Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File: plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier: UJtbDqUuHcuNqK1C8IaK8dR40Z/51OrWNYbh6mNNjTY=
Subject key identifier: A9:BA:7A:0C:12:9E:29:7C:74:0B:AF:7E:54:F3:B8:DD:04:A1:A0:6D
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial: 0196082FC1D2BF13B4EA734E1934F17568D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number: 14DE
Signing time: Sat 05 Apr 2025 23:01:09 +0000
Manifest this update: Sat 05 Apr 2025 23:01:09 +0000
Manifest next update: Sun 06 Apr 2025 23:01:09 +0000
Files and hashes: 1: FxcmiLw90HwD6v-zIS8fyho2YJk.roa (hash: dVrudewN+D6RoriyTNX+xlGTNvGmJTbMWvHDD/OWxyw=)
2: OlW7-Km7BJbiI8B78ArRrPEDqrw.roa (hash: stdFhe5anM2OeANujcXwTGGyVvRvWg0rJcjCkeIVupY=)
3: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: Qik25FcIT0Hvs6pUdCrzUs8J9beDC7cUvZiTjmwwpUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:08:2f:c1:d2:bf:13:b4:ea:73:4e:19:34:f1:75:68:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Validity
Not Before: Apr 5 23:01:09 2025 GMT
Not After : Apr 6 23:01:09 2025 GMT
Subject: CN=a9ba7a0c129e297c740baf7e54f3b8dd04a1a06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:6b:9a:1e:f8:7e:ed:a0:5a:07:7c:44:e8:
28:3b:45:fd:50:ac:e5:e3:c3:e9:19:5a:b4:c9:78:
77:84:43:e7:a6:6d:6b:27:2d:c1:6f:e6:bc:8b:26:
2c:e8:54:58:e0:c9:f7:d7:1e:46:07:5c:94:4a:10:
a9:f3:60:d9:b3:c4:28:2a:2c:0f:02:e1:c4:98:98:
b2:f2:70:f9:7a:3d:7d:ac:43:ff:4e:5e:e1:c8:49:
17:53:3c:d5:67:92:da:26:fa:2c:9b:43:6b:61:77:
a4:98:48:e5:00:ad:05:19:e7:42:ed:77:f9:bc:31:
8a:b3:7a:c3:1f:9a:81:d6:95:38:44:89:31:cc:50:
c1:60:5d:d4:00:11:51:5c:65:1c:2c:77:80:45:85:
31:0d:6d:8d:21:fc:40:6a:3f:7c:12:eb:f9:07:b8:
d7:df:06:cb:47:77:d6:8f:e6:b4:72:dc:1c:33:e4:
c6:83:73:0a:9e:6c:60:57:10:3d:1c:01:c7:ab:5f:
cd:a8:05:4f:83:be:cb:34:2c:fd:bc:de:e9:e5:fd:
62:fd:0b:33:d0:e0:c8:45:eb:77:20:50:ef:f8:dd:
a3:16:d8:42:cc:b1:fc:b9:93:4b:28:5e:ca:a3:71:
97:ee:cd:77:1c:f9:15:e1:37:bf:8d:8d:84:2f:bc:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BA:7A:0C:12:9E:29:7C:74:0B:AF:7E:54:F3:B8:DD:04:A1:A0:6D
X509v3 Authority Key Identifier:
keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ea:87:19:32:df:12:6c:b8:70:65:d9:82:c4:de:54:f8:c5:
22:2e:6f:74:ba:f4:06:05:d6:e6:dd:c9:06:82:7b:f9:bd:0c:
77:af:fc:da:51:d0:15:97:46:8e:00:67:96:49:f2:38:6c:cd:
6e:ed:95:3e:c6:1e:2c:cb:6a:51:8d:9a:7f:1f:e3:e4:59:ea:
0c:f7:65:9a:7a:fc:85:09:0d:cd:4f:77:4b:78:8f:79:e0:43:
eb:d7:c6:28:63:ab:42:f6:9e:01:66:81:ac:ab:e8:64:d4:42:
d2:a3:55:5a:5d:0f:2b:86:06:22:89:f4:88:2d:fc:35:a1:8c:
9e:06:50:f0:7e:3f:09:ab:ee:7f:d5:53:cf:0e:df:0f:2d:14:
42:08:8d:49:e8:19:7c:74:95:dc:b3:0f:7b:54:f1:b0:ab:64:
3d:c3:c3:2d:27:8f:dd:d3:dc:ac:2a:ac:25:f0:15:4f:c4:d4:
e7:06:22:92:5c:42:1c:06:4e:9e:9b:1d:2c:8b:18:42:e8:04:
62:d7:f1:68:8d:ef:04:30:ac:bf:6d:b1:82:18:19:11:8d:0f:
53:5e:95:13:e8:1b:76:cf:15:ec:a4:4c:95:1d:a0:d7:4b:f2:
bc:e1:d7:2b:2e:cd:fc:5e:e5:47:09:7a:74:db:3e:1f:75:56:
52:a1:c0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:29 2025 by rpki-client