Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: hZjBZmrr8fPerT48uLWZt96J9ZpwlqSekRJw7IBD5xk=
Subject key identifier: C7:0C:28:0E:D5:A2:88:AD:FF:21:39:0B:5E:C0:61:F1:77:AC:F9:A5
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 0196C1CAE7B2109EB8CBE340BE9CB6C491D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 10E3
Signing time: Mon 12 May 2025 00:00:22 +0000
Manifest this update: Mon 12 May 2025 00:00:22 +0000
Manifest next update: Tue 13 May 2025 00:00:22 +0000
Files and hashes: 1: 7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa (hash: sSokJSwDE7TenrNiAqYNMhbgz0iCXtyPGRTOZYronAY=)
2: YVWuJ6FTMU1uU3iR7ed746pUzUU.roa (hash: oVu2kWcJUFQzXCLu/Vci/BnnMXJVo57f7gbHz7uSAXM=)
3: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: 1P298ZIdGfTFGWLb/Fh+jzO4HH5aRxUlUi9/lgvrgF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:e7:b2:10:9e:b8:cb:e3:40:be:9c:b6:c4:91:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: May 12 00:00:22 2025 GMT
Not After : May 13 00:00:22 2025 GMT
Subject: CN=c70c280ed5a288adff21390b5ec061f177acf9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:49:0e:c5:70:7d:2f:70:77:ce:34:37:4c:
90:3a:4f:c6:40:c4:f7:1e:31:e6:06:7e:a4:7f:d2:
7e:db:26:02:3f:0c:b1:12:ce:87:74:f2:fe:b9:75:
97:40:6a:3e:2d:31:d5:70:af:75:e6:d1:60:51:60:
44:d0:b4:6a:57:31:12:12:eb:cd:a7:ac:81:91:f4:
97:72:2d:4b:44:e2:5d:f0:c0:c2:58:3a:06:bd:c0:
7a:30:5a:59:bc:81:90:ff:d8:b7:8b:3f:68:d9:5c:
54:ed:6e:13:ba:8f:19:46:94:7e:36:a5:29:f6:27:
36:9a:c9:6a:7a:db:2f:43:22:2e:14:bf:fe:c5:04:
68:d1:02:34:28:ab:7f:90:c9:cd:3c:66:e8:8f:f5:
17:a2:94:5c:d1:7d:8a:6c:0c:23:e7:f6:fe:9c:96:
f2:27:ea:6d:90:7a:34:a2:b3:89:30:37:c5:a9:76:
35:e1:ae:6a:a7:8c:31:59:23:8f:75:d0:7a:9a:b1:
14:ea:a5:12:9b:ee:37:c3:5d:dc:f4:7c:87:e3:78:
a8:d5:dc:6d:78:c3:02:ba:94:e0:fc:98:1f:4d:38:
0e:e0:0e:36:c0:74:84:d3:b3:e7:fd:9a:bd:03:45:
f1:7e:c8:e1:be:24:41:a6:58:6a:a3:27:26:c7:f0:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0C:28:0E:D5:A2:88:AD:FF:21:39:0B:5E:C0:61:F1:77:AC:F9:A5
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e9:03:2b:58:93:ae:a6:16:74:31:5c:f1:f5:11:53:a3:bf:
f4:8f:32:5d:10:db:5f:a4:b1:e7:90:e3:ee:1f:4b:a4:81:19:
19:11:53:c5:31:82:03:49:5e:fa:92:ec:77:a2:c6:ce:68:98:
c0:b6:15:62:9b:87:db:59:f3:5a:c7:f7:7b:83:fd:d1:7a:83:
83:bc:76:54:cb:66:3a:9f:09:ad:e7:f2:80:3f:17:8e:a2:7b:
61:8c:ff:aa:a0:b1:8b:7a:dc:ad:8e:bb:35:36:9e:9d:7f:59:
35:f7:d4:59:f8:c9:7b:66:29:94:51:c5:13:b9:26:41:58:7a:
b8:1d:82:6f:96:04:b0:66:02:c5:94:a1:84:6d:d8:26:fe:7c:
56:f6:02:fc:34:bd:57:0e:a2:cd:72:5e:dd:7b:5a:0e:61:9c:
85:56:c2:20:58:41:65:a9:45:47:e1:b7:ac:a6:00:09:88:c3:
ae:87:42:e6:36:ea:e0:28:45:f9:d3:30:b3:1f:69:f5:3e:5d:
d1:0e:e6:e2:76:a0:0c:92:1d:0c:6c:c4:12:d2:e5:dd:fe:cb:
57:7c:2c:50:38:9b:2d:2c:51:f2:84:61:cb:77:76:6d:d9:b4:
9d:c0:60:28:43:48:c0:64:f6:f8:80:b0:f6:59:42:e4:ee:fa:
d1:c9:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:59:10 2025 by rpki-client