Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
File: Pls0eWfOpnu2K2nSWazeS4-elBc.mft (raw, json)
Hash identifier: 4yktzcS+TzpgEoVIeqZUxBOV+LaMO30Pz1Nn+Ewumx0=
Subject key identifier: 6A:45:84:32:F4:08:A3:82:B5:72:7A:11:37:44:17:83:1D:1D:3D:D6
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Certificate issuer: /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial: 01969E63445BD816EAEAC99182D975C6ADDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
Manifest number: 0A3B
Signing time: Mon 05 May 2025 03:00:27 +0000
Manifest this update: Mon 05 May 2025 03:00:27 +0000
Manifest next update: Tue 06 May 2025 03:00:27 +0000
Files and hashes: 1: Pls0eWfOpnu2K2nSWazeS4-elBc.crl (hash: uZBC1gwQC3XBSVV7AAmkpMnzenjWliXi7eMgIIjovSc=)
2: yeykCTxRfXSLEqjo1MZ7zObmrks.roa (hash: 1vVWF5KJNfMy/yYL5Sp0YWKLB5R7wsPTTiR6VRMJgCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:44:5b:d8:16:ea:ea:c9:91:82:d9:75:c6:ad:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Validity
Not Before: May 5 03:00:27 2025 GMT
Not After : May 6 03:00:27 2025 GMT
Subject: CN=6a458432f408a382b5727a11374417831d1d3dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:85:27:3c:63:16:74:82:15:b4:f1:82:74:
2e:d3:86:37:65:1f:b9:87:2a:9f:76:2e:d8:e9:d9:
09:e9:61:8d:1d:36:5d:69:c9:16:5d:a2:95:e9:ee:
ca:49:b2:da:fe:94:7c:e5:6e:b0:e0:1d:fc:7b:57:
a4:fa:a5:6e:d9:50:ff:f6:c1:33:cd:99:9f:ab:74:
1c:37:02:25:24:55:58:38:97:b2:0d:00:c1:42:07:
99:fe:25:bf:b1:a1:6b:e1:95:78:d8:94:99:21:3f:
31:22:b1:b9:23:58:b5:c3:69:82:39:a2:b1:fa:c8:
a4:a4:65:5c:b0:fd:cf:75:e4:b5:ed:0f:96:db:eb:
03:cb:69:67:4d:27:99:38:90:87:37:22:a0:68:28:
a7:28:b3:f9:bb:f2:ac:9f:ce:de:32:17:74:c6:f5:
6c:5a:02:8b:42:df:d8:d1:91:00:92:28:98:ec:06:
ad:08:03:0c:d0:38:03:25:3b:0c:60:1b:c7:46:7a:
3f:ed:eb:66:84:e1:40:a8:f3:cd:61:b0:1e:f5:80:
09:3d:09:bd:f5:26:12:be:e6:4a:19:1d:72:a3:6b:
a8:6d:2d:7a:98:b4:03:d9:d1:a5:7f:14:0f:84:2e:
1b:5f:e5:d1:81:f6:0a:b2:0e:d0:b2:1f:00:08:2a:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:45:84:32:F4:08:A3:82:B5:72:7A:11:37:44:17:83:1D:1D:3D:D6
X509v3 Authority Key Identifier:
keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a5:2f:f0:7d:2b:5e:37:af:39:8c:e6:ff:1e:03:ac:33:49:
dc:57:3b:99:a4:31:d4:64:5c:b7:7f:77:a0:56:ef:3f:6d:5e:
91:27:78:b1:af:f7:ed:87:20:c8:d8:df:09:2c:46:f7:ca:4f:
c7:cf:b8:5c:c5:1c:d3:63:cc:69:c5:7b:28:0b:2d:9b:f7:c4:
2e:b5:5b:23:42:3d:ff:5e:96:ac:f5:47:56:04:de:d9:92:59:
c8:ce:15:0f:38:72:d9:67:11:d9:b6:65:61:05:ba:92:0c:91:
b5:50:16:8d:89:51:73:ad:01:5a:13:d4:b0:75:0b:73:0c:08:
41:c6:6d:7b:6f:ec:9f:fc:26:30:7f:0e:87:16:dc:74:f9:27:
e0:a1:03:47:a5:f1:99:74:b9:bd:24:0e:16:fe:fb:6d:d6:30:
8e:9a:79:ff:84:9c:bc:66:21:70:a5:7c:36:49:95:27:78:60:
66:53:4d:47:da:68:51:5a:63:04:dd:30:2e:51:9f:0f:88:fa:
47:c0:b5:13:72:c3:24:13:3e:e1:35:33:68:58:3a:da:60:6b:
69:25:1a:5a:43:d1:88:af:99:8c:1f:37:dd:dd:9d:28:4d:c9:
4e:6a:d1:f6:01:ba:4d:fa:e1:b1:c4:2d:7d:a6:ab:a0:04:34:
0f:d8:d4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:55 2025 by rpki-client