
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier: q1zti5yDjU8zhiWQOFu52bg308xa6ahrhA6eN5HggOw=
Subject key identifier: A2:0F:E0:51:E3:F3:B9:E4:A8:1A:8C:F2:4B:E1:6E:FC:FC:7D:7C:72
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial: 0196C04AD1F1944EF644C2F60C683199CC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number: 0191
Signing time: Sun 11 May 2025 17:00:50 +0000
Manifest this update: Sun 11 May 2025 17:00:50 +0000
Manifest next update: Mon 12 May 2025 17:00:50 +0000
Files and hashes: 1: NJyfKGT7eHHPjQOAXKwVNKCjCYs.roa (hash: XDn/F11FiIWe6mjWs24N5BRlzAoQS5rK8vutFukkZcU=)
2: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: ucsTzl7LxXF+v+m+ZyXEWn65M0FL69+1FAi6g24aA6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:d1:f1:94:4e:f6:44:c2:f6:0c:68:31:99:cc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Validity
Not Before: May 11 17:00:50 2025 GMT
Not After : May 12 17:00:50 2025 GMT
Subject: CN=a20fe051e3f3b9e4a81a8cf24be16efcfc7d7c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:a1:06:f2:04:af:57:26:98:f1:f8:bc:22:
6e:a0:77:b1:22:d8:4e:c6:56:cd:c5:b1:91:29:29:
75:d9:0e:22:0a:cd:0a:90:12:7f:6c:d7:2b:84:21:
3b:f7:70:46:27:b3:84:eb:2c:6e:16:a1:0b:62:6a:
28:61:36:ad:65:60:73:cb:3d:8b:de:63:7b:c6:42:
ee:27:53:3a:9a:99:fb:f3:16:d8:a6:49:6c:9d:8e:
44:2d:2e:d7:74:dd:a0:e6:24:83:09:06:9b:0a:d7:
a8:c4:19:e0:0e:ae:e7:6d:15:0e:97:4e:f5:14:e3:
a2:f2:28:ae:86:85:3a:47:55:f2:da:d8:e6:f9:f1:
76:7c:1a:69:e2:85:6d:24:96:d1:cb:13:90:72:9d:
07:27:33:4d:08:e5:d3:d4:20:a0:a5:e6:26:04:36:
30:a5:1c:44:41:2e:cb:3b:9d:2d:c8:5e:0f:b0:24:
7c:23:b3:6d:34:cc:3f:56:77:00:07:3b:cc:fe:61:
e2:23:1e:6e:7b:39:75:0f:9f:fb:f5:35:7d:18:9e:
a3:9f:01:37:ae:80:06:5b:82:4a:6b:77:09:0f:61:
5d:9a:ce:fb:08:25:2f:c3:92:5a:b9:e6:7d:34:1d:
4e:b0:40:65:3a:83:67:8b:43:43:e5:f4:45:f7:75:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0F:E0:51:E3:F3:B9:E4:A8:1A:8C:F2:4B:E1:6E:FC:FC:7D:7C:72
X509v3 Authority Key Identifier:
keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5d:e3:5d:1b:d1:70:c9:bd:c2:1b:9f:2e:40:6f:9d:8d:23:
5d:26:43:f4:37:34:da:3f:b6:53:80:b4:74:43:b0:60:9f:55:
5b:55:24:1f:15:79:d7:26:13:ce:73:49:be:bc:46:6c:b5:37:
6d:70:3c:3b:d5:87:c2:2b:c0:d0:67:0c:98:6c:ea:24:16:cd:
1b:22:e7:f6:fe:23:93:05:e2:96:fc:8c:37:c6:40:30:89:41:
12:c6:a8:c4:70:e3:35:18:84:30:b3:31:7b:66:b8:3d:9b:c0:
35:0c:9f:a5:57:63:15:05:9b:c4:f3:ff:23:92:89:e1:1b:bd:
98:b8:83:14:62:e9:89:74:d8:2b:e6:c6:0a:15:fe:ec:78:48:
ed:4b:1d:45:4c:bc:2e:19:37:74:03:03:25:aa:b9:5c:4d:0d:
a7:69:04:ae:b3:8d:8e:2b:b2:90:9f:95:fa:6d:ab:43:36:6a:
82:71:9a:d1:b0:da:e8:49:3c:53:33:d0:3d:b3:c8:16:10:ae:
f0:1b:b0:c4:83:af:17:9a:cc:68:8c:a3:83:d7:d5:6a:3f:1f:
3d:9e:ff:87:2c:84:ac:ef:21:27:5c:aa:07:14:1f:47:11:4e:
13:c4:98:b4:e1:4e:46:57:01:56:48:5e:38:77:e1:3c:7b:52:
63:e4:cc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:27:15 2025 by rpki-client