Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json)
Hash identifier: lcIlPEdhEcrM4EtAI5PAVm2riaadlDfvidyd2rBKh5w=
Subject key identifier: 51:A8:04:8E:7F:4E:03:8A:55:79:06:7B:B5:3B:7D:86:81:D0:FB:BE
Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Certificate serial: 0196AA30945E7C731D291D5D6CD1C7D511DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
Manifest number: 1525
Signing time: Wed 07 May 2025 10:00:32 +0000
Manifest this update: Wed 07 May 2025 10:00:32 +0000
Manifest next update: Thu 08 May 2025 10:00:32 +0000
Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: oaQaQJhLMN/Gx8JkQjUVawtqox6c5QXdwzoVSGxQ3zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:94:5e:7c:73:1d:29:1d:5d:6c:d1:c7:d5:11:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Validity
Not Before: May 7 10:00:32 2025 GMT
Not After : May 8 10:00:32 2025 GMT
Subject: CN=51a8048e7f4e038a5579067bb53b7d8681d0fbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6f:8c:1e:4d:97:31:9e:19:b2:68:ea:17:95:
05:15:f2:fc:86:36:4b:bb:01:83:2f:78:2c:29:ea:
b8:93:ac:4f:be:95:a9:b4:24:5c:fb:89:05:67:be:
d2:2f:a0:d4:c7:f9:3f:44:3f:b8:fe:ea:7b:3f:cc:
2f:32:1e:c2:25:78:68:67:42:92:04:48:9d:62:d5:
44:4a:6e:0c:c1:b5:cf:70:52:9b:f8:e8:0a:49:59:
32:f5:d6:1c:e3:b3:5b:80:e9:bc:6a:f4:ea:a8:80:
cf:8f:4e:56:fb:f0:c9:d3:92:05:28:42:f9:76:85:
cc:d8:de:bf:bc:38:f5:73:9c:73:6c:1a:09:36:ec:
ae:4e:18:1b:cb:18:34:77:8d:66:30:73:ea:c8:7e:
9d:a1:72:93:95:6f:31:98:cd:0a:69:45:c8:1b:89:
35:65:4c:86:cc:58:4d:68:39:4d:e3:f5:5d:e8:79:
8c:67:17:ae:0c:cd:d6:3a:06:ea:9e:ae:e1:3a:4b:
19:b8:14:09:a7:ca:c4:47:cd:29:4a:e3:e5:6d:96:
fc:29:de:ee:1a:ee:71:0b:4b:f7:66:bd:14:93:03:
e8:51:39:e0:01:5c:b0:cf:ea:9f:53:c5:41:d1:ea:
f7:25:c2:ab:18:eb:7d:43:29:c8:ff:58:59:77:09:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A8:04:8E:7F:4E:03:8A:55:79:06:7B:B5:3B:7D:86:81:D0:FB:BE
X509v3 Authority Key Identifier:
keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d6:4c:6e:2c:4f:db:73:0f:98:cc:34:de:d3:72:ec:04:84:
43:50:d6:5c:cf:09:e7:10:43:4a:cb:92:63:7e:ac:12:b2:5a:
a3:f6:c5:b8:2c:fe:b5:02:a0:c5:39:b6:d2:55:6f:25:2a:ff:
68:1d:bd:a8:5c:5e:f7:69:b5:0e:4c:7a:de:f0:e1:fb:2d:8d:
50:21:24:48:59:58:0c:a4:11:a3:56:92:52:62:9d:16:19:3d:
4d:59:fb:38:e6:59:d4:e7:89:43:4a:06:0c:09:44:c7:9b:fc:
f0:df:8c:f9:1a:fa:e3:72:02:4d:09:27:8a:1f:cb:e6:f5:4e:
b0:5b:55:7d:2e:d6:57:54:e7:bd:a1:19:a6:ec:b2:22:6f:bc:
be:1a:ca:9a:d5:ff:12:c1:12:7d:7b:8d:91:2d:c9:aa:8f:b8:
78:66:a6:8c:aa:75:9a:74:f4:34:ff:b0:83:9f:f7:69:17:7a:
ff:bf:71:3f:95:be:7b:41:05:b3:58:8b:5c:10:e8:5c:8f:1e:
97:8a:21:63:dc:d3:a9:1f:4b:98:1c:94:a0:c7:0c:31:0a:94:
4c:f0:ab:83:39:0d:7b:ef:c8:c9:a6:b4:7f:70:34:90:17:e7:
46:d7:c6:c1:bb:22:96:08:03:09:76:37:e8:cb:de:88:52:cc:
0a:40:f2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:39:36 2025 by rpki-client