Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
File: pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json)
Hash identifier: Zrig9tzWlf98i80my0+ODqNLHixpkaEFfzn3v/v8mJU=
Subject key identifier: 23:01:6A:9F:71:E8:80:BB:A3:92:7F:A1:EA:F8:92:1B:5B:2A:87:40
Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
Certificate issuer: /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Certificate serial: 0196A654376EA083FE6EBD206F6A0CDBB484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
Manifest number: 0291
Signing time: Tue 06 May 2025 16:00:59 +0000
Manifest this update: Tue 06 May 2025 16:00:59 +0000
Manifest next update: Wed 07 May 2025 16:00:59 +0000
Files and hashes: 1: dz9PyU4ctyXKZ49cHOyHFCLYwcU.roa (hash: 3Y8oozkK4fYw8w+acos4s7WtEJkSyImOIymISL/lshA=)
2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: 9rwrljYAfqAYcCU2LIL26G3hNezRNdjW7BIKmylemVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:37:6e:a0:83:fe:6e:bd:20:6f:6a:0c:db:b4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Validity
Not Before: May 6 16:00:59 2025 GMT
Not After : May 7 16:00:59 2025 GMT
Subject: CN=23016a9f71e880bba3927fa1eaf8921b5b2a8740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:a1:ce:47:b3:7f:63:10:06:b1:43:aa:28:
d1:40:bc:4f:61:f8:fa:58:4e:8a:6e:22:6d:27:fb:
6b:69:5c:4c:dc:ea:6b:ce:3e:a2:86:93:46:e9:5b:
1e:9f:85:6c:4e:12:71:82:78:c6:f2:03:06:34:eb:
c3:eb:5f:e8:22:f3:58:de:9c:c9:4a:79:dc:8a:34:
e0:f7:1f:0a:78:34:4c:08:79:1a:be:17:ac:2a:58:
36:20:55:04:09:c5:52:c6:95:1c:7e:7c:57:f1:90:
4a:f9:38:8e:9d:66:d5:dd:6b:ff:39:f8:c0:0c:56:
60:43:6d:c9:4a:6f:3f:80:0e:3d:78:99:7b:10:2e:
19:07:c4:49:b0:9c:5b:ca:90:18:a5:a9:da:5d:e4:
2e:25:49:7d:91:13:86:c9:85:b2:89:c9:3e:fa:83:
77:3a:b3:f5:17:87:4e:9b:f3:26:8b:2a:54:15:2d:
13:aa:01:c8:95:df:48:ae:92:52:d7:bc:de:12:5d:
ee:de:87:5d:36:2a:01:28:07:56:54:5e:87:d4:f6:
69:84:54:9e:7b:2e:b9:d6:69:4b:51:79:f1:82:df:
db:6c:cc:44:c5:a9:66:f7:31:6d:b1:aa:b1:e6:6a:
e1:49:a4:01:b4:29:fe:21:1c:73:0c:95:9e:9c:1c:
d4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:01:6A:9F:71:E8:80:BB:A3:92:7F:A1:EA:F8:92:1B:5B:2A:87:40
X509v3 Authority Key Identifier:
keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:40:fa:a9:9a:15:f8:a8:ff:65:d5:42:f6:4e:68:5e:a1:44:
67:04:19:2e:d4:6d:e4:7d:7c:9d:c8:38:60:02:7a:f0:d9:c7:
d5:62:d0:3c:b3:d6:9a:1e:ae:a3:3c:97:d5:44:99:1e:f7:89:
4d:10:7e:44:45:34:98:07:f2:54:1e:1d:cf:d2:36:56:0d:a0:
a8:2a:75:6c:e3:98:21:62:62:65:36:7b:1b:64:cd:1f:ef:10:
2e:76:aa:13:6c:d4:a0:1d:d0:3c:01:57:b2:93:89:49:85:ec:
25:c5:9e:6b:7b:80:49:30:19:e8:5e:58:9a:34:d1:2f:d8:22:
fa:fd:70:c8:4e:5a:93:48:6d:53:51:ff:4e:a5:3e:94:74:a2:
95:56:85:28:85:2f:ab:9e:70:6b:6c:0f:f6:af:74:0e:ce:30:
03:59:38:46:14:5b:f9:28:d7:3c:2b:bd:90:d7:5a:04:96:9c:
ba:25:73:5c:3d:b2:39:c9:16:11:a6:c8:69:e8:17:b2:14:d8:
a7:66:15:c7:47:a9:1f:ab:bf:a6:2a:dd:c1:94:12:32:56:f4:
71:a5:e7:01:d0:ca:0d:a0:de:4d:3a:e8:45:67:76:99:5a:bd:
2d:40:03:a8:87:79:64:52:37:18:c5:6d:77:65:7c:6a:6e:39:
62:4b:42:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:34:17 2025 by rpki-client