Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
File: pPLix3U2Usd9u3nL4GmyurA_YN0.mft (raw, json)
Hash identifier: G8hryZ9pwQroT37/lKOqp1Em/hOzoh6EgWffix0inq8=
Subject key identifier: A1:63:8C:A1:F8:B3:71:92:F7:7B:F9:CC:32:B1:96:CE:EF:9D:C9:B5
Authority key identifier: A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
Certificate issuer: /CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Certificate serial: 01969C3E047D43B5BD65A6B674BC0A03912D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
Manifest number: 1523
Signing time: Sun 04 May 2025 17:00:32 +0000
Manifest this update: Sun 04 May 2025 17:00:32 +0000
Manifest next update: Mon 05 May 2025 17:00:32 +0000
Files and hashes: 1: GDxm2zcd8Lnhjk0mCi0fCSfcw18.roa (hash: 2s+mStFbGwTH5aRw2Ej0hEDuLtxVhcXn931+yvpJuwg=)
2: pPLix3U2Usd9u3nL4GmyurA_YN0.crl (hash: 44J+bQzlnNXTptOMkzLPeX9P9+ISs0gCIH38v9g0IP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:3e:04:7d:43:b5:bd:65:a6:b6:74:bc:0a:03:91:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Validity
Not Before: May 4 17:00:32 2025 GMT
Not After : May 5 17:00:32 2025 GMT
Subject: CN=a1638ca1f8b37192f77bf9cc32b196ceef9dc9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:17:90:bb:a0:9e:d3:43:5c:8a:30:4d:9a:
8e:fa:b7:7b:ac:03:97:9d:d3:e7:78:df:4d:23:29:
39:bf:c8:0f:4d:e0:ce:86:9c:04:b4:ff:85:70:96:
90:c8:ca:2e:79:1f:2f:b9:41:3e:e6:6a:8a:75:fe:
9d:be:58:68:d3:fb:88:eb:78:00:88:b7:fc:ee:c7:
6b:3b:a8:8f:a3:d0:20:93:86:fc:a7:c0:03:65:3c:
02:40:89:2c:88:e5:13:ef:8b:93:0f:34:35:6b:dd:
93:58:77:d7:6f:69:1e:d6:77:79:7b:b7:a7:0d:7a:
a5:f4:e2:51:1c:5a:45:e0:eb:53:df:0f:7a:cd:18:
dd:24:f5:a9:12:41:de:6e:f9:30:b8:cd:68:80:f3:
01:d0:50:5b:96:ba:fa:5c:cc:06:be:4a:06:5d:04:
b7:b1:f2:fd:2e:86:a9:71:ac:ed:78:e5:09:00:ce:
43:13:81:b8:c3:94:35:12:0f:23:0f:67:01:d0:30:
2d:fa:66:f0:85:e9:5b:1b:1d:97:79:72:fd:00:14:
3a:e7:13:c0:05:d9:28:06:6a:6a:98:4f:85:c6:8c:
7d:76:e9:49:5f:da:ed:20:1c:cf:d8:1a:b1:7c:2e:
e7:38:05:e9:ec:2b:07:ae:52:10:61:43:50:ef:f6:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:63:8C:A1:F8:B3:71:92:F7:7B:F9:CC:32:B1:96:CE:EF:9D:C9:B5
X509v3 Authority Key Identifier:
keyid:A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:36:0c:ad:30:00:39:6a:78:60:8f:41:f0:96:2d:f9:34:85:
58:2d:ef:94:06:e0:f6:21:3e:e8:0b:b5:85:e3:e9:66:33:e4:
51:53:ea:f0:a5:93:07:a2:e6:c4:d3:16:14:d4:ad:bf:8e:6e:
f4:bc:79:5d:1b:85:e8:c3:89:c8:5e:20:39:40:61:49:48:14:
ab:f5:ac:b8:94:73:64:b2:48:c1:3a:63:42:ee:09:21:55:6a:
4b:41:0c:5b:a9:88:53:4e:75:74:0f:25:5f:92:3b:03:7c:98:
b7:8b:60:36:cb:16:7f:e8:08:8a:1e:a0:4a:ab:ff:01:76:2b:
fb:3f:c8:ac:93:83:98:10:0d:08:46:f5:95:8b:ed:5d:42:0c:
93:79:2b:a9:92:ad:ea:6d:d7:93:24:99:c8:af:76:42:e7:0a:
9f:84:c5:61:7e:66:c6:6b:e2:72:c9:4c:0a:82:c2:61:de:5c:
71:f3:1b:c5:94:a4:e3:47:e1:10:79:84:3b:02:cf:4e:2e:cb:
47:75:56:25:37:4c:d4:64:03:48:19:a2:58:2d:14:e7:e2:75:
39:8e:dc:87:6a:8b:4c:f1:ad:78:1d:f0:f2:70:d4:20:e0:7e:
05:a6:cf:f8:af:4d:05:f8:93:67:ec:79:30:9d:ce:c1:37:4a:
fb:8e:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:42:10 2025 by rpki-client