Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File: plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier: frUs19huUzDWFiIZ2JbnSNbBly9UUqD67HHWTOm/1Hw=
Subject key identifier: 7A:0A:DA:DD:16:16:85:63:37:F4:84:4F:7A:13:71:D2:9B:42:3F:02
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial: 01967454E10FA62BDF339AB575E9FAC4BA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number: 1516
Signing time: Sat 26 Apr 2025 23:00:41 +0000
Manifest this update: Sat 26 Apr 2025 23:00:41 +0000
Manifest next update: Sun 27 Apr 2025 23:00:41 +0000
Files and hashes: 1: FxcmiLw90HwD6v-zIS8fyho2YJk.roa (hash: dVrudewN+D6RoriyTNX+xlGTNvGmJTbMWvHDD/OWxyw=)
2: OlW7-Km7BJbiI8B78ArRrPEDqrw.roa (hash: stdFhe5anM2OeANujcXwTGGyVvRvWg0rJcjCkeIVupY=)
3: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: 9C3jU5abXeY6wNxxfczGnTEBxmg//QoX+IXrsOZ5d7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:e1:0f:a6:2b:df:33:9a:b5:75:e9:fa:c4:ba:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Validity
Not Before: Apr 26 23:00:41 2025 GMT
Not After : Apr 27 23:00:41 2025 GMT
Subject: CN=7a0adadd1616856337f4844f7a1371d29b423f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:bf:18:65:3b:ca:14:bf:4d:4b:09:d4:d9:
6a:f8:4f:31:76:b8:28:a7:d5:bb:43:87:d5:c9:e1:
3b:a4:64:ff:52:44:5e:76:6a:ff:b8:7b:90:5e:68:
22:78:49:1d:76:4a:4f:09:ac:7b:8b:1c:e5:a0:01:
1f:87:20:58:c7:cb:b4:ba:e6:0e:33:a6:2c:6a:2e:
dd:19:ff:28:ee:cc:09:c1:61:0e:ed:28:27:a8:8e:
c7:32:e6:cb:42:01:32:af:a7:87:ac:68:6b:b0:be:
60:5b:94:65:b5:57:5e:af:f6:98:77:8a:2b:23:ad:
ce:96:57:9e:17:a0:4b:10:8b:79:72:ec:d6:f6:f4:
32:ee:20:d9:ec:b3:5f:46:07:b9:22:19:27:18:4a:
2f:48:f8:e4:fa:ff:26:3a:94:07:e5:c9:ce:04:3a:
ea:56:0a:67:30:16:90:36:81:ca:cb:f6:cc:7e:ec:
53:6d:41:eb:67:1e:c6:56:d7:81:d2:cd:98:02:c3:
c4:b8:eb:35:8a:4f:62:39:0c:ec:9e:9e:0b:c3:d2:
46:7e:66:6e:d4:d4:fa:62:71:c0:48:37:0a:e7:68:
14:26:3c:c0:9f:30:f1:8e:a3:64:5f:6d:0e:bb:e3:
46:d5:5e:6f:bd:f1:ea:59:99:9b:15:37:54:44:e1:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0A:DA:DD:16:16:85:63:37:F4:84:4F:7A:13:71:D2:9B:42:3F:02
X509v3 Authority Key Identifier:
keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b5:06:bc:ed:b4:76:b2:5f:f0:31:3d:6f:6e:60:cb:97:41:
c2:d0:f6:56:a7:77:a9:81:ab:5f:ff:ab:bc:b7:49:3f:66:d2:
08:64:86:2d:dc:36:e1:78:30:90:bd:31:91:05:ff:f8:87:12:
3f:b4:93:32:89:1b:46:a1:18:25:b4:3d:32:53:6e:b5:be:c3:
16:7f:ac:f7:a4:b4:9e:46:1f:87:3c:92:35:f6:fb:44:0d:02:
36:1a:3f:4c:eb:aa:fe:13:6c:b4:13:1b:ba:49:10:00:c1:39:
92:89:78:66:1f:df:48:6f:20:e5:39:d6:24:8c:4f:5f:7b:79:
57:5a:d2:74:40:bc:3c:f5:ac:d8:4d:7b:d3:5a:0c:7d:98:57:
e0:04:cb:f9:11:30:fb:4e:ee:9a:77:79:9f:52:d7:c7:5e:ee:
3c:87:ca:60:22:74:33:4a:c5:43:a1:b0:84:c1:5a:b1:01:50:
e5:5f:6d:44:85:98:c8:14:d4:b2:9d:01:f9:bc:ac:a4:b9:0a:
d1:1a:ea:0e:ed:75:4b:e2:16:3b:93:32:0b:5c:d4:91:bc:b7:
c4:8c:76:cb:b2:4a:7f:2c:3c:ed:84:0f:96:c4:18:35:d7:86:
ad:ec:fc:a0:aa:fe:e3:af:5f:09:22:f3:b3:e5:67:76:db:ef:
2f:47:de:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0VOEPpivfM5q1den6xLqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NTA0NmQ4NWVjZjIwMWZiZWY1MWU4YmVhMWM0ZWQzM2Y5
NWIyNjgwHhcNMjUwNDI2MjMwMDQxWhcNMjUwNDI3MjMwMDQxWjAzMTEwLwYDVQQD
Eyg3YTBhZGFkZDE2MTY4NTYzMzdmNDg0NGY3YTEzNzFkMjliNDIzZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4G/GGU7yhS/TUsJ1Nlq+E8xdrgo
p9W7Q4fVyeE7pGT/UkRedmr/uHuQXmgieEkddkpPCax7ixzloAEfhyBYx8u0uuYO
M6Ysai7dGf8o7swJwWEO7SgnqI7HMubLQgEyr6eHrGhrsL5gW5RltVder/aYd4or
I63OlleeF6BLEIt5cuzW9vQy7iDZ7LNfRge5IhknGEovSPjk+v8mOpQH5cnOBDrq
VgpnMBaQNoHKy/bMfuxTbUHrZx7GVteB0s2YAsPEuOs1ik9iOQzsnp4Lw9JGfmZu
1NT6YnHASDcK52gUJjzAnzDxjqNkX20Ou+NG1V5vvfHqWZmbFTdUROGs7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoK2t0WFoVjN/SET3oTcdKbQj8CMB8GA1UdIwQY
MBaAFKZQRthezyAfvvUei+ocTtM/lbJoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUt
YmNjZDMyYWY5N2ZlLzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUtYmNjZDMyYWY5N2Zl
LzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbUGvO20
drJf8DE9b25gy5dBwtD2Vqd3qYGrX/+rvLdJP2bSCGSGLdw24XgwkL0xkQX/+IcS
P7STMokbRqEYJbQ9MlNutb7DFn+s96S0nkYfhzySNfb7RA0CNho/TOuq/hNstBMb
ukkQAME5kol4Zh/fSG8g5TnWJIxPX3t5V1rSdEC8PPWs2E1701oMfZhX4ATL+REw
+07umnd5n1LXx17uPIfKYCJ0M0rFQ6GwhMFasQFQ5V9tRIWYyBTUsp0B+byspLkK
0RrqDu11S+IWO5MyC1zUkby3xIx2y7JKfyw87YQPlsQYNdeGrez8oKr+469fCSLz
s+VndtvvL0fe4A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:22:34 2025 by rpki-client