Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: N3JaOT+B4uKuH36jTYyd6ADgwZcAf8wR6JpgdzIpf18=
Subject key identifier: 2C:29:BE:FE:46:8D:28:05:1D:9C:27:1C:26:B9:71:80:42:E4:B2:7E
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 019677FA76F99232FBF01A1F785C41F74005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 0679
Signing time: Sun 27 Apr 2025 16:00:25 +0000
Manifest this update: Sun 27 Apr 2025 16:00:25 +0000
Manifest next update: Mon 28 Apr 2025 16:00:25 +0000
Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: AETDuEwGEROnELvDLGl40poCHdEO8wys9UrRiDgR3H8=)
2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:76:f9:92:32:fb:f0:1a:1f:78:5c:41:f7:40:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Apr 27 16:00:25 2025 GMT
Not After : Apr 28 16:00:25 2025 GMT
Subject: CN=2c29befe468d28051d9c271c26b9718042e4b27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:4b:38:d0:7e:da:f6:31:73:a7:d9:81:db:
41:7d:f5:04:f0:07:65:ae:fe:39:60:8e:39:7c:05:
14:ff:3a:e3:f8:74:fb:da:ff:12:31:e3:56:36:c6:
ba:ee:56:10:3f:71:07:a0:f6:05:75:cc:75:88:b2:
82:a0:06:8b:cc:3a:f6:42:92:58:0f:62:90:de:3e:
8b:a5:93:31:32:a2:ec:99:a2:ad:e2:21:9e:86:ce:
38:cf:f1:16:45:0c:83:99:98:25:08:d3:d4:e3:1a:
da:de:c0:ad:c0:da:8e:7f:9d:c4:ae:cd:d6:63:ce:
23:58:1d:29:41:f8:13:97:f7:81:b5:2f:58:e6:9f:
63:23:5c:f6:a1:ba:83:8a:c8:d2:60:c3:ab:d2:8f:
e0:88:ea:02:5d:0e:c4:91:86:c3:c8:a1:08:b7:df:
ab:cf:99:10:61:c6:16:af:ca:21:da:7b:9a:d9:bd:
f2:d0:b7:71:1d:39:25:d9:9e:9a:97:37:5f:81:03:
d7:ca:84:46:44:dd:33:96:8f:44:42:4a:ac:7c:3c:
43:86:f5:c0:c9:6a:96:e9:7e:36:6c:77:b1:e2:a0:
c9:0b:89:42:60:e1:86:f3:18:28:44:44:40:10:e6:
87:bb:a5:95:f2:55:cb:45:e6:ec:8d:bc:1b:55:85:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:29:BE:FE:46:8D:28:05:1D:9C:27:1C:26:B9:71:80:42:E4:B2:7E
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:53:13:5f:ad:55:1e:9e:b6:bf:3b:9f:40:24:f4:13:85:f8:
40:45:e1:4a:a6:07:5e:ba:f1:a7:94:61:21:25:1a:06:66:e0:
b3:05:b6:b8:8d:91:00:1f:d2:19:22:79:2f:2e:04:e2:a3:d0:
2f:8a:72:e8:ff:f4:3b:5e:dc:4b:f4:fb:a9:0d:d1:c5:37:2f:
4a:ed:71:cb:4c:cd:4a:28:9c:ef:d5:d5:21:fc:2e:43:3b:de:
b4:bc:d0:cb:fe:3e:28:a2:cc:61:33:5c:45:05:4a:40:46:8d:
11:b3:8d:32:1e:9f:f6:d6:59:44:3b:d5:56:69:04:ee:79:2f:
54:ed:6a:2d:24:cb:ac:7f:c9:d5:d6:c0:8e:2e:23:08:6d:9b:
ac:be:d1:c3:32:cc:e7:0c:17:76:03:ff:e6:dd:ea:dc:ec:59:
f9:8b:58:6a:4b:7d:fb:16:a3:20:ab:ee:c2:c3:b0:82:2b:2d:
9a:c9:ec:4e:fc:ab:c4:83:5b:32:e7:3d:4c:fb:4d:e9:b0:46:
55:e2:b6:d0:48:5f:18:8e:81:41:68:8a:a2:6f:5f:04:b2:fd:
f3:0b:79:95:b9:23:1a:82:7c:fa:a9:9c:1e:24:16:b0:e6:a6:
7d:bd:58:30:64:b5:f8:11:62:72:7b:91:6a:6c:b6:b7:85:0a:
34:2d:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:01 2025 by rpki-client