Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: MqMyqkOJBV+TFjxfomReD+/y2T93aGFBlykheHT80EA=
Subject key identifier: E2:91:BB:35:4F:D1:3A:AE:FB:E2:0C:D9:17:E6:0A:15:89:73:91:BD
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 01967AFBBA3933AD862B0F531BAD712CA1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 047E
Signing time: Mon 28 Apr 2025 06:00:39 +0000
Manifest this update: Mon 28 Apr 2025 06:00:39 +0000
Manifest next update: Tue 29 Apr 2025 06:00:39 +0000
Files and hashes: 1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: zrV12uCqMCyRffB2TS9j5zs/kDQ2T1aw6s9OQp3RF0k=)
2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=)
3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:ba:39:33:ad:86:2b:0f:53:1b:ad:71:2c:a1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Apr 28 06:00:39 2025 GMT
Not After : Apr 29 06:00:39 2025 GMT
Subject: CN=e291bb354fd13aaefbe20cd917e60a15897391bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9f:8c:8a:f5:dc:11:f2:55:4a:11:d6:54:56:
b6:65:ef:e3:e5:06:71:98:79:c3:b8:4f:d9:d0:26:
25:eb:d7:da:b3:fb:0b:53:fe:d7:16:6e:dd:48:db:
c2:ae:27:cc:39:45:a9:a9:bf:9c:55:be:24:a2:6f:
f6:fd:12:ee:39:6d:44:9e:3a:57:24:80:50:9d:2a:
7e:fe:18:1a:35:9c:30:03:8d:01:f3:67:c8:a6:da:
05:1a:6f:8f:79:48:39:82:3e:da:37:c6:f4:b0:79:
bf:e5:a5:17:6b:4f:d0:ab:62:e3:65:50:18:ba:96:
f1:bb:67:9c:f3:b8:8e:69:e9:69:22:fb:b0:01:86:
2c:b2:f5:88:18:15:37:99:50:a4:59:9c:e8:8c:75:
af:74:c5:40:44:66:37:36:72:ae:f8:36:e4:91:b9:
2e:7a:15:f7:09:97:e1:67:c2:5a:2f:c9:c1:65:a1:
2e:f6:85:de:e7:47:4a:f5:e3:ca:03:1a:bb:7f:c0:
0f:ce:58:78:60:72:d8:94:8f:4d:e1:05:a4:35:51:
f5:03:00:3f:b8:15:4c:0e:11:84:a5:7e:42:d1:c9:
73:03:25:9f:46:5c:81:c2:05:63:0a:6b:cc:66:ac:
9a:04:47:c6:f5:cc:8c:e2:3b:57:a8:fa:77:bf:9c:
13:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:91:BB:35:4F:D1:3A:AE:FB:E2:0C:D9:17:E6:0A:15:89:73:91:BD
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0f:29:bb:94:4f:b2:4e:66:c7:ba:76:9b:35:32:dd:fc:dd:
18:21:fa:7b:51:64:a0:fe:3d:a4:59:65:7c:5e:aa:b2:4e:5d:
2c:03:90:fa:a1:ac:ad:2e:96:8e:14:77:e9:19:13:7f:90:93:
9f:b9:ef:ed:13:b8:54:59:1b:e3:62:37:87:7a:d6:e1:da:b6:
70:44:45:55:22:f0:b0:64:f2:2a:f6:d4:97:56:cf:87:67:5b:
cb:3a:bf:a2:85:68:90:01:59:17:79:50:52:06:4b:2a:d2:79:
66:8d:50:28:b7:6b:3c:28:02:52:6c:d2:81:fd:e9:5a:5b:33:
08:80:69:f8:19:42:d4:a0:e1:d4:ce:ae:79:fa:3b:cf:89:9b:
99:4f:22:9c:1b:06:2d:77:0d:aa:9f:7b:5d:ed:00:64:8a:bc:
8c:b5:4d:3f:7d:2f:19:91:75:54:c3:fc:8c:94:0b:b0:6a:2d:
63:66:a0:7f:dd:74:bb:ed:fb:a9:59:7a:c0:a6:02:06:f4:43:
ff:bd:42:06:c3:23:35:d8:d7:b7:b3:e5:39:6e:29:78:6d:d4:
51:cd:48:65:67:d7:14:a1:07:f3:cd:e5:15:5e:44:e4:13:da:
ff:9c:1a:b4:e2:c7:97:6c:3b:ec:c9:2b:1f:d9:a2:eb:64:bd:
6c:9a:4b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:14 2025 by rpki-client