Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: SQOpIWujZD6E/d5vu1n5uZvCndbzXaUL7J8YGazu61A=
Subject key identifier: 0E:32:67:12:9A:82:55:AE:D8:36:F9:A5:69:4C:19:C4:72:43:9D:15
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 0196BD80DE7F1A661F6866E8D7BF0E3B13DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 069D
Signing time: Sun 11 May 2025 04:01:01 +0000
Manifest this update: Sun 11 May 2025 04:01:01 +0000
Manifest next update: Mon 12 May 2025 04:01:01 +0000
Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: 2bnTsVeD6PBtxh72NxoyQY2SKzOcN25B4bJvlV9Q7yU=)
2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:de:7f:1a:66:1f:68:66:e8:d7:bf:0e:3b:13:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: May 11 04:01:01 2025 GMT
Not After : May 12 04:01:01 2025 GMT
Subject: CN=0e3267129a8255aed836f9a5694c19c472439d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:81:a5:db:31:00:29:04:70:75:ec:34:f6:
af:2b:33:db:e4:7a:f4:c8:fb:e0:a2:23:92:be:da:
b9:1e:2b:51:c7:09:e7:aa:62:8d:54:d6:0a:6d:b8:
1d:74:2f:92:23:2f:87:35:8f:70:ce:4c:40:7c:39:
8a:96:b8:51:93:fc:94:38:bf:58:22:f2:d3:48:09:
f9:b2:10:ba:68:56:57:9f:26:91:79:6d:2e:c4:ce:
82:71:b2:b4:cd:ca:d0:b9:cb:c3:0c:53:d3:bb:4e:
56:58:fc:3a:db:12:7f:b3:dd:c4:21:78:30:12:0b:
f3:85:6c:54:d1:f9:2e:0c:8a:f8:82:5a:05:74:0e:
c2:43:97:c4:fd:cf:cf:d5:c4:e1:6a:dd:cd:9b:93:
5b:52:86:01:64:5e:8e:fc:fa:49:29:8f:e6:10:3d:
58:07:48:59:db:73:01:98:b4:ad:90:ee:15:d6:2a:
56:1b:72:e8:78:95:91:b7:5e:e9:29:15:aa:0f:5f:
e7:64:d6:4b:cc:e7:e8:5a:8c:8f:b1:9d:53:80:22:
28:0e:fd:b5:bf:b6:92:34:01:40:78:18:c0:67:a5:
08:e8:5d:fb:b0:10:1d:8a:cb:4b:b8:7f:27:ae:ea:
ae:49:85:dd:e6:03:09:aa:5d:23:c7:cf:24:91:53:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:32:67:12:9A:82:55:AE:D8:36:F9:A5:69:4C:19:C4:72:43:9D:15
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:dd:8d:35:05:07:2f:c5:2c:79:1f:c8:a7:41:9d:0e:f6:3f:
59:c1:f0:dd:fb:3a:2f:c0:6a:aa:08:0b:25:b8:fc:b9:ea:40:
06:ac:69:ac:ae:52:0d:a1:9e:7a:e8:8c:a8:61:06:74:7f:95:
90:fa:3e:06:e6:d9:a6:9a:d0:6a:a8:f9:ce:38:34:2d:30:a7:
43:ab:c7:5a:a6:8c:63:3c:8f:87:8e:e8:c3:fc:f7:55:c2:cd:
61:a9:e7:5c:c1:f7:cb:73:2e:cb:09:7f:7b:c0:42:7a:5b:04:
69:fe:1c:ca:6f:64:f3:ef:7a:07:4e:74:13:0c:0e:42:5a:dc:
7e:1d:d4:fc:64:15:48:56:1a:b3:d6:9d:5a:9d:bf:63:1f:83:
4d:68:06:cc:e6:f5:d9:2d:9b:45:66:93:48:82:f4:b2:7f:54:
51:ef:80:93:45:d5:1f:db:e1:f7:b0:77:b9:80:dd:16:fa:55:
46:ef:e2:c1:d9:3b:d2:da:16:72:c8:ec:31:b9:37:3b:9f:2b:
de:62:74:61:a3:0c:d2:aa:31:c0:6c:9a:9d:19:33:35:ac:ef:
6a:eb:97:80:15:47:8a:e1:32:ff:7f:51:21:35:4c:8f:0c:ea:
2c:fe:c0:c7:27:7d:83:89:32:9e:6b:09:98:8b:6a:66:ab:2f:
83:72:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:35:26 2025 by rpki-client