Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier: fncH+jg+BQOCvwBLMoujW0tq78zkBQwDbPQqHktx4OM=
Subject key identifier: F3:A0:7A:F6:7F:D1:30:28:C5:16:85:41:8F:7D:83:BA:64:89:1F:BF
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial: 0196827E9FA2D32590E88072C39556948618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number: 0171
Signing time: Tue 29 Apr 2025 17:00:58 +0000
Manifest this update: Tue 29 Apr 2025 17:00:58 +0000
Manifest next update: Wed 30 Apr 2025 17:00:58 +0000
Files and hashes: 1: NJyfKGT7eHHPjQOAXKwVNKCjCYs.roa (hash: XDn/F11FiIWe6mjWs24N5BRlzAoQS5rK8vutFukkZcU=)
2: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: lHFSq0NNmcDrYbs9bFlDNkn4zPRje/KZwPPDiqMz3y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:9f:a2:d3:25:90:e8:80:72:c3:95:56:94:86:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Validity
Not Before: Apr 29 17:00:58 2025 GMT
Not After : Apr 30 17:00:58 2025 GMT
Subject: CN=f3a07af67fd13028c51685418f7d83ba64891fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:76:57:01:14:48:68:e8:44:a1:c7:50:cc:c6:
f8:78:d5:f4:b5:da:59:75:92:c5:9c:cc:8e:7c:94:
7a:58:be:07:84:f7:6f:f0:eb:26:0f:4c:42:5f:5e:
1b:bc:d1:65:8b:5a:e5:39:22:fd:6d:4d:82:64:4f:
6e:cf:40:6c:b6:b1:8f:3d:c0:97:84:65:52:9a:8b:
00:0d:84:a9:a3:56:c7:30:eb:3e:c4:d1:e5:b3:ec:
86:ec:be:04:79:1b:43:4a:bd:e0:eb:3c:8d:b8:86:
11:ca:38:2a:69:39:60:83:b9:df:ed:c4:3c:33:48:
ab:c0:bf:d5:6d:9f:fe:28:65:98:fb:6c:d9:c4:3c:
0c:d2:82:73:20:cb:e1:bc:9f:07:8a:21:94:84:9a:
47:46:3b:d0:46:17:18:44:5d:75:10:95:47:15:b8:
b7:52:66:8a:fb:9c:b6:eb:9c:00:18:57:d2:ea:bf:
a4:1b:56:78:9b:85:d0:f5:64:6a:cd:f0:02:3d:74:
6d:f5:ed:30:fe:43:3a:39:02:b9:de:a0:b3:d2:33:
af:17:7e:e0:e3:5c:d5:55:2e:5b:12:58:ca:9d:49:
30:ed:a6:87:91:d2:6a:f6:e0:d6:0b:54:dc:7b:42:
ad:6e:1a:86:bb:4f:3f:a5:c8:db:13:c6:9c:84:80:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A0:7A:F6:7F:D1:30:28:C5:16:85:41:8F:7D:83:BA:64:89:1F:BF
X509v3 Authority Key Identifier:
keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9d:de:20:c2:8a:12:3f:68:03:f9:41:0a:15:8c:cf:99:eb:
1c:71:55:6f:94:df:9f:6b:c5:30:7a:9c:a4:a3:f9:ba:a1:4b:
67:de:6f:55:e7:b4:0c:c9:c3:9c:c5:ee:6b:6e:04:71:8f:09:
93:3d:9d:49:c3:19:3e:74:01:94:5a:93:b1:14:77:68:00:21:
e3:82:97:c6:75:23:34:e8:d5:4f:31:7a:e4:c3:eb:e7:55:10:
80:45:d6:1b:2d:7f:2f:82:6c:39:1e:5c:b7:be:e8:c2:aa:42:
ea:b3:0a:31:6d:2b:c5:75:e7:c6:12:50:16:f1:92:d9:25:26:
51:32:19:d7:f8:ff:87:dd:59:61:60:cf:ad:2b:ad:f9:65:fa:
0e:7b:26:a4:9f:77:a7:0c:8f:b7:eb:de:30:63:aa:96:13:3c:
1f:5b:0e:55:77:38:1d:0c:21:47:0c:0e:1d:36:c8:72:aa:fc:
af:e2:24:3d:20:38:f0:0e:a1:0e:4b:7a:a4:2f:e0:f6:62:c2:
74:a0:9c:62:20:f7:77:01:08:f3:58:73:68:d6:8f:2b:3e:43:
41:d8:60:19:85:ca:49:a9:b9:30:3d:87:37:96:6f:40:d3:af:
fa:88:08:ae:aa:d8:aa:75:78:6c:f7:41:08:6f:cc:59:f5:91:
bb:eb:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:18:37 2025 by rpki-client