Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
File: pLZdoXU_tO7tuG_ah906-mnYYtA.mft (raw, json)
Hash identifier: U/8uBveYN6/OD66Poo2V427XLCJ+wt0sGOHV3TbMm6c=
Subject key identifier: 21:78:D7:58:64:B6:64:E9:34:75:C5:60:27:28:F4:2E:97:6A:65:1F
Authority key identifier: A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
Certificate issuer: /CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Certificate serial: 01974C32517A68954EDBAC3EDCB53DF74623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
Manifest number: 08F8
Signing time: Sat 07 Jun 2025 21:00:55 +0000
Manifest this update: Sat 07 Jun 2025 21:00:55 +0000
Manifest next update: Sun 08 Jun 2025 21:00:55 +0000
Files and hashes: 1: 9VAtH6rT9AmgMjM5y2MsDg-1uuk.roa (hash: wQrCWKGL3Sn9wGoFnk6i9VJ1UdYXoGTZv1+i2lw0LfY=)
2: pLZdoXU_tO7tuG_ah906-mnYYtA.crl (hash: TfIBKZUmMuPFSdb+nSFAHq2+/JYv+NW9t/aMVC5hJuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:51:7a:68:95:4e:db:ac:3e:dc:b5:3d:f7:46:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Validity
Not Before: Jun 7 21:00:55 2025 GMT
Not After : Jun 8 21:00:55 2025 GMT
Subject: CN=2178d75864b664e93475c5602728f42e976a651f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:10:1d:fb:0b:b0:7d:2c:57:b1:8e:07:fb:3c:
55:34:de:ec:84:c5:9a:c5:27:51:22:3a:a8:77:97:
cc:45:52:b0:1d:0a:ca:34:50:cd:db:df:9e:3c:ce:
5d:fc:03:44:f6:b2:0a:be:aa:e1:a0:08:ea:4d:dc:
8f:e8:8e:e9:be:90:af:b6:eb:9f:f8:1a:4f:bb:54:
9a:d5:17:d0:f4:83:9f:6e:46:0e:bc:1e:8d:cb:71:
47:7a:2b:36:09:27:9e:d7:02:34:8c:69:60:5a:6a:
90:58:2e:3f:7e:96:3f:eb:5f:da:f0:9f:9e:4a:b3:
19:85:57:d0:bb:ea:5f:35:2e:a4:e7:0e:99:c8:fc:
2e:d4:da:65:e0:08:8a:a1:41:f1:77:c4:d5:25:02:
5f:5b:b0:b0:49:76:1d:2a:04:d7:ca:0f:41:27:52:
77:c5:94:86:0a:03:53:0a:4b:99:b0:c2:7e:b0:50:
22:98:86:90:bd:04:9c:6d:c9:99:fe:92:eb:a0:fd:
80:b2:b0:47:ac:44:91:1d:5d:81:e3:53:63:9a:40:
c1:93:ca:e2:8f:07:2a:1a:ba:1b:e8:80:c7:c4:8a:
81:f5:86:ec:b4:71:fe:fd:10:cc:51:dd:2e:95:a7:
de:04:0d:f2:2f:b1:c2:1a:a6:45:13:d7:03:bc:08:
8c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:78:D7:58:64:B6:64:E9:34:75:C5:60:27:28:F4:2E:97:6A:65:1F
X509v3 Authority Key Identifier:
keyid:A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:00:be:c2:5a:4c:d9:f4:ed:6e:11:94:1b:91:8d:52:37:23:
11:7b:c7:0f:38:40:8f:fe:df:0d:fa:c4:32:4b:37:22:0d:e1:
53:fc:37:e2:35:cf:67:b4:d8:7d:64:e2:05:d0:f7:0a:6d:12:
6c:62:48:b7:36:90:35:85:34:b6:0a:ef:14:0c:d4:bd:c0:2a:
39:42:93:4e:22:30:bf:24:5c:d9:a4:b3:83:02:3c:ff:7c:03:
39:b6:43:3a:da:20:82:f9:75:84:82:c6:ee:69:3c:65:ad:e9:
dd:73:a9:85:3d:27:71:c5:cc:c6:12:0e:c4:79:ae:8c:c7:33:
98:21:e8:18:3b:78:84:26:2b:3a:50:b5:0a:59:3e:7d:68:75:
f3:a4:69:6c:03:e3:f7:ee:32:51:67:83:29:6e:dd:bd:a9:3d:
34:da:92:64:7b:35:74:d8:db:c9:cd:fc:ec:1c:c2:14:f2:06:
4d:10:b1:6b:66:05:68:75:cf:24:67:8d:f5:23:38:2d:ab:a9:
b9:54:47:09:a8:f8:98:02:da:65:e8:68:8a:0b:cc:82:3e:00:
0e:af:e5:6b:5d:05:42:ff:67:a5:9b:8d:78:2b:88:5d:88:54:
e7:f0:e3:54:fc:7c:75:f9:ce:41:86:b2:21:5e:18:41:2d:26:
9d:10:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:10:01 2025 by rpki-client