Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json)
Hash identifier: KOExWUklplzj4CCuuBgHFw5xxcz/w+juK2uTH2SVAgY=
Subject key identifier: 59:99:E5:C3:EF:18:1C:E1:A6:73:21:7A:5D:96:5F:08:8B:5C:1E:75
Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Certificate serial: 019677FBA5E23CEA5C38DE9C57EA17C9FD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 16:01:42 +0000
Manifest this update: Sun 27 Apr 2025 16:01:42 +0000
Manifest next update: Mon 28 Apr 2025 16:01:42 +0000
Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: 96gEHIVAHUzw1Kxs4vMsxMJUFEIrgZI3K+VUfV6HGDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:a5:e2:3c:ea:5c:38:de:9c:57:ea:17:c9:fd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Validity
Not Before: Apr 27 16:01:42 2025 GMT
Not After : Apr 28 16:01:42 2025 GMT
Subject: CN=5999e5c3ef181ce1a673217a5d965f088b5c1e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:d2:a4:22:f8:e2:14:58:94:48:58:bd:11:
2a:9f:da:02:d3:6b:96:c4:df:f5:4a:6b:f7:d7:d6:
f6:03:3d:c1:d4:39:93:9c:18:15:5d:a2:fc:db:a2:
3b:84:a7:13:77:c1:b5:f2:04:56:a4:8e:ac:f1:26:
76:b5:71:95:4c:58:51:02:08:38:1a:20:11:df:0e:
7e:4f:cc:b2:06:06:40:3c:b5:97:b6:83:6d:52:6d:
c8:d0:46:f8:5a:86:b5:68:75:99:f9:a0:a4:48:ff:
e1:8e:a5:bc:29:a6:7f:17:4f:ac:74:96:15:90:da:
f4:89:c7:c9:7d:87:b8:06:5e:18:3a:a1:84:c7:bb:
a8:48:3a:f5:98:70:d0:39:44:03:ba:ce:f4:dc:10:
ad:50:55:81:4f:63:d6:15:6c:ec:ff:77:dd:4f:c9:
ff:6e:9e:7a:92:6b:33:37:92:6a:c0:31:49:90:a9:
a2:8e:ce:b7:da:19:01:2c:56:41:44:cf:39:8b:f4:
d3:36:57:9c:41:df:fb:a5:43:c0:90:70:e3:19:41:
d4:a4:a1:a3:7e:6c:35:02:31:39:7d:3c:b3:4a:a4:
d6:23:5a:78:54:cd:65:75:50:94:65:a1:45:b2:cd:
fb:28:d8:99:18:f5:b1:85:9a:a8:a0:3d:69:64:ac:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:99:E5:C3:EF:18:1C:E1:A6:73:21:7A:5D:96:5F:08:8B:5C:1E:75
X509v3 Authority Key Identifier:
keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:41:52:52:23:88:57:87:e1:08:8f:c4:7c:a3:bd:66:67:9e:
cc:41:3e:d0:5d:39:87:87:62:6f:f4:c4:66:61:6d:4b:d5:ec:
14:6a:d7:76:8c:37:8f:d2:01:cf:6b:73:a9:9d:c4:4f:34:8b:
3e:19:ce:3e:4d:aa:84:40:89:6c:af:47:bd:c8:bb:1f:c3:32:
7c:ee:d9:d5:a2:37:e3:e1:cf:93:af:41:8d:d5:38:82:88:c3:
ca:d3:2f:81:08:b5:4f:be:09:87:7c:3e:ec:54:7d:78:ac:7c:
04:1f:11:20:d8:57:79:5c:1f:68:88:9d:73:4c:d6:1b:04:9c:
74:3d:c2:90:5b:35:b9:a3:e7:03:51:4b:2b:a4:3d:81:75:b0:
16:d8:5a:db:93:be:bb:cd:94:b8:d5:ef:0a:64:85:2a:20:62:
0b:2a:01:81:84:53:6b:93:38:4e:ca:54:78:7c:64:98:ac:43:
46:c0:f7:8c:b1:4e:ce:fd:37:6d:fb:f5:79:70:7f:c7:9e:e8:
d2:02:e6:92:c7:61:9b:0b:70:d8:a2:4a:cb:4d:8e:cb:44:67:
92:f9:4a:d9:82:8d:5f:52:20:d4:9e:91:48:53:48:13:6a:e0:
cb:5a:38:3b:67:4e:4e:02:a9:65:fa:bb:7b:9f:45:1f:47:15:
5a:7a:c6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:11:16 2025 by rpki-client