Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
File: pPLix3U2Usd9u3nL4GmyurA_YN0.mft (raw, json)
Hash identifier: YRFYAnojkiwqlBCSsJp8q7BDrQ6vEB/0Q1pnd9xJC3A=
Subject key identifier: 97:F6:53:AD:71:DA:5E:68:7F:78:EB:16:69:ED:7F:D6:15:C6:7E:14
Authority key identifier: A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
Certificate issuer: /CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Certificate serial: 01962C3CC6C3E81721F248A194FA0E6B3551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
Manifest number: 14E9
Signing time: Sat 12 Apr 2025 23:01:42 +0000
Manifest this update: Sat 12 Apr 2025 23:01:42 +0000
Manifest next update: Sun 13 Apr 2025 23:01:42 +0000
Files and hashes: 1: GDxm2zcd8Lnhjk0mCi0fCSfcw18.roa (hash: 2s+mStFbGwTH5aRw2Ej0hEDuLtxVhcXn931+yvpJuwg=)
2: pPLix3U2Usd9u3nL4GmyurA_YN0.crl (hash: Yz6ThYq3crdqtUa44iC2/xCSNeJEJQYGQASG8mx1/UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:3c:c6:c3:e8:17:21:f2:48:a1:94:fa:0e:6b:35:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Validity
Not Before: Apr 12 23:01:42 2025 GMT
Not After : Apr 13 23:01:42 2025 GMT
Subject: CN=97f653ad71da5e687f78eb1669ed7fd615c67e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:b0:d9:0d:ec:ee:f1:9d:ee:5e:3f:97:fe:
a9:3c:39:37:c5:49:94:92:7d:be:9e:db:00:cd:5d:
18:fc:b2:22:9e:33:32:45:18:c7:aa:62:00:f3:34:
c2:f1:43:04:15:57:9b:47:82:b1:d2:da:ad:e5:15:
2c:ed:24:32:c3:19:75:5b:c3:ca:5a:3e:39:8b:1d:
a1:b7:e7:fb:6b:83:8b:d8:82:67:d1:d2:fe:39:9e:
59:4a:86:e3:a7:17:41:05:11:3e:3b:5c:a1:ea:61:
9a:16:6a:ac:f5:a3:b2:bb:c4:fe:80:34:fc:fc:cf:
8a:cd:04:74:8e:3e:b8:c1:8a:41:54:5d:8a:d4:e2:
28:b9:5b:cb:ec:23:e4:bd:03:00:01:51:ed:03:51:
b8:dc:2b:b4:cd:58:cc:ed:d4:00:0c:59:82:26:fb:
41:7b:9e:ff:37:77:19:67:20:9c:78:2b:38:99:f2:
c0:9e:9d:c1:f7:c7:08:c4:08:85:f3:2c:a9:80:bb:
c6:64:08:ae:63:f7:97:1c:c3:aa:ac:b8:0a:a1:c4:
32:36:24:82:18:eb:a4:95:85:3e:54:38:e5:aa:76:
7d:4b:a9:cc:12:38:bb:65:d2:72:72:b5:3d:46:06:
2e:6c:da:2b:f3:d5:9e:b3:6d:6a:59:95:65:57:72:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F6:53:AD:71:DA:5E:68:7F:78:EB:16:69:ED:7F:D6:15:C6:7E:14
X509v3 Authority Key Identifier:
keyid:A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6b:81:e2:1d:26:15:5b:1e:0f:df:40:5a:0e:c3:bb:05:00:
87:43:d9:01:91:2c:64:37:b6:c8:21:35:5e:f0:e9:f5:0c:f1:
91:16:86:66:54:44:09:e4:48:d2:6d:3e:37:9b:f3:d1:43:91:
e3:43:9e:bc:53:00:92:a6:fc:7a:9a:ad:73:80:bc:1e:bb:65:
94:df:85:41:88:a3:43:03:64:14:69:d2:74:87:bf:06:ac:69:
b2:84:e0:dd:f2:75:42:fa:d0:03:08:8f:14:2b:79:79:ff:e8:
31:bb:32:1b:79:2f:a7:7f:71:9e:b3:07:b4:20:61:16:9d:f0:
9a:be:55:26:b9:9e:5f:e8:8c:fe:99:ff:8e:48:55:0e:2b:b3:
9e:f3:51:83:61:a6:ef:2e:4c:d6:d9:e7:14:5c:c8:7f:4e:0d:
e1:b3:08:dd:7f:0a:8d:0e:3c:f7:75:6c:63:3e:bf:02:a2:bc:
54:36:d3:3e:de:0c:74:aa:be:28:5f:3f:56:e6:5e:6f:38:56:
cb:bf:fa:ab:1b:60:fb:0a:6c:5f:69:42:a1:84:2f:34:c1:5b:
be:20:1f:ae:c5:99:55:58:a4:c5:7d:f2:87:1c:19:a2:b4:b4:
98:7d:7a:fe:09:95:ad:92:13:98:8c:eb:f1:31:87:2e:c3:7b:
36:6e:db:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYsPMbD6Bch8kihlPoOazVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjJlMmM3NzUzNjUyYzc3ZGJiNzljYmUwNjliMmJhYjAz
ZjYwZGQwHhcNMjUwNDEyMjMwMTQyWhcNMjUwNDEzMjMwMTQyWjAzMTEwLwYDVQQD
Eyg5N2Y2NTNhZDcxZGE1ZTY4N2Y3OGViMTY2OWVkN2ZkNjE1YzY3ZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujyw2Q3s7vGd7l4/l/6pPDk3xUmU
kn2+ntsAzV0Y/LIinjMyRRjHqmIA8zTC8UMEFVebR4Kx0tqt5RUs7SQywxl1W8PK
Wj45ix2ht+f7a4OL2IJn0dL+OZ5ZSobjpxdBBRE+O1yh6mGaFmqs9aOyu8T+gDT8
/M+KzQR0jj64wYpBVF2K1OIouVvL7CPkvQMAAVHtA1G43Cu0zVjM7dQADFmCJvtB
e57/N3cZZyCceCs4mfLAnp3B98cIxAiF8yypgLvGZAiuY/eXHMOqrLgKocQyNiSC
GOuklYU+VDjlqnZ9S6nMEji7ZdJycrU9RgYubNor89Wes21qWZVlV3JTaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJf2U61x2l5of3jrFmntf9YVxn4UMB8GA1UdIwQY
MBaAFKTy4sd1NlLHfbt5y+BpsrqwP2DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81ODA5YTUtYmJkYy00M2VhLTk0YzQt
OWQxYTJlMDkxMWI5LzEvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81ODA5YTUtYmJkYy00M2VhLTk0YzQtOWQxYTJlMDkxMWI5
LzEvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmuB4h0m
FVseD99AWg7DuwUAh0PZAZEsZDe2yCE1XvDp9QzxkRaGZlRECeRI0m0+N5vz0UOR
40OevFMAkqb8epqtc4C8HrtllN+FQYijQwNkFGnSdIe/BqxpsoTg3fJ1QvrQAwiP
FCt5ef/oMbsyG3kvp39xnrMHtCBhFp3wmr5VJrmeX+iM/pn/jkhVDiuznvNRg2Gm
7y5M1tnnFFzIf04N4bMI3X8KjQ4893VsYz6/AqK8VDbTPt4MdKq+KF8/VuZebzhW
y7/6qxtg+wpsX2lCoYQvNMFbviAfrsWZVVikxX3yhxwZorS0mH16/gmVrZITmIzr
8TGHLsN7Nm7b0g==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:39:08 2025 by rpki-client