Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: KSqSxncDvZNeRfO2FAaKp5P4zJTRx5FfMIo0/wr4zX8=
Subject key identifier: 7C:03:07:32:6B:50:ED:3E:F0:44:ED:2F:9E:7A:F9:AE:5B:DE:A6:FD
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 01976E5069D8EEB20DCB50A99F019634D352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 04FC
Signing time: Sat 14 Jun 2025 12:00:52 +0000
Manifest this update: Sat 14 Jun 2025 12:00:52 +0000
Manifest next update: Sun 15 Jun 2025 12:00:52 +0000
Files and hashes: 1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: N+rn4DkROD2GMseEO/BD8U9UuMtyY1TNZIDHceD+IVo=)
2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=)
3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:69:d8:ee:b2:0d:cb:50:a9:9f:01:96:34:d3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Jun 14 12:00:52 2025 GMT
Not After : Jun 15 12:00:52 2025 GMT
Subject: CN=7c0307326b50ed3ef044ed2f9e7af9ae5bdea6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:17:e2:ff:69:60:fa:a6:28:52:d8:e4:f2:
d5:97:f3:a0:94:d6:ec:5d:c6:d6:7b:96:66:b3:de:
d4:97:5b:3a:5d:bf:f0:83:9b:59:09:0b:9a:c8:e8:
52:05:95:3a:72:dd:96:4b:8c:c5:e6:39:10:83:8e:
95:a5:af:85:e3:57:4a:83:e4:ef:57:f3:6b:83:06:
1b:0e:87:14:41:bf:ec:89:35:a8:87:c0:be:2a:55:
3a:72:6c:a7:47:af:76:86:76:06:0b:f6:e7:d7:d6:
c2:86:6b:4a:f9:3e:25:2e:e6:cb:f6:bc:75:d4:9c:
78:de:10:a2:1e:11:b1:cb:3b:01:17:00:38:4b:33:
c1:46:d2:04:7d:8d:fe:71:a2:a3:3d:37:c6:c9:48:
5e:be:21:5c:16:50:11:a3:ec:99:7d:f4:31:1b:06:
8a:a5:32:7b:ee:7e:07:7d:10:df:e4:e9:43:35:8a:
84:f1:60:84:19:92:18:84:28:9d:cf:ce:31:58:26:
19:c4:d3:3b:fe:44:60:27:96:b2:46:19:6a:60:f7:
f2:62:6a:69:37:4b:8b:c1:61:77:63:68:81:e5:4f:
39:9e:94:a6:ee:25:71:2b:60:08:f5:18:16:f2:9e:
d2:c5:ea:b2:cb:d8:92:ad:07:20:5e:79:00:9a:b9:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:03:07:32:6B:50:ED:3E:F0:44:ED:2F:9E:7A:F9:AE:5B:DE:A6:FD
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:74:9f:92:0f:8a:e7:f7:7e:e4:9d:41:5b:0b:f6:67:8b:3a:
7c:52:5e:0f:67:57:d5:fc:29:42:60:05:7e:4b:6a:db:f1:c6:
f9:c2:77:b8:41:62:0a:53:18:e5:fa:4d:fd:89:50:e6:e9:ef:
fe:14:52:cc:40:1e:12:55:2d:5d:74:ba:b8:65:de:25:ca:a5:
12:af:d5:af:a5:2b:2b:d7:fd:2e:fb:5e:c4:45:60:51:6d:27:
ac:6c:b5:17:3c:cd:5b:7e:cf:53:30:9b:b8:5f:81:55:32:5a:
f7:10:6a:69:d6:f5:37:39:7a:53:8f:cf:b9:30:75:8b:97:ae:
f4:ab:f2:3e:90:d7:6a:3f:8d:0b:e4:c1:43:4e:e7:49:5e:ea:
c1:d8:4b:0b:dc:5c:e8:83:df:ec:5d:6c:6b:f4:0b:08:f9:56:
02:d0:00:fb:df:bc:93:01:fa:d3:89:6e:47:61:38:52:4c:89:
ea:c5:d3:a9:89:f4:a6:e3:2a:c2:99:78:1d:66:e1:d7:cc:be:
f6:45:ad:33:fa:cc:6c:cc:25:95:b0:48:98:b7:ee:50:49:f7:
d0:66:54:3b:84:2e:ac:56:b1:43:69:e8:95:90:9b:31:7a:37:
2b:8d:fa:d6:23:97:b8:a8:12:a4:28:89:9c:94:93:a2:7c:0f:
66:e5:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:59 2025 by rpki-client