Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: VZGXT+DqLiG/A/S8IxyBdbee9hDvWK2E5ZyRFw4/5gQ=
Subject key identifier: B4:93:0E:C8:E0:E5:BE:2C:CD:59:A4:CE:DB:AE:01:7A:3C:77:34:64
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 0197B6A1A681490FE2E6C0A1226CE57620DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 071E
Signing time: Sat 28 Jun 2025 13:02:16 +0000
Manifest this update: Sat 28 Jun 2025 13:02:16 +0000
Manifest next update: Sun 29 Jun 2025 13:02:16 +0000
Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: LNLSUwNjK7CpD9shS1KHzsKsxoGUh3dthxRLJsGonZ0=)
2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a6:81:49:0f:e2:e6:c0:a1:22:6c:e5:76:20:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Jun 28 13:02:16 2025 GMT
Not After : Jun 29 13:02:16 2025 GMT
Subject: CN=b4930ec8e0e5be2ccd59a4cedbae017a3c773464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:9d:f7:43:3c:cc:86:da:3e:14:57:6c:ac:
82:93:d2:ec:90:34:07:ea:f7:3c:c8:50:8e:c3:81:
5e:61:06:c8:29:42:41:4e:54:28:de:ca:25:27:9f:
23:85:9f:29:23:ca:80:02:b9:dd:cc:2b:d7:5d:0a:
8b:1c:29:54:73:96:01:4f:5c:11:9c:b3:14:eb:21:
46:c3:f4:dd:5a:b3:bb:6c:b8:03:28:84:e5:88:eb:
03:9b:39:1d:5e:3c:18:22:cf:43:b7:ce:8f:81:3f:
08:cf:09:9e:8e:59:73:e0:02:ee:4c:39:ed:c3:64:
d1:eb:26:66:65:8b:fa:7d:9c:97:b3:8b:3a:52:81:
87:8d:5f:f9:83:3b:8a:38:38:88:c2:b2:35:00:fe:
ba:f5:b6:15:7e:8c:8a:03:2a:b6:cb:63:80:ee:b9:
00:31:f6:53:7c:39:ce:91:f5:d1:38:d9:da:88:ca:
11:5f:2a:29:ed:99:a5:4c:d1:2a:5e:36:82:16:75:
17:c2:cc:67:90:8f:7a:e4:2c:ea:49:10:b9:40:1b:
b9:52:a8:f0:c2:24:e1:ad:0c:bd:6c:a7:45:df:25:
77:b2:60:5a:1c:b9:12:d7:0b:22:4d:d0:1d:18:6e:
4e:74:0e:c8:53:20:92:cc:91:1a:0e:6b:62:d1:16:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:93:0E:C8:E0:E5:BE:2C:CD:59:A4:CE:DB:AE:01:7A:3C:77:34:64
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ef:1e:83:cf:79:d8:d4:c9:4b:94:db:da:b9:e5:44:ef:b3:
8f:1c:d8:7c:06:36:a3:0b:f1:8b:40:b1:56:73:fc:7f:0a:b3:
69:a3:ff:81:c5:46:d7:e7:2c:f2:7f:a2:78:87:74:cf:64:74:
f8:95:d7:4e:2b:19:4f:7c:95:ea:1b:41:2c:19:a8:32:ac:d1:
e6:ab:5d:0e:e6:02:6f:1b:56:88:23:4f:bf:fb:d5:bd:74:26:
66:46:a4:5c:f9:6a:19:49:d9:37:6f:33:ea:ad:a5:a2:9f:d0:
b6:76:fd:c2:68:a2:d9:37:fa:b9:55:86:0f:5d:94:9a:03:f5:
ee:61:09:bd:14:a1:d9:21:f5:5c:1a:27:e5:00:f3:74:2d:92:
1d:40:6d:5b:de:34:6e:42:3e:7c:6d:92:61:c6:1a:fe:bf:14:
c4:b9:4d:78:c8:f7:08:65:a6:be:99:ab:79:0f:0d:df:af:c2:
99:aa:ae:cc:e6:41:f8:3b:2f:0d:29:19:38:12:a3:72:d4:3d:
53:a0:f4:08:29:d2:42:cd:04:82:2d:ce:1a:c9:1d:00:d1:eb:
d5:99:d4:63:f5:1b:33:73:b5:11:0b:4a:81:2c:b6:38:70:6d:
7f:46:68:27:3b:19:1c:cd:c9:1f:92:f0:10:19:35:c0:26:7b:
e6:8f:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:13 2025 by rpki-client