Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
File: _PLPcoTXoDRugvN4rYMPV8OWG20.mft (raw, json)
Hash identifier: /mZXREYuu0qqwj6sgDxepsD5fWyrr8wfA37NJFLj8SI=
Subject key identifier: 68:CB:FE:39:33:97:ED:47:C7:8C:30:B5:24:71:42:B8:7B:F7:75:0E
Authority key identifier: FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
Certificate issuer: /CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Certificate serial: 0194C350F65475C53C38A22BF35BE85DD7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
Manifest number: 073A
Signing time: Sat 01 Feb 2025 21:00:50 +0000
Manifest this update: Sat 01 Feb 2025 21:00:50 +0000
Manifest next update: Sun 02 Feb 2025 21:00:50 +0000
Files and hashes: 1: _PLPcoTXoDRugvN4rYMPV8OWG20.crl (hash: ++1eVy+kwASWxtDIkNwpYKLnTE6o99qX8R+vrWdfodk=)
2: c1o3ffEqrdrU8ebbTBwhLFlhPXg.roa (hash: fm+w7SzhvawtVdf496aqLGV6dF6J/LTyEnyM1VppA6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:f6:54:75:c5:3c:38:a2:2b:f3:5b:e8:5d:d7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Validity
Not Before: Feb 1 21:00:50 2025 GMT
Not After : Feb 2 21:00:50 2025 GMT
Subject: CN=68cbfe393397ed47c78c30b5247142b87bf7750e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:b5:c7:08:f9:70:09:b7:69:fc:c3:10:2b:
6f:01:92:0c:68:ca:76:06:32:5b:8d:6d:07:e8:8a:
83:55:64:2b:8d:76:34:89:42:ed:ba:7f:ce:00:31:
88:a8:fd:4a:f4:d4:00:cd:20:00:1e:e2:4d:e0:f1:
1f:0c:b0:1c:62:75:1a:5a:5e:59:a3:44:6c:5b:ef:
62:22:2b:56:fe:2b:3a:cd:16:fd:10:9c:77:00:38:
a9:46:5f:49:c3:e7:06:c3:89:2f:c7:e7:c9:b0:02:
42:a5:50:71:45:19:1d:b7:32:67:9c:c2:c6:cf:1c:
ba:e5:70:30:18:b4:8c:8e:58:b6:74:9c:ef:49:e4:
3a:53:24:ea:25:40:22:63:33:fb:02:47:c5:0e:ac:
66:13:b8:4b:2d:9d:a6:b8:aa:c1:25:9d:29:16:af:
e6:88:bc:c4:f8:52:bb:e2:ba:b1:9b:46:1a:be:fb:
e0:31:ba:35:e4:09:20:1d:71:0d:6c:5c:83:87:bb:
f0:9b:fe:51:dd:21:1f:5c:43:5e:52:ab:3d:10:52:
6b:4a:4c:60:fa:ff:e9:88:31:16:bb:97:e8:90:56:
0d:d5:2f:04:b1:68:60:cf:32:10:63:87:88:1b:fa:
b3:f7:db:e6:3b:c6:b7:26:3f:ef:04:c2:b0:e5:9e:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CB:FE:39:33:97:ED:47:C7:8C:30:B5:24:71:42:B8:7B:F7:75:0E
X509v3 Authority Key Identifier:
keyid:FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:14:2a:b1:24:d5:7d:d9:85:65:13:3f:e9:65:84:22:d7:9f:
3d:f5:9a:f6:e2:d8:9a:1d:02:a8:02:0f:a9:89:d3:6f:0a:02:
97:d5:69:ee:48:c2:d9:4b:44:a6:b0:80:f4:e7:ec:79:22:58:
bf:97:c6:46:d4:3d:a8:74:70:2c:44:82:85:43:1a:5f:7c:94:
11:41:2a:0e:84:c2:6b:2f:ef:be:10:6b:49:4f:02:f3:1f:83:
68:cc:b8:5b:bd:9b:57:2d:e3:de:6e:48:e2:52:d7:10:62:d1:
e9:1a:2d:d7:9a:ba:88:96:af:89:8a:16:9b:ac:dc:f8:df:f1:
37:ca:a2:6d:b7:d7:33:ff:3c:d2:cf:3a:4b:32:03:58:84:df:
c4:82:ec:e0:79:8b:88:7c:bf:2e:20:9a:8f:44:ea:05:3f:e8:
94:8b:9f:40:52:71:2c:d8:3a:e7:3b:79:f4:ca:d0:13:2d:fb:
53:14:3e:43:fb:46:fe:36:92:bc:cf:ad:cb:ff:cc:a5:b2:6c:
f2:38:92:6a:0e:5d:10:10:33:0a:98:39:38:26:25:6c:1b:7e:
d0:c9:ec:c8:53:e7:10:9d:01:4e:78:1e:47:6a:61:18:17:c8:
83:a5:5d:dc:47:8d:fe:e3:07:7e:fd:02:a7:28:e7:dd:4d:1f:
07:46:fa:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDUPZUdcU8OKIr81voXdfWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZjJjZjcyODRkN2EwMzQ2ZTgyZjM3OGFkODMwZjU3YzM5
NjFiNmQwHhcNMjUwMjAxMjEwMDUwWhcNMjUwMjAyMjEwMDUwWjAzMTEwLwYDVQQD
Eyg2OGNiZmUzOTMzOTdlZDQ3Yzc4YzMwYjUyNDcxNDJiODdiZjc3NTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo61xwj5cAm3afzDECtvAZIMaMp2
BjJbjW0H6IqDVWQrjXY0iULtun/OADGIqP1K9NQAzSAAHuJN4PEfDLAcYnUaWl5Z
o0RsW+9iIitW/is6zRb9EJx3ADipRl9Jw+cGw4kvx+fJsAJCpVBxRRkdtzJnnMLG
zxy65XAwGLSMjli2dJzvSeQ6UyTqJUAiYzP7AkfFDqxmE7hLLZ2muKrBJZ0pFq/m
iLzE+FK74rqxm0YavvvgMbo15AkgHXENbFyDh7vwm/5R3SEfXENeUqs9EFJrSkxg
+v/piDEWu5fokFYN1S8EsWhgzzIQY4eIG/qz99vmO8a3Jj/vBMKw5Z5XYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjL/jkzl+1Hx4wwtSRxQrh793UOMB8GA1UdIwQY
MBaAFPzyz3KE16A0boLzeK2DD1fDlhttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMt
YjY4MzViNzMyYWQ2LzEvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMtYjY4MzViNzMyYWQ2
LzEvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxQqsSTV
fdmFZRM/6WWEItefPfWa9uLYmh0CqAIPqYnTbwoCl9Vp7kjC2UtEprCA9OfseSJY
v5fGRtQ9qHRwLESChUMaX3yUEUEqDoTCay/vvhBrSU8C8x+DaMy4W72bVy3j3m5I
4lLXEGLR6Rot15q6iJaviYoWm6zc+N/xN8qibbfXM/880s86SzIDWITfxILs4HmL
iHy/LiCaj0TqBT/olIufQFJxLNg65zt59MrQEy37UxQ+Q/tG/jaSvM+ty//MpbJs
8jiSag5dEBAzCpg5OCYlbBt+0MnsyFPnEJ0BTngeR2phGBfIg6Vd3EeN/uMHfv0C
pyjn3U0fB0b68w==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:27 2025 by rpki-client