Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier: nLFFNnkAhFfPJty8v5CLcaMI5XQzshx+30zL8edjCxQ=
Subject key identifier: BB:60:09:EA:9F:1A:6B:54:77:B1:DF:5C:5B:0B:12:01:29:D6:12:36
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial: 019577FDD10DEF68AF66B1EA24425A1B1A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number: E7
Signing time: Sat 08 Mar 2025 23:01:17 +0000
Manifest this update: Sat 08 Mar 2025 23:01:17 +0000
Manifest next update: Sun 09 Mar 2025 23:01:17 +0000
Files and hashes: 1: NJyfKGT7eHHPjQOAXKwVNKCjCYs.roa (hash: XDn/F11FiIWe6mjWs24N5BRlzAoQS5rK8vutFukkZcU=)
2: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: CoGI8Mt8T7x0AiJQhTrGxnI+vUiXL1HM3erDB2jgZDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:77:fd:d1:0d:ef:68:af:66:b1:ea:24:42:5a:1b:1a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Validity
Not Before: Mar 8 23:01:17 2025 GMT
Not After : Mar 9 23:01:17 2025 GMT
Subject: CN=bb6009ea9f1a6b5477b1df5c5b0b120129d61236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:d8:a2:20:06:83:d0:99:46:47:34:01:8c:
cb:72:0e:a4:26:8d:b2:78:c0:4f:c7:99:f6:e2:05:
c9:8a:3b:d6:b1:2f:58:37:5e:34:1f:13:93:68:51:
c6:47:6f:44:af:ff:e3:29:18:8b:ad:25:b0:44:f0:
72:69:9a:fd:d7:3a:05:b1:2e:e5:ea:b9:dd:58:a4:
f5:27:80:c0:80:77:12:f5:48:c2:f2:65:60:f2:c4:
a5:57:92:d9:fc:77:a3:5a:5f:c8:0b:67:59:c4:f6:
60:31:24:ee:88:6a:08:4d:93:2e:b1:e2:53:0e:dd:
5b:70:d8:12:3e:e4:ff:8e:01:23:d8:00:86:54:bb:
63:39:25:3e:4f:9d:a1:44:7c:44:5e:36:18:91:46:
78:5b:81:69:5e:59:e6:98:8a:fc:c3:a0:02:a8:c2:
bb:19:20:f1:8f:3e:27:26:af:ac:d5:ed:ed:58:29:
99:f0:c0:c4:3b:e5:5b:c0:3b:3f:b1:d1:28:a6:7e:
09:99:98:f8:20:01:da:bd:13:90:1b:9a:36:ec:a4:
54:22:82:58:c5:9f:38:bd:3d:a4:2e:e9:f7:2e:b6:
e9:85:6c:71:27:ea:39:c0:1e:25:44:50:83:d1:a1:
2b:ac:53:56:e7:db:cd:ea:76:40:1c:74:49:62:96:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:60:09:EA:9F:1A:6B:54:77:B1:DF:5C:5B:0B:12:01:29:D6:12:36
X509v3 Authority Key Identifier:
keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:83:7a:aa:97:5c:8a:76:5b:2f:73:1c:7b:ef:c1:5d:fa:66:
dc:60:ba:3d:46:a5:65:eb:f8:ac:dd:5b:58:2f:6b:98:ac:7a:
6f:29:95:8e:00:26:54:b3:06:74:da:92:f5:66:2e:be:59:ed:
4e:f0:64:37:a7:35:bf:00:fb:fe:8b:f9:7d:1d:4e:02:f7:51:
00:44:16:3a:d2:28:8e:14:6c:d9:5a:b6:5b:f9:16:e9:b2:70:
cf:21:c1:3d:07:6c:5f:74:40:3b:40:67:b0:5f:f0:64:6f:65:
38:ed:bb:e3:be:a1:6f:f4:85:45:c6:b1:e7:cb:6b:ae:09:6d:
5c:1d:b4:48:4b:73:fb:67:1b:76:60:1f:e2:e2:8d:87:bb:44:
32:aa:e7:f9:bb:2c:15:d8:c8:17:df:86:d1:50:4e:0b:97:f7:
1f:7f:ef:c7:ab:43:24:94:a9:ee:9b:6f:c1:b9:6c:6b:2a:13:
39:8f:71:23:c9:6c:96:97:f0:e9:5b:99:da:a5:4f:b1:79:6c:
40:2c:ab:2a:8b:4a:69:68:3d:d0:7e:e7:50:fc:9b:94:a8:a1:
35:6d:a1:01:69:22:7a:68:1a:2b:5e:4c:b4:97:ac:34:f9:6b:
c3:24:ed:78:be:e3:68:90:72:ea:c5:5c:e2:30:7f:b6:ab:3f:
26:66:aa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:05:09 2025 by rpki-client