Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier: MM3J08xrma2cA7Qqc5yeE0OPyiqBqwwNQjlDZtZ6UN8=
Subject key identifier: 9B:61:54:50:A7:72:8A:70:D4:7B:43:D3:E6:2B:11:E3:28:A1:C2:54
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 01965492ED8E41FC7EDC86F4708DEAF2BCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number: 0447
Signing time: Sun 20 Apr 2025 19:00:37 +0000
Manifest this update: Sun 20 Apr 2025 19:00:37 +0000
Manifest next update: Mon 21 Apr 2025 19:00:37 +0000
Files and hashes: 1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: ewX9iXQNr598LnzQEpUDOni4F6Xvvgas/b45ZYolB68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:ed:8e:41:fc:7e:dc:86:f4:70:8d:ea:f2:bc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: Apr 20 19:00:37 2025 GMT
Not After : Apr 21 19:00:37 2025 GMT
Subject: CN=9b615450a7728a70d47b43d3e62b11e328a1c254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:16:b6:3c:ce:5a:79:73:3e:64:16:3e:ee:
c0:c4:10:ba:22:b2:a9:aa:6e:3e:fe:0f:0e:36:4d:
08:7a:9c:2b:3a:34:83:d7:ac:04:3d:9f:03:bd:27:
d7:94:c4:c4:dd:3d:f9:af:87:bc:67:fe:78:a8:e8:
df:9d:e1:42:11:20:82:fa:5a:56:aa:ed:18:8f:ed:
9f:1f:d6:41:5b:87:89:b8:a1:94:71:19:8e:a8:9f:
4b:8b:8a:f6:d0:d0:ab:3e:f1:88:29:39:4a:cd:cd:
15:46:66:12:59:2d:0d:7a:c3:76:df:0e:f3:f4:c8:
d3:e4:75:19:29:f4:c8:ae:af:d5:ed:f8:76:55:67:
47:8d:9d:07:21:45:26:72:03:f2:a4:ea:19:7b:62:
3a:0c:37:2b:c1:e6:9f:f2:f1:39:5f:67:4a:31:63:
af:dc:04:86:06:a4:72:7f:58:d8:36:a4:f7:b4:da:
73:30:4f:11:17:d4:77:65:b2:dc:ae:4d:db:d1:15:
36:c9:e4:00:04:ea:20:ea:39:19:f8:32:4c:d2:17:
a2:b8:c9:fd:0b:54:a1:1d:b4:7b:c0:5b:2c:6c:45:
63:40:41:fd:d8:b3:bd:db:04:3b:d5:6b:cb:3f:ce:
c7:63:a5:2d:c8:67:6c:d8:b2:cc:b1:96:f3:6e:e1:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:61:54:50:A7:72:8A:70:D4:7B:43:D3:E6:2B:11:E3:28:A1:C2:54
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2c:49:1b:e3:dd:44:56:f5:91:83:83:0d:8e:b1:83:cd:39:
d0:f5:d9:b3:14:cc:98:f5:fb:8e:44:72:b4:40:ab:dd:db:0b:
25:57:da:48:08:a2:05:3c:59:b7:4f:96:f7:d2:82:a9:09:00:
81:ba:4d:0f:51:44:8f:94:8c:96:2b:63:16:d5:72:e6:78:dc:
ff:3a:b5:eb:da:04:7b:96:04:2b:94:c0:9d:23:b1:45:ed:e7:
ec:e7:a4:61:8f:69:a8:eb:7b:f5:ce:6e:15:7d:29:60:e0:58:
8b:a3:0b:27:57:11:ac:00:7b:91:e7:dd:b3:6a:05:b8:e9:12:
52:67:61:ae:c1:f0:e9:85:f0:21:45:33:4a:81:4d:e0:06:12:
83:5f:30:53:44:de:7c:24:17:c7:3d:af:2c:c0:8a:b8:65:03:
ae:53:89:89:c0:20:21:ab:99:af:e5:b2:d5:df:27:e1:55:54:
a6:f0:cc:f0:b9:85:7d:ea:98:24:d8:5e:1b:f8:d4:21:ba:a9:
c0:c4:da:23:ff:90:e7:13:7f:61:84:a5:8b:3d:31:e5:40:03:
78:23:95:03:6c:89:22:0c:26:90:6a:10:80:bd:97:96:54:52:
d0:c6:a3:22:bc:cd:6f:84:bd:36:c8:2a:6b:c6:80:fa:48:e4:
bb:6c:96:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:13 2025 by rpki-client