Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json)
Hash identifier: M3Vt2BvVdwoxhKYv7GtHtasgGvejh2OkB8kSavqNxw4=
Subject key identifier: C5:EE:07:9F:9D:69:93:FA:E9:99:BD:B2:06:21:7D:57:BC:37:9E:4A
Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Certificate serial: 0197B88FFE39AB09D8E4E6F64C4269872ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 22:02:13 +0000
Manifest this update: Sat 28 Jun 2025 22:02:13 +0000
Manifest next update: Sun 29 Jun 2025 22:02:13 +0000
Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: nG1idzLgkLPSbAs+txt7b234hdExzoASHRLhWo4DmJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:fe:39:ab:09:d8:e4:e6:f6:4c:42:69:87:2e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Validity
Not Before: Jun 28 22:02:13 2025 GMT
Not After : Jun 29 22:02:13 2025 GMT
Subject: CN=c5ee079f9d6993fae999bdb206217d57bc379e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:7a:49:2e:68:80:9f:58:7f:46:ec:53:dd:
6c:66:9a:ae:30:c4:80:72:18:90:3a:d2:f9:48:3e:
a2:70:61:49:0e:68:64:bb:43:74:2b:32:c0:66:d4:
8b:2c:75:f0:2e:95:48:9d:0d:24:ce:b8:a7:60:b8:
fe:85:9b:a4:19:e3:d2:57:88:9d:28:75:db:e5:1f:
8a:12:94:ef:c9:95:2c:25:90:da:53:7b:1d:9b:57:
83:2c:48:fa:65:03:25:2e:9a:9c:46:5f:37:50:14:
27:c3:82:26:c1:30:b8:7e:7d:85:ee:cc:15:b8:97:
9c:08:59:dc:df:24:28:a0:b6:e7:b8:c7:8f:ef:5f:
57:92:d7:c0:b0:e1:4a:4b:a3:00:5d:de:a1:3a:99:
b3:42:8e:ca:27:fd:8d:df:3b:7d:83:f1:10:f0:b8:
25:22:9a:ba:e1:76:dc:eb:03:f5:f2:cf:55:a2:24:
42:99:58:00:34:52:f8:21:15:1e:46:e3:18:92:a4:
d4:03:02:59:17:82:b9:50:0d:9a:e2:d3:23:7e:d7:
a1:4a:ce:7c:72:5f:ef:ed:55:12:09:17:3d:b1:ba:
c5:12:e7:92:92:1d:92:c3:a9:30:a0:4f:16:24:1a:
89:4a:39:af:35:95:99:e6:77:14:19:21:e2:8d:e5:
92:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EE:07:9F:9D:69:93:FA:E9:99:BD:B2:06:21:7D:57:BC:37:9E:4A
X509v3 Authority Key Identifier:
keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:80:18:58:75:99:3f:e9:db:f3:9d:5e:bc:d9:94:d7:0d:5e:
d8:a9:43:6c:c6:16:2e:c2:61:58:79:df:a5:8a:a3:d3:0d:65:
ae:1d:2d:e7:cd:13:8e:c7:ef:eb:10:9e:03:a0:c3:9a:27:92:
44:da:92:b6:eb:02:fa:21:fe:b7:d7:39:8a:bc:32:13:07:de:
89:a1:8f:13:95:c1:e6:87:1c:20:28:09:6f:e2:97:58:b8:30:
ff:65:28:3b:00:a0:c0:81:8e:ce:03:d3:bc:47:bc:bd:b1:d6:
dc:e3:e8:b3:3f:19:d3:4e:d9:98:2c:1b:fd:9a:93:5b:24:1c:
31:a8:f4:f5:bb:1e:6f:5e:4f:4c:04:54:1e:eb:a9:1c:50:7b:
fb:24:ff:9b:e0:d1:db:17:1d:8e:e8:0d:d8:5b:04:e6:25:2e:
48:3e:5d:b8:d9:34:98:4e:8d:ff:8a:05:2c:3a:bb:61:f8:73:
33:10:43:c6:07:b7:96:cb:e8:29:0b:b0:7a:4e:61:4e:c6:d0:
16:d1:9e:0c:b8:13:9e:de:6f:50:0b:8e:06:14:cf:56:c1:cb:
22:8e:6e:ab:20:d3:b2:2e:d9:97:96:a6:f3:0a:e5:b5:7d:f7:
58:26:48:2c:95:b4:53:f3:dc:00:3a:4f:b3:70:94:2f:49:b4:
35:9c:4c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:18 2025 by rpki-client