Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: LCxf1u8LZF/+AZ7rk6rBb4PKUt6dbg3ZcNyNfzRF5k0=
Subject key identifier: A6:72:52:C3:BA:34:72:FE:2A:1A:37:C8:CD:5A:DE:9C:6E:47:26:8E
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019840CFDF781ED38E3D1CDCF8FE9BD693F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 0569
Signing time: Fri 25 Jul 2025 09:00:21 +0000
Manifest this update: Fri 25 Jul 2025 09:00:21 +0000
Manifest next update: Sat 26 Jul 2025 09:00:21 +0000
Files and hashes: 1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: t1lumukECmpTVEVEP97OZ2Lj0kbXaYSMKNiykJdaBzY=)
2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=)
3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:cf:df:78:1e:d3:8e:3d:1c:dc:f8:fe:9b:d6:93:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Jul 25 09:00:21 2025 GMT
Not After : Jul 26 09:00:21 2025 GMT
Subject: CN=a67252c3ba3472fe2a1a37c8cd5ade9c6e47268e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:e9:d8:76:01:8a:d3:6b:ba:80:24:bc:69:
ba:da:61:32:1b:c0:70:ea:85:ba:01:17:6c:82:b6:
78:91:99:2a:3e:93:bd:22:0a:53:60:46:63:02:ff:
ba:2c:93:7a:b4:f8:2c:e1:48:02:e0:ce:35:9f:62:
ed:0e:de:3c:2d:46:a6:53:b1:e3:44:01:c1:0c:20:
3b:e6:50:ae:e5:f3:71:75:e2:ef:73:f2:7b:c7:64:
ea:58:e1:4a:83:00:9d:1b:ce:a9:49:c1:c1:e1:ec:
1f:62:fb:f0:71:bb:6d:b0:85:21:51:7f:21:b0:20:
bf:18:a2:9b:5a:97:da:78:79:1e:ec:92:2e:b5:e6:
50:bf:da:e5:41:44:8b:bc:20:3b:4b:4d:77:bc:d1:
a5:10:72:32:ac:6c:7c:3e:05:d4:88:f1:b9:32:42:
b0:77:ea:ae:f6:2f:32:64:c2:b2:a4:c0:0c:e0:59:
ac:90:f9:e3:84:e3:9f:04:20:9b:b8:22:e2:19:37:
1d:86:93:bb:e6:4d:3d:92:d9:bc:0f:dc:01:a4:55:
c3:c5:b2:7c:0c:f0:fe:a7:e2:b0:91:fe:88:6d:b1:
dc:4e:39:f6:7f:9c:9a:92:b6:c8:80:f4:3b:8e:dd:
38:9f:d6:14:28:2d:dd:00:0f:7b:3a:fb:4a:64:6f:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:72:52:C3:BA:34:72:FE:2A:1A:37:C8:CD:5A:DE:9C:6E:47:26:8E
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2e:a8:6a:e8:af:c7:8b:76:d7:dd:5d:39:a7:26:75:f9:ac:
36:4c:f3:44:60:5e:a7:1b:f4:f3:ac:12:66:a8:7b:11:ba:90:
67:01:ff:ec:75:f6:b5:fb:bc:f4:d2:70:f7:61:7a:21:77:f8:
e0:57:e9:02:d3:f3:3f:5e:40:b8:3a:8d:d5:26:2e:38:4d:76:
e2:23:f7:33:30:c2:d7:5d:15:b0:eb:d7:2d:1d:43:16:f1:ea:
26:dc:bb:9f:13:f0:29:c9:59:94:33:cf:65:45:fc:55:58:22:
ed:d3:52:26:c1:72:94:af:9d:19:79:54:8f:d0:63:3f:0a:43:
2d:ef:80:8d:2b:40:f0:02:5d:18:5a:98:ee:e6:80:aa:8d:0f:
14:52:4e:f4:1b:2e:7d:86:80:06:9c:19:68:5d:5e:c3:29:0a:
85:fe:a4:33:09:ab:5d:3f:f9:7e:7f:23:14:7a:6e:51:66:e6:
da:18:9e:2f:b6:48:15:07:7b:20:e2:4b:ff:f0:32:1b:53:53:
79:3e:de:04:5d:dc:98:b4:8c:e6:78:fb:c1:a5:52:e8:b8:0a:
e9:87:4a:3c:e0:59:a3:e4:5b:93:0b:e2:f7:35:c0:11:b2:d9:
71:cf:52:9f:1e:a9:1f:26:44:50:34:8d:8e:53:12:3e:f6:81:
dd:50:9e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:56:09 2025 by rpki-client