Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: ur9tD+l/TTDtAmSxRw337pEkKd+LB5PLStJKURWVMoQ=
Subject key identifier: 8C:00:8A:15:89:8D:1E:DA:35:21:4C:52:54:AD:28:FB:BE:FE:3F:74
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 01969DBE592D76D1FBC7952B46D372806526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 0490
Signing time: Mon 05 May 2025 00:00:19 +0000
Manifest this update: Mon 05 May 2025 00:00:19 +0000
Manifest next update: Tue 06 May 2025 00:00:19 +0000
Files and hashes: 1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: b5OMXTOfVkrIH1iVNMrtQ4r/qc+xO/hsgM2iJAR9DlQ=)
2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=)
3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:59:2d:76:d1:fb:c7:95:2b:46:d3:72:80:65:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: May 5 00:00:19 2025 GMT
Not After : May 6 00:00:19 2025 GMT
Subject: CN=8c008a15898d1eda35214c5254ad28fbbefe3f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:52:ca:7e:68:3b:80:7f:f7:b0:41:d9:d2:
7b:18:c0:23:ec:d6:8f:6c:b3:d2:8a:99:96:b9:ee:
4a:99:4e:fa:7c:e0:65:46:fa:16:70:bd:ff:2d:92:
9f:71:7b:13:78:ba:2f:3f:02:45:bf:9d:63:8a:c4:
d5:94:a8:9b:af:75:31:ee:87:60:09:86:58:66:15:
b4:38:69:03:50:d9:75:68:d1:31:ff:0f:59:f2:fb:
cf:19:7a:40:ff:9b:ab:5b:ba:03:06:d8:bc:b6:c4:
bd:c1:7e:6a:53:d9:bc:6e:ff:af:41:e2:17:36:5e:
9d:6b:fb:a6:9c:7e:4a:c9:bf:90:4d:68:73:b0:a7:
9d:70:75:64:40:44:d0:2b:c0:6d:de:e8:39:fe:14:
44:09:d2:fd:d6:88:ba:d1:ac:bc:d0:8a:8f:1e:f8:
c5:4f:cc:18:cd:c6:ae:37:ec:b9:cb:ec:fb:3d:da:
9c:a9:c4:03:a3:f9:a2:66:9c:f3:c2:cd:0c:7d:0e:
3f:13:8e:e5:ec:38:cd:4d:62:dd:80:0e:79:4d:bc:
04:d8:22:b0:52:d1:ea:08:ab:ff:f1:44:56:e1:0f:
dd:63:60:0d:4f:b5:37:51:8f:d9:a3:e1:a8:e6:9d:
f7:4a:a5:f8:41:7f:1c:6c:17:09:fd:3a:42:2f:fc:
f8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:00:8A:15:89:8D:1E:DA:35:21:4C:52:54:AD:28:FB:BE:FE:3F:74
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bb:ec:bc:aa:45:fe:62:2a:af:03:16:26:6b:2e:fe:dc:f7:
20:b6:03:78:51:c4:27:f0:67:d5:20:49:d9:21:ec:06:a1:a1:
ab:ad:84:d4:cb:40:d7:90:7a:c1:67:f4:98:07:cd:66:d3:4c:
05:d3:1b:82:2b:db:05:50:e2:1e:4e:6c:7f:a3:73:70:3a:f3:
ce:56:77:17:5c:89:3e:40:c4:55:62:3c:8a:b8:51:65:18:eb:
f6:09:6a:b2:a5:84:be:4a:f0:1b:17:6f:6f:86:e2:28:f3:b0:
e3:5b:50:18:87:d9:5d:a6:2d:43:98:99:33:17:ef:a6:94:b5:
bb:fc:17:ce:35:32:c5:1e:71:62:29:85:ae:86:76:77:e5:66:
89:ce:17:f9:c0:a0:eb:86:2b:c3:c0:c2:2a:14:5a:19:f0:6e:
6a:0f:66:81:ad:5c:08:f5:f2:b4:21:1e:1a:2e:32:fe:61:64:
50:26:5b:aa:e4:4c:ab:e4:02:b0:0c:fb:63:09:bc:69:96:43:
bb:bf:a4:1b:1b:e0:dd:c3:03:e6:a5:72:b0:51:65:38:68:0f:
73:86:93:50:de:23:91:ea:fd:20:cc:1b:35:c5:25:a6:43:f2:
cb:62:a2:c8:d0:af:b9:87:14:64:11:6d:14:5e:d6:63:17:fc:
93:ee:5c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:58:53 2025 by rpki-client