Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: tIpqk8zOXr1WM2+dhttjHOweRR2kXg35fYlFyRxd36Q=
Subject key identifier: 5F:23:B4:1C:32:1F:34:A4:03:FE:54:0F:77:0B:C4:2F:90:4D:FE:3B
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 0197B5C4E95CD18E23534D0562F2710F0ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 0521
Signing time: Sat 28 Jun 2025 09:01:10 +0000
Manifest this update: Sat 28 Jun 2025 09:01:10 +0000
Manifest next update: Sun 29 Jun 2025 09:01:10 +0000
Files and hashes: 1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: o9YuKTsyCgjlBwKQBffqHkqwsZMG/aA95j/FyobrJOs=)
2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=)
3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:e9:5c:d1:8e:23:53:4d:05:62:f2:71:0f:0e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Jun 28 09:01:10 2025 GMT
Not After : Jun 29 09:01:10 2025 GMT
Subject: CN=5f23b41c321f34a403fe540f770bc42f904dfe3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ba:96:15:39:bb:f5:fa:8f:a5:f1:d2:84:d1:
3c:9d:8d:26:73:54:7f:fa:99:e4:79:2a:f6:3e:44:
4e:b9:cf:7c:90:e3:ad:36:a8:db:c2:3f:88:12:80:
dd:8a:28:c4:45:d4:12:17:cd:59:c8:06:75:7b:92:
07:f9:ce:32:e2:7d:f3:2b:6c:65:e3:36:b6:e2:6f:
7b:96:5a:c3:02:51:bb:df:24:72:81:53:2f:cb:4d:
28:d5:84:e9:7f:74:26:53:3b:de:bd:6f:79:8d:4e:
1b:b3:fa:61:73:c9:6c:44:ac:92:5f:a8:ee:a3:3b:
8f:2f:ee:9c:6b:01:a4:3a:a8:52:81:50:e9:df:1d:
ea:49:3e:61:2f:72:e0:52:8c:a6:81:57:f1:56:a9:
62:c2:6d:63:f9:ec:09:d6:5c:3b:f1:55:68:09:1c:
d9:a6:6b:9b:92:6c:2d:1b:e4:21:5e:46:bd:b6:98:
d8:68:86:9c:b3:5d:cd:3d:18:6c:e7:a5:6b:b3:67:
da:6b:d6:40:67:6f:8d:68:d5:00:86:ed:e3:b4:a2:
c8:48:5f:f8:84:94:2b:fd:b6:c3:3d:ca:5d:e1:22:
51:1a:4c:43:10:66:f9:97:3a:d6:8e:63:1b:ee:54:
ec:11:17:14:83:42:79:68:44:9a:01:10:ca:31:03:
0d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:23:B4:1C:32:1F:34:A4:03:FE:54:0F:77:0B:C4:2F:90:4D:FE:3B
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f6:d4:00:d4:11:ed:e8:df:48:7f:d9:be:65:db:8b:83:59:
6d:19:1e:c4:cd:2d:cf:97:0f:32:2d:45:4d:df:98:5a:00:55:
a9:15:94:2d:56:00:3b:47:64:12:86:e0:95:b7:3d:0e:b4:95:
6c:a6:f5:7e:de:2c:3a:1b:ae:07:4f:12:8d:38:97:71:23:7f:
b9:35:96:50:a6:23:1f:2e:e3:17:98:a0:84:9b:48:58:a3:29:
55:c1:94:38:d5:e3:9d:8a:bf:e2:72:a8:d2:70:f0:d7:87:51:
78:72:1e:0e:61:73:6a:33:ad:85:f1:6e:ae:2c:5e:66:12:4b:
a1:90:e5:d4:ea:d8:a9:0c:e2:d2:ad:28:bf:84:84:57:73:19:
44:fc:10:77:db:33:83:89:3b:b9:9d:54:55:dd:23:5a:54:b9:
fb:27:f2:d2:05:5f:4a:d8:19:ce:eb:24:ef:73:e6:b1:df:75:
64:b3:77:85:4f:68:9f:06:9d:27:1a:34:59:a5:15:0b:7e:85:
c7:54:e5:10:18:52:2b:99:73:11:dd:45:4a:f0:cb:c0:e9:83:
1c:57:58:ee:56:a0:15:b0:9c:19:86:55:a4:94:37:97:5b:b7:
69:1c:97:43:e7:d9:04:f8:bb:c1:23:e7:ee:2b:e8:b2:08:43:
6a:3f:74:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:41 2025 by rpki-client