Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json)
Hash identifier: R+au3Q4dX2iAANnl1+/MRKmU5/GHUTVJtS72qpXZi18=
Subject key identifier: 01:FE:CB:D9:C3:1B:FA:4C:98:82:8C:C5:60:50:0B:3F:D5:3C:E7:09
Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Certificate serial: 01964D7F0EC9AB91F9641E88C84639004B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
Manifest number: 14F5
Signing time: Sat 19 Apr 2025 10:01:34 +0000
Manifest this update: Sat 19 Apr 2025 10:01:34 +0000
Manifest next update: Sun 20 Apr 2025 10:01:34 +0000
Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: n5xGVU7/RI3CpQbikWvz/f69agVwxhUOWQSoKT2qKlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7f:0e:c9:ab:91:f9:64:1e:88:c8:46:39:00:4b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Validity
Not Before: Apr 19 10:01:34 2025 GMT
Not After : Apr 20 10:01:34 2025 GMT
Subject: CN=01fecbd9c31bfa4c98828cc560500b3fd53ce709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:7e:78:64:f4:e9:f2:aa:09:f8:52:46:52:
9f:bb:ce:23:a8:1a:b7:80:0d:bd:a5:9d:3a:fe:01:
f3:8f:cf:7a:d5:52:c1:e3:87:e2:6b:62:5d:fa:98:
ad:6f:e9:3f:8f:0b:3a:53:de:5c:5a:0f:bd:49:0f:
05:19:1a:7f:9e:76:2e:f7:af:fa:98:43:7e:d1:97:
11:16:aa:c0:13:1c:db:5d:4a:7e:0a:47:7b:33:49:
96:43:6a:2f:8e:e5:7b:1f:b2:bb:95:da:56:9d:a0:
92:0d:78:30:8e:41:61:e0:8b:4c:9b:e2:5a:63:3c:
dc:ba:44:2a:09:bc:2d:13:b6:17:f6:a3:8f:6d:cd:
49:32:d1:c4:ee:bf:0c:d3:e3:e0:b4:69:e1:84:f4:
98:b0:09:fc:a2:f5:e0:b9:02:26:8a:8c:7c:16:71:
75:cd:71:6e:12:8d:83:66:47:fb:c1:64:b1:bd:71:
25:e0:f6:3a:f8:dc:2b:22:85:ac:6e:8f:5f:e9:32:
75:95:5b:ca:df:8b:c3:40:ac:8e:76:eb:f9:6b:35:
f8:8d:e6:38:94:8a:57:aa:f3:c2:37:1c:7e:2e:90:
90:25:a5:98:c4:72:c6:c3:9c:83:e2:94:52:02:a0:
52:17:85:26:cb:84:8f:ae:20:75:a0:9d:51:74:9a:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FE:CB:D9:C3:1B:FA:4C:98:82:8C:C5:60:50:0B:3F:D5:3C:E7:09
X509v3 Authority Key Identifier:
keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:03:d6:a4:60:0a:8c:ce:ee:9b:ee:d7:ff:74:bb:4f:13:04:
09:5c:4e:70:10:e5:ad:b2:85:83:26:6b:44:ce:ec:90:e4:d7:
85:62:19:7b:b8:c8:a0:58:a7:db:a0:aa:f9:85:69:36:83:dd:
04:90:7d:3b:86:22:24:9f:0f:22:78:4a:06:a2:2b:30:d1:5f:
f4:9d:44:cb:e7:3b:f8:90:d7:6d:7d:76:d1:72:6b:d4:cc:cd:
e6:0e:d5:da:b6:37:68:da:13:a5:9d:49:a6:f8:4a:df:39:2c:
e5:c5:e3:16:f5:2b:f0:4b:db:18:7e:cf:5a:90:81:62:a0:f6:
e4:48:d8:3f:34:02:3b:37:de:9a:aa:0b:da:f5:4f:47:31:64:
15:08:21:f6:9c:af:cb:1b:7b:53:bc:1e:22:eb:21:b3:12:41:
f0:84:3b:96:d7:e1:a4:01:e3:ed:e5:e3:c7:aa:eb:44:29:f3:
6a:9a:d2:c5:8e:f5:bd:37:68:8a:d4:4b:bf:b6:92:21:46:75:
59:a7:70:d0:68:69:3b:91:31:47:a5:22:e5:51:74:4d:4f:b8:
90:dd:3b:89:ee:40:2b:bc:e1:83:e7:6c:d1:af:90:fe:fa:06:
d9:12:0e:ae:5a:7b:11:64:80:6c:0a:44:64:4b:1a:fa:ff:81:
b6:c5:53:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:34:07 2025 by rpki-client