Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File: plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier: 9sPe1ug+BimvARap/Uie2y0AugDfALAWrBm87YjIkXI=
Subject key identifier: 35:3D:94:E8:AE:D0:D7:F9:84:C1:15:C2:E5:08:81:00:50:B5:D7:FA
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial: 0196B9DAC5BB15C3CDA4FCC4A4BE14FB06C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number: 153A
Signing time: Sat 10 May 2025 11:00:44 +0000
Manifest this update: Sat 10 May 2025 11:00:44 +0000
Manifest next update: Sun 11 May 2025 11:00:44 +0000
Files and hashes: 1: FxcmiLw90HwD6v-zIS8fyho2YJk.roa (hash: dVrudewN+D6RoriyTNX+xlGTNvGmJTbMWvHDD/OWxyw=)
2: OlW7-Km7BJbiI8B78ArRrPEDqrw.roa (hash: stdFhe5anM2OeANujcXwTGGyVvRvWg0rJcjCkeIVupY=)
3: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: XDHPrgXm9tzbEkRUh5Ibw2jIxT5wxAnuLh9wNTeP/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:c5:bb:15:c3:cd:a4:fc:c4:a4:be:14:fb:06:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Validity
Not Before: May 10 11:00:44 2025 GMT
Not After : May 11 11:00:44 2025 GMT
Subject: CN=353d94e8aed0d7f984c115c2e508810050b5d7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9f:0c:4e:82:86:24:88:25:7f:58:6d:0b:a6:
8c:27:01:de:00:9a:cb:2e:77:24:07:d2:72:64:28:
0a:93:6d:4e:a4:c9:f1:e6:04:c8:90:2f:da:1a:d0:
b2:cb:45:49:63:28:0f:c2:0d:dc:7b:8c:b1:45:99:
9d:92:bc:8e:21:5c:47:99:57:11:f9:7d:b6:e0:a7:
07:95:62:31:8a:39:48:35:df:c9:c2:25:78:19:f9:
89:7f:07:c3:96:74:30:01:23:d8:ab:cc:ea:c9:80:
82:a4:19:e7:02:f7:17:c8:35:0a:d5:68:d9:d0:10:
c2:30:c8:b8:8d:d5:d3:59:2d:58:f0:0a:57:92:03:
c6:9d:5a:78:2e:f2:28:fd:75:10:83:fa:06:f1:ea:
f3:e3:27:63:f7:1d:48:ef:b1:b4:6f:c6:b6:da:91:
c4:88:73:8f:f4:2c:82:d3:0c:58:82:b2:f0:56:07:
74:f2:8c:d4:74:02:50:38:8a:2e:02:e3:93:08:b3:
20:0e:b2:58:23:b4:29:69:64:04:3b:bc:b9:ec:59:
ba:bb:e4:32:b5:fa:c0:5f:42:d8:7c:8c:59:4a:b0:
ab:69:42:0f:bc:fc:b6:fc:dd:83:97:67:0a:e1:ea:
33:77:ab:2e:f0:c0:0a:e8:05:60:b8:d2:b2:66:ce:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3D:94:E8:AE:D0:D7:F9:84:C1:15:C2:E5:08:81:00:50:B5:D7:FA
X509v3 Authority Key Identifier:
keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3a:33:7a:2d:7e:bc:1d:4e:d4:c1:85:a7:65:ad:ae:2d:0c:
be:67:da:3d:2f:6d:05:65:aa:f4:70:fd:98:35:f3:f8:89:03:
0c:e8:94:16:5e:51:63:f0:e2:f0:56:cc:d8:f7:34:37:73:de:
37:e1:07:d3:c4:2d:a0:ac:bf:f3:63:fa:c7:e5:0a:56:37:88:
2d:74:e7:ab:22:8c:9a:77:25:9d:7d:b4:07:12:5c:66:9f:49:
5a:46:1a:a0:a6:30:3e:c9:06:e7:f9:cb:de:92:06:98:a3:b0:
22:a3:7c:9f:40:c7:65:fc:7d:d8:07:d7:ae:7a:f8:e5:13:0d:
08:18:37:16:22:2b:89:e5:f0:3f:0c:25:1c:05:5f:6e:a7:eb:
b9:90:74:34:37:41:b7:f0:d4:9e:87:7f:62:67:30:b3:53:05:
40:30:7e:ac:ec:c1:15:69:18:89:56:1a:34:b5:85:3b:0f:51:
e0:2f:7a:d7:27:1b:14:3c:98:01:ca:97:c1:30:0c:3f:8a:6e:
a2:be:c1:38:21:35:a4:12:10:e0:85:35:90:ef:4c:83:15:26:
9a:bf:20:0c:6d:c7:06:ea:18:1b:02:b5:43:2f:10:cb:ef:20:
d9:97:83:28:00:93:79:59:9a:f2:2c:f0:5a:4b:cb:70:18:65:
3d:ee:e2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:30:48 2025 by rpki-client