Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
File: plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json)
Hash identifier: vZvek0THyP7y6Lh7khcBunHfbG7N3rcH4oppYWxCbxM=
Subject key identifier: F8:94:31:95:45:A9:3F:A6:91:97:D5:99:59:26:12:96:CD:59:EA:8D
Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
Certificate issuer: /CN=a656830499378698e3e6e6597993cd3b00e1dccc
Certificate serial: 0197C615474664BA89CD6348F119E5D956B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
Manifest number: 0A94
Signing time: Tue 01 Jul 2025 13:02:52 +0000
Manifest this update: Tue 01 Jul 2025 13:02:52 +0000
Manifest next update: Wed 02 Jul 2025 13:02:52 +0000
Files and hashes: 1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: wRHgfGUx/06Hc3ASqxq3HWpwTBYnun/AoSZ9JcODuqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:15:47:46:64:ba:89:cd:63:48:f1:19:e5:d9:56:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc
Validity
Not Before: Jul 1 13:02:52 2025 GMT
Not After : Jul 2 13:02:52 2025 GMT
Subject: CN=f894319545a93fa69197d59959261296cd59ea8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:f4:01:58:e5:b1:58:b1:63:15:af:22:04:
df:03:5c:ec:f5:50:4d:6c:88:24:71:8d:f3:8b:2d:
b5:24:4b:54:16:ef:24:0a:7f:15:2e:47:bb:f2:69:
52:e9:2c:2e:e5:b2:f0:72:d7:ed:90:c2:62:12:03:
cb:4e:57:f1:a3:1e:7c:f6:2f:db:ae:7e:40:2d:57:
1f:5e:14:15:76:6a:b9:89:77:a0:9c:9d:b3:36:d1:
9e:0f:95:84:f5:d8:79:88:f8:a4:44:b7:c2:0d:59:
9b:9b:d3:a6:87:98:f4:83:9b:e0:5e:74:af:ed:9b:
f7:1c:15:7c:ab:a5:53:75:0b:b4:ba:44:7a:ce:2e:
5a:56:6b:a6:15:05:96:a2:34:2d:20:2e:a7:fe:48:
2b:82:be:e5:bb:01:92:ab:03:d4:42:b1:fd:d8:d8:
4a:2f:20:47:a7:52:70:e0:2e:f0:d1:76:87:fe:ba:
f5:74:00:73:79:f9:ea:9d:bc:09:f3:9e:76:39:fa:
fc:f1:b7:44:e0:da:92:00:55:78:65:00:40:77:d9:
6e:87:af:25:0c:73:02:2d:f2:3e:83:c5:6d:bf:9b:
10:37:0e:e5:2d:30:49:e9:df:cf:b7:3c:02:e2:b6:
8d:ac:df:5b:5f:8b:01:99:f5:bd:92:cd:ad:10:cc:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:94:31:95:45:A9:3F:A6:91:97:D5:99:59:26:12:96:CD:59:EA:8D
X509v3 Authority Key Identifier:
keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:24:f2:c7:29:b2:d7:4f:3e:8e:3a:ad:87:e1:64:09:8a:68:
37:7f:49:a4:9f:86:0a:ef:ce:2c:16:85:31:83:07:32:b4:76:
df:28:e2:ea:63:48:6b:b4:9b:5d:31:14:4b:80:27:d7:ed:e7:
8a:d6:c4:05:51:28:16:b0:5c:cf:40:fc:91:87:73:9d:99:b3:
c5:01:c1:df:b4:b8:5d:47:ff:7b:5c:09:a2:97:6d:d9:e0:ea:
5c:4d:66:6a:91:61:8a:21:f9:6a:0c:4b:0b:d8:5f:d2:5e:cf:
4e:d8:b1:eb:6e:7b:91:14:1d:30:6a:b9:d5:49:5e:ff:5b:7b:
f6:f1:49:97:03:1c:72:4b:2e:6e:2e:11:bd:ae:f8:c8:75:c7:
d3:71:32:ec:8c:90:4f:71:68:9e:86:60:30:4e:9c:84:c2:28:
b7:b5:c7:10:3f:b4:d2:3c:95:eb:48:cc:2c:3a:19:81:d8:ad:
19:30:59:c1:dd:e7:0f:33:d6:9d:9e:03:8d:7e:6f:25:7a:64:
91:8f:2e:a1:44:df:07:de:30:43:e2:5e:c2:45:92:e5:82:6c:
f9:1a:33:fd:b2:5f:07:9d:3f:fb:5f:a3:10:82:f8:51:91:6e:
da:1d:a0:bc:ef:58:da:db:22:45:78:32:bc:d8:61:c1:fe:3a:
67:4c:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:46:05 2025 by rpki-client