Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier: MNnhXKE2yzz5W3+SpxaAdvWjvUXvUb+jjr3lfG/tPHU=
Subject key identifier: 78:72:AF:5C:EE:8D:17:C5:8B:82:70:63:48:BF:7F:76:75:9B:9B:51
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 0196B710BD42B25688E84EF4017E73B35997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number: 047A
Signing time: Fri 09 May 2025 22:00:49 +0000
Manifest this update: Fri 09 May 2025 22:00:49 +0000
Manifest next update: Sat 10 May 2025 22:00:49 +0000
Files and hashes: 1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: ucxW9BaVXJedH+/cGEmOplIOpwXc7n4PFwiSRjycQwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:bd:42:b2:56:88:e8:4e:f4:01:7e:73:b3:59:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: May 9 22:00:49 2025 GMT
Not After : May 10 22:00:49 2025 GMT
Subject: CN=7872af5cee8d17c58b82706348bf7f76759b9b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:ee:7c:74:38:e2:d5:d3:91:46:98:98:b6:
18:e3:66:93:93:1c:31:54:8d:6d:6a:bd:fe:eb:8e:
db:a0:b9:92:5b:c4:c3:d7:8e:82:38:ce:ae:1b:b8:
dc:6f:87:77:a3:d4:c8:3b:3c:0f:8e:c7:39:6d:96:
cd:06:1f:a4:a1:7e:83:c5:80:0e:1f:f3:7d:a2:f4:
5f:91:15:e5:44:6a:d2:74:d2:78:89:96:e7:99:a6:
c9:29:bc:bb:00:cd:e7:1e:df:cc:15:c0:50:f3:2c:
4f:80:15:c3:d9:e1:c8:74:1f:39:fc:d0:e2:7e:ca:
d9:cd:c4:e2:c1:c6:a6:a9:82:c4:d4:b1:4c:f4:e1:
6c:62:f3:1a:f4:fb:dc:5a:d4:60:42:6a:1b:b1:60:
1b:ad:40:bf:41:8c:03:31:7b:32:c3:b7:ab:9a:79:
f9:18:5d:ef:f0:7c:0b:bd:97:c7:29:78:2b:72:89:
ae:82:5b:f9:a5:1e:30:7b:5c:d6:79:b1:38:99:81:
d4:22:f9:eb:91:0f:8f:66:ba:c6:5c:28:6a:c6:92:
ce:fd:df:7a:c1:a4:7b:9f:aa:5d:f5:18:12:a6:ed:
7f:78:22:d0:3f:76:f9:03:d1:58:ff:4a:7e:aa:1e:
12:aa:24:e3:8b:9e:3b:35:58:aa:55:82:b9:4b:2d:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:72:AF:5C:EE:8D:17:C5:8B:82:70:63:48:BF:7F:76:75:9B:9B:51
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a0:65:90:a4:1f:ba:f0:9c:1f:bd:0e:88:2b:8f:75:be:0a:
12:9f:43:ff:77:96:13:7a:5b:9f:a9:69:70:62:74:b7:44:5e:
b5:fe:8e:f8:ce:0f:82:3a:03:34:26:d2:e1:08:b0:ed:1d:c5:
6e:97:d1:4d:51:2d:04:38:8c:80:2b:87:94:32:31:e5:55:9f:
9c:eb:33:17:be:57:64:0d:fa:b2:88:85:ba:d6:57:95:ae:74:
55:7b:aa:3e:31:b9:1b:f9:60:1b:43:80:97:b3:72:0a:af:04:
4a:f3:54:32:81:2b:0c:a9:ae:35:f4:1a:bf:9d:09:a3:80:ac:
9f:cc:62:46:f2:6b:9a:60:10:44:96:a6:d0:2b:8a:96:52:01:
8e:33:97:3a:20:db:b3:aa:a0:63:81:f4:ce:ef:16:ec:c7:48:
e2:87:df:9e:d0:b9:9c:1c:8c:9d:8d:c8:9e:e3:ef:52:fd:75:
d6:94:c1:47:81:e0:75:8d:2b:6a:f9:2a:5a:b5:79:78:85:aa:
34:76:49:fc:c2:cd:b9:a1:9d:f4:a7:ed:23:98:eb:70:05:b8:
b4:d7:50:08:00:7b:6b:7c:8a:96:a9:23:ca:81:ad:d7:63:bb:
09:05:a4:8e:db:6c:83:fe:0d:98:b4:7c:ed:0a:fa:b3:e0:87:
16:5a:19:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:35:37 2025 by rpki-client