Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: Y2kKHCMoXX9DgooG0eNeaSHD/LfEQ6LhuRkoMFqxJkY=
Subject key identifier: 27:BE:C3:FE:7C:47:37:6D:B0:A3:8D:37:EB:43:F4:63:7A:CF:14:C7
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 0197469DC8DF35B96B69B2E9EE6DAA3F769C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 06E4
Signing time: Fri 06 Jun 2025 19:00:35 +0000
Manifest this update: Fri 06 Jun 2025 19:00:35 +0000
Manifest next update: Sat 07 Jun 2025 19:00:35 +0000
Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: VEtBR6Iv7SkfIu9ncVTX946AVE105dwj2NE6GAS7UHg=)
2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:c8:df:35:b9:6b:69:b2:e9:ee:6d:aa:3f:76:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Jun 6 19:00:35 2025 GMT
Not After : Jun 7 19:00:35 2025 GMT
Subject: CN=27bec3fe7c47376db0a38d37eb43f4637acf14c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:3d:ef:19:e5:2d:ff:14:8c:33:9f:3d:c7:
e7:23:35:27:e4:30:6e:4b:46:b1:ff:68:fd:a8:05:
ca:24:08:26:c6:32:5b:f9:87:9e:62:aa:e5:68:c9:
bc:24:6b:0d:cd:a2:a4:dd:ef:1b:65:d0:e0:65:f2:
b1:22:7e:d4:a8:43:c8:bc:99:91:2f:b6:db:b6:ca:
b9:ac:a2:d9:92:d2:41:ac:df:75:cb:7c:90:f2:b9:
a4:72:37:99:ff:8b:c5:2f:5b:b5:37:85:3d:5b:b0:
a7:73:6c:40:03:14:c4:32:fe:2b:22:2d:60:0a:b0:
62:01:b8:71:88:1d:73:3e:99:03:91:4e:3e:67:0b:
25:dc:4f:f9:a5:7d:7f:d5:d5:65:ad:77:e5:87:75:
78:80:f8:f5:ea:cc:59:24:ec:86:c7:1e:f7:be:9a:
9b:1d:b6:5e:79:e8:7b:c6:60:b2:fc:52:53:86:0d:
ac:ed:eb:cc:ff:9a:de:24:f1:ed:4f:39:ca:f9:df:
5e:f1:54:4c:c8:9a:8e:7a:1d:94:24:b3:ca:7d:2f:
af:1b:e4:34:26:e5:7b:34:9e:51:db:79:39:09:95:
b9:cf:b0:73:1f:fb:7a:9f:ac:35:e7:60:0b:be:72:
32:78:25:21:8a:a6:63:f5:72:a5:14:1a:dd:df:1e:
60:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BE:C3:FE:7C:47:37:6D:B0:A3:8D:37:EB:43:F4:63:7A:CF:14:C7
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e7:19:3b:3a:b7:7c:db:d1:f9:c5:e3:06:17:14:dd:ee:f1:
38:6f:aa:48:d8:da:b5:d7:ae:c5:08:7a:0e:15:d6:37:0c:e5:
71:3d:53:98:36:34:a5:47:75:eb:3e:52:b9:d1:31:7c:ce:be:
67:92:11:12:19:37:cd:aa:68:14:81:3c:ca:39:b1:b4:0b:3d:
fd:04:96:61:fd:f5:b4:bb:bc:82:54:28:e3:6f:e2:f4:ee:a4:
6c:f3:db:83:c0:72:70:4d:5d:cb:db:62:d2:13:64:f5:ac:81:
70:b4:b2:ce:e3:24:8c:ec:9d:e3:fc:08:12:fb:03:19:53:63:
f2:17:c8:09:25:5d:6c:e5:01:e6:c4:de:69:ae:18:11:c0:ff:
3f:f4:d9:09:ac:7e:19:01:f1:5a:19:2f:46:eb:c6:f6:8c:36:
30:10:1c:c8:e9:80:c0:31:be:86:24:2e:65:93:17:48:dc:f2:
dc:35:54:93:f3:4f:93:5a:23:e5:90:45:85:e8:8e:1d:d8:2c:
ac:b5:f0:7c:5f:06:71:92:36:4a:ae:ab:6c:e0:92:09:12:6e:
26:c5:62:72:07:d4:56:02:4e:34:03:0b:60:1c:3f:56:ec:fc:
82:1a:dc:96:ed:cf:05:bb:74:04:3d:5a:07:0b:81:13:03:91:
1f:b9:12:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGncjfNblrabLp7m2qP3acMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjY0NDZiMGM2ZGNkY2RmN2YzYjlhYzQxMTc4N2M2ZjJl
YjdiMjQwHhcNMjUwNjA2MTkwMDM1WhcNMjUwNjA3MTkwMDM1WjAzMTEwLwYDVQQD
EygyN2JlYzNmZTdjNDczNzZkYjBhMzhkMzdlYjQzZjQ2MzdhY2YxNGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloE97xnlLf8UjDOfPcfnIzUn5DBu
S0ax/2j9qAXKJAgmxjJb+YeeYqrlaMm8JGsNzaKk3e8bZdDgZfKxIn7UqEPIvJmR
L7bbtsq5rKLZktJBrN91y3yQ8rmkcjeZ/4vFL1u1N4U9W7Cnc2xAAxTEMv4rIi1g
CrBiAbhxiB1zPpkDkU4+Zwsl3E/5pX1/1dVlrXflh3V4gPj16sxZJOyGxx73vpqb
HbZeeeh7xmCy/FJThg2s7evM/5reJPHtTznK+d9e8VRMyJqOeh2UJLPKfS+vG+Q0
JuV7NJ5R23k5CZW5z7BzH/t6n6w152ALvnIyeCUhiqZj9XKlFBrd3x5gDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCe+w/58RzdtsKONN+tD9GN6zxTHMB8GA1UdIwQY
MBaAFKS2RGsMbc3N9/O5rEEXh8by63skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMt
Yzk0ZDM5M2I4YTk3LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMtYzk0ZDM5M2I4YTk3
LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOcZOzq3
fNvR+cXjBhcU3e7xOG+qSNjatdeuxQh6DhXWNwzlcT1TmDY0pUd16z5SudExfM6+
Z5IREhk3zapoFIE8yjmxtAs9/QSWYf31tLu8glQo42/i9O6kbPPbg8BycE1dy9ti
0hNk9ayBcLSyzuMkjOyd4/wIEvsDGVNj8hfICSVdbOUB5sTeaa4YEcD/P/TZCax+
GQHxWhkvRuvG9ow2MBAcyOmAwDG+hiQuZZMXSNzy3DVUk/NPk1oj5ZBFheiOHdgs
rLXwfF8GcZI2Sq6rbOCSCRJuJsVicgfUVgJONAMLYBw/Vuz8ghrclu3PBbt0BD1a
BwuBEwORH7kSEA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:07:48 2025 by rpki-client