Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier: 0zZjgk3YOhXwJFjvCTF48JLkkUs6XohkpyLu4swui5k=
Subject key identifier: 4A:54:14:0D:4F:2E:1F:8E:82:7C:B9:3A:A3:24:EE:29:2C:74:94:6A
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial: 01974F32E5AD2B92B2943E3AF95161D5D600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number: 01DB
Signing time: Sun 08 Jun 2025 11:00:24 +0000
Manifest this update: Sun 08 Jun 2025 11:00:24 +0000
Manifest next update: Mon 09 Jun 2025 11:00:24 +0000
Files and hashes: 1: NJyfKGT7eHHPjQOAXKwVNKCjCYs.roa (hash: XDn/F11FiIWe6mjWs24N5BRlzAoQS5rK8vutFukkZcU=)
2: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: 8SigTdm5LmDp6u36f5QU8n2z4fzyg5VpuloT09MVXEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:32:e5:ad:2b:92:b2:94:3e:3a:f9:51:61:d5:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Validity
Not Before: Jun 8 11:00:24 2025 GMT
Not After : Jun 9 11:00:24 2025 GMT
Subject: CN=4a54140d4f2e1f8e827cb93aa324ee292c74946a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:b6:a4:14:ba:37:16:8c:ef:18:96:c0:c8:
5b:48:26:c7:82:ff:f3:3a:19:9f:d6:88:40:a1:3f:
47:71:74:82:30:05:ea:3c:0b:a1:9a:58:28:b9:bf:
60:47:d0:e6:55:5f:99:cf:6b:d7:6f:72:99:fb:ab:
5f:91:b4:a8:29:44:87:e8:1b:cb:c9:c0:96:ae:42:
b2:e1:d6:56:2c:3d:d3:dc:1d:42:ee:d4:f0:b8:f7:
f6:da:34:30:e5:83:a3:44:95:59:1b:27:c4:1b:d4:
a8:18:60:51:1b:28:52:7c:ab:8e:6f:37:a9:34:11:
1f:3f:00:dc:81:19:3a:a4:1d:1d:01:82:3f:90:78:
96:44:78:96:57:94:27:10:d4:15:d1:f5:81:bb:75:
d4:02:bf:de:2f:a4:7f:de:ce:f9:5f:42:c6:62:17:
5e:84:e4:71:46:40:18:f0:23:d8:95:e1:30:0d:55:
61:e1:0e:b8:14:e4:90:54:b8:34:8c:42:6e:59:bb:
f8:b7:bd:76:96:aa:7e:be:86:47:9f:f9:0c:42:fa:
9f:07:f7:b6:0c:e3:5b:c2:0a:fe:f9:1f:ec:93:39:
0a:ad:12:92:26:28:e7:80:6d:88:ff:83:fb:21:67:
03:33:9b:5a:c3:83:e5:ef:11:ba:94:50:20:a2:ee:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:54:14:0D:4F:2E:1F:8E:82:7C:B9:3A:A3:24:EE:29:2C:74:94:6A
X509v3 Authority Key Identifier:
keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3a:6e:95:e6:de:96:59:b4:eb:0d:a7:ec:76:91:44:3f:35:
0d:7f:18:c0:78:34:4d:42:b1:c1:e4:75:0c:5d:78:e6:de:51:
0d:eb:c6:22:b7:1c:da:13:f3:91:f1:c5:e9:b4:15:31:65:5d:
e0:1e:ed:ed:b8:aa:10:9b:5b:e7:0a:e3:b9:34:d6:23:3f:59:
e9:e8:36:fc:ac:f9:c5:c2:46:a6:f0:48:0e:5c:e9:a9:5f:71:
71:30:72:5f:9b:ff:11:ec:0a:c3:6e:36:a0:bd:7a:37:ab:3a:
03:d7:8b:e0:57:a1:b6:ab:a9:a8:68:a6:98:21:e1:59:48:04:
cf:86:99:f1:66:c6:48:6a:1b:ae:84:70:59:67:b5:50:64:8a:
c1:67:18:6e:60:96:a6:d8:dd:f9:82:fe:67:1d:70:98:72:5e:
ef:8c:52:01:3d:1e:0c:6c:03:ae:56:bd:f8:a5:47:3d:37:12:
33:b1:ab:bf:fb:36:9d:e1:0f:8a:65:b6:80:a7:c9:89:ac:00:
af:1c:51:b1:e1:71:66:c2:48:3e:5b:ae:39:73:fd:c3:df:09:
40:6b:52:53:17:01:94:b5:f0:8f:bc:29:e8:c8:cc:15:0d:8f:
ff:bf:64:2f:80:5b:e4:95:a9:37:c1:6e:ab:07:24:5f:02:03:
d9:20:a3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:51:39 2025 by rpki-client