cd:a6:20:
0f:aa:e3:ac:f9:bb:bb:34:cc:71:99:80:cb:40:c4:cf:53:ec:
9e:f1:1c:cb:76:07:f0:fa:82:94:04:dc:1e:42:21:6d:ce:59:
3e:cb:6e:a4:63:b5:64:15:7f:66:e9:b2:ed:5c:e0:70:f8:01:
ce:30:f5:e1:95:8d:3a:f2:a5:d4:ff:37:cc:52:d1:52:bd:76:
3b:37:ce:4c:cb:b0:1d:cf:34:cc:68:5d:9b:72:35:ca:f6:b4:
50:0e:62:09:51:b5:84:01:89:03:b8:54:3a:34:a9:3e:2a:34:
85:9a:05:20:6c:69:8e:67:c7:7b:dc:27:d3:d2:83:65:bc:91:
9c:db:17:81:91:77:2f:ff:84:8a:e0:40:4f:0f:87:bc:56:a5:
4b:7d:70:7a:1b:dc:80:f4:28:42:92:9d:9a:67:70:59:5b:06:
77:8a:83:0e:03:26:8f:20:dd:0f:21:60:eb:c8:77:9a:19:7e:
cf:cd:cb:e7:26:3c:42:f7:e8:b4:fc:f7:ec:56:d1:de:fc:57:
f1:c4:08:2d:99:29:fa:bf:11:59:6f:58:6c:36:34:9c:79:a8:
d0:fe:11:0a:33:89:23:eb:46:e1:c8:96:16:98:a6:40:76:81:
dc:2a:6b:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7WkWo+Sq60brRO68ooOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYmM0ZGFmNjBjN2Q0NGU5NWQ2Y2I5MjA3YTlkZGVjNTlh
NDRiZjcwHhcNMjUwODIzMDcwMTQ1WhcNMjUwODI0MDcwMTQ1WjAzMTEwLwYDVQQD
Eyg3ZTU0ZTY1YWIyMzMwOTJlZTk5OWNhZDFiYTAzZjVlYjk5OGFhYTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5/D3RkCqcjR5zyIxVegbAiIvumA
Ui5P5IpeI4OBLvy4a/JDihuXggehKxrpX8ZE+xeaEG4JKdYatCLlLzSJkbhNEg3d
/8lVi0fMU3veITaGfxaLFCUEp3bU8km3q9483mPvPIVUFkv6/wjEem6j6tj+xhIr
dZmEeAbjXMpjaz8lT3WjlKmZbXbgTXuBFd/QnTTyCtBItc8cztXNdwE3JDfJ/Ky9
MhTYBX2zPmN0UI3GXPtvSWZBS60Sx0Rd1x22xi1gy74vptqOFeqDyKUbprVA3cdK
dgSsgRfIJiKGV7+G7fqDIx1qjqFkvhIb3Rye3PeYEW5r3zUPUm4qrSd9PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5U5lqyMwku6ZnK0boD9euZiqpxMB8GA1UdIwQY
MBaAFDy8Ta9gx9ROldbLkgep3exZpEv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84YWZkNGItZGY2Mi00YmE0LWFkNzYt
YmY0OWE2ZDdiZTdjLzEvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS84YWZkNGItZGY2Mi00YmE0LWFkNzYtYmY0OWE2ZDdiZTdj
LzEvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMBvYqhs
YySlsia/sR6xzaYgD6rjrPm7uzTMcZmAy0DEz1PsnvEcy3YH8PqClATcHkIhbc5Z
PstupGO1ZBV/Zumy7VzgcPgBzjD14ZWNOvKl1P83zFLRUr12OzfOTMuwHc80zGhd
m3I1yva0UA5iCVG1hAGJA7hUOjSpPio0hZoFIGxpjmfHe9wn09KDZbyRnNsXgZF3
L/+EiuBATw+HvFalS31wehvcgPQoQpKdmmdwWVsGd4qDDgMmjyDdDyFg68h3mhl+
z83L5yY8QvfotPz37FbR3vxX8cQILZkp+r8RWW9YbDY0nHmo0P4RCjOJI+tG4ciW
FpimQHaB3Cprmw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:45 2025 by rpki-client