Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File: PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier: LflEdQPLE+dcW0BpEZYeEEqw3O+t40FmKTdVEF+WHfg=
Subject key identifier: 81:B0:C0:12:CD:E8:E2:D4:CD:AF:10:BD:05:55:48:24:83:72:F9:D6
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer: /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial: 0194C49A1FEE638AFCE8ED1EE2813C126BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number: 142C
Signing time: Sun 02 Feb 2025 03:00:22 +0000
Manifest this update: Sun 02 Feb 2025 03:00:22 +0000
Manifest next update: Mon 03 Feb 2025 03:00:22 +0000
Files and hashes: 1: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: iAI6qUCqZTZPNS5HjOeD9Sr1NNRjU1rZn0GiOC2mELc=)
2: k0fv_0lBTVHhkgh3M6y4FfdKWug.roa (hash: NS6EWo/2W4cdxM4+yYUneBPcsKtB9dlJYih0Lk7s4iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:1f:ee:63:8a:fc:e8:ed:1e:e2:81:3c:12:6b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Validity
Not Before: Feb 2 03:00:22 2025 GMT
Not After : Feb 3 03:00:22 2025 GMT
Subject: CN=81b0c012cde8e2d4cdaf10bd055548248372f9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:01:65:79:cf:fe:81:b4:55:a0:83:11:b3:
3e:2e:54:03:fd:03:66:55:26:0b:75:85:53:df:17:
2a:b2:db:a3:17:3f:5a:15:49:03:ad:57:40:79:92:
b3:75:53:1f:95:6c:ce:34:65:71:db:33:2b:9f:f2:
b1:40:84:fc:85:bd:26:d4:19:34:15:31:a2:00:98:
44:09:16:6c:cf:34:ef:8b:4d:ad:23:59:1f:e7:f5:
f2:b7:e2:1c:73:59:f2:16:53:99:de:08:41:d2:21:
73:01:f8:39:13:a8:db:a2:e3:a2:e3:3e:56:b0:ee:
fb:d0:51:a6:7b:51:32:36:e2:29:55:12:8c:7b:0b:
bf:48:80:5a:06:d2:29:50:89:63:af:c2:e0:de:84:
d9:d7:c8:af:72:b2:83:92:df:0d:5c:92:77:50:c8:
df:48:40:b2:1a:90:0d:4b:d2:b9:c8:2f:b6:c8:da:
36:3c:07:cf:53:ad:a3:9d:7d:1c:85:5d:89:ab:d7:
6b:8d:a2:af:60:64:f1:ae:99:ba:91:f8:14:d3:59:
00:f2:0c:d3:a5:cd:25:45:55:01:2d:6d:cd:07:b8:
3f:96:a1:6c:a9:a8:ec:13:29:3f:67:32:e9:c5:20:
a2:7a:16:6e:20:59:fc:ec:b5:9d:83:75:a0:b1:38:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B0:C0:12:CD:E8:E2:D4:CD:AF:10:BD:05:55:48:24:83:72:F9:D6
X509v3 Authority Key Identifier:
keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1c:d8:04:a4:31:e1:57:c7:d8:55:f6:e0:52:33:7b:57:b6:
57:2c:07:7c:88:49:c4:2b:c0:1c:80:97:ea:b9:10:6a:8c:a9:
ec:88:9b:5e:8c:6c:fa:5a:09:d5:93:37:07:c8:f6:c9:5c:4b:
72:d3:c9:e6:70:c5:1c:8d:d7:62:2c:e6:09:d4:d0:a3:27:89:
dd:f9:fb:3a:54:fc:3b:b4:57:0b:ef:09:ae:f6:a8:49:fc:db:
a4:99:3a:79:b9:6a:1b:91:60:b6:d1:97:e3:e1:a3:03:c8:8c:
57:44:67:0b:83:52:1c:da:06:6a:c4:05:61:3e:53:d7:1e:f0:
d3:9b:d7:60:e2:90:ea:9f:a2:b2:8c:9c:61:4d:df:eb:6b:45:
29:85:60:1f:1b:20:09:4c:b0:56:a9:aa:b1:29:9d:84:7e:fa:
41:ec:e0:5f:21:45:db:25:3e:20:93:86:79:ea:56:79:21:b7:
8b:72:28:1c:09:3e:47:27:8e:1b:15:c9:a3:20:e0:2b:5c:d5:
79:8c:46:ec:9a:85:76:12:83:64:91:45:6e:db:3c:6f:e7:9c:
8e:01:2a:6a:ed:f1:f0:bd:b3:0f:b5:ae:0a:51:61:54:a1:2c:
04:d3:d9:6c:13:2f:7c:fb:8f:fb:0a:86:c0:7e:e0:33:93:19:
0e:56:3a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:59 2025 by rpki-client