Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: 0Nb1sbhksydiw1aRLpUePii9YTxc4S9gglHdFbZ4sDw=
Subject key identifier: 87:90:E7:9E:83:C2:07:D0:9D:69:BC:04:B2:A2:B6:9D:BE:46:9C:6A
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 01964255814416585687C2BE7F72879545D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 10A1
Signing time: Thu 17 Apr 2025 06:00:22 +0000
Manifest this update: Thu 17 Apr 2025 06:00:22 +0000
Manifest next update: Fri 18 Apr 2025 06:00:22 +0000
Files and hashes: 1: 7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa (hash: sSokJSwDE7TenrNiAqYNMhbgz0iCXtyPGRTOZYronAY=)
2: YVWuJ6FTMU1uU3iR7ed746pUzUU.roa (hash: oVu2kWcJUFQzXCLu/Vci/BnnMXJVo57f7gbHz7uSAXM=)
3: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: vzK0F3/Ae6Oy3piD/YWOkUiHyNPqNnP8z/bcKoF3YZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:55:81:44:16:58:56:87:c2:be:7f:72:87:95:45:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Apr 17 06:00:22 2025 GMT
Not After : Apr 18 06:00:22 2025 GMT
Subject: CN=8790e79e83c207d09d69bc04b2a2b69dbe469c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:d2:37:7d:26:0e:b0:77:cc:8f:15:96:82:
09:66:29:01:3c:c2:dd:52:70:43:47:37:00:64:6c:
6d:a2:79:23:42:c8:e6:0d:5c:37:34:fc:3c:dd:6b:
eb:35:a7:24:07:f2:09:f0:ac:ff:f4:be:6a:26:a2:
a8:86:be:e7:81:9b:39:8e:3e:97:7d:c7:e4:97:ee:
83:fb:ad:7a:b2:65:58:4a:07:dd:96:92:2b:57:31:
19:fc:c2:ff:cb:25:66:77:32:5d:ca:c9:4d:c0:36:
00:77:83:7a:89:8a:ce:21:6b:47:62:17:5b:5a:47:
92:b8:14:04:04:10:c4:2d:a1:52:7f:0d:d0:8b:2b:
bf:8d:f7:89:ba:4b:55:ec:c5:f2:e0:ee:20:b8:06:
9b:08:01:c3:f5:10:4b:dd:48:cd:af:f3:2d:d8:ad:
c1:21:03:c7:a8:58:3b:98:4e:ea:48:93:09:69:fc:
08:8f:bf:ec:d4:32:8d:3b:35:07:d2:ff:30:55:d2:
3f:93:ae:a6:d3:4c:27:4a:a9:2f:b6:98:c6:d7:39:
cd:ee:90:d7:19:18:74:b4:94:b1:e3:17:56:b8:48:
fb:25:61:f1:32:80:f3:6e:03:af:9a:bf:4c:e8:f8:
37:4c:70:89:ff:0b:24:96:16:94:f1:ec:8f:f3:8d:
f3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:90:E7:9E:83:C2:07:D0:9D:69:BC:04:B2:A2:B6:9D:BE:46:9C:6A
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ea:aa:83:5f:29:b7:ec:c5:b8:40:bc:d5:7b:93:79:24:a7:
8c:e3:4b:63:e1:0d:ce:29:4d:b1:f1:2b:c8:30:74:23:a4:31:
25:5c:1b:a4:a1:4f:94:30:e4:d1:03:bb:5a:37:12:72:b8:4f:
b5:70:b8:fa:bf:a2:b1:15:8a:e6:6f:c1:3e:f4:b2:8e:c9:87:
12:96:42:40:ff:b5:0f:ab:7e:4d:b5:76:73:2c:fd:6d:d7:1e:
aa:9c:c1:67:99:cc:d7:e7:f3:5b:1a:83:ae:b4:16:f0:37:77:
16:3d:16:20:c5:cb:57:54:6c:45:f2:26:6c:25:a4:59:c0:f0:
0f:13:a2:d1:41:2e:ac:cd:50:eb:f9:49:29:dd:26:61:ac:d7:
35:4c:2a:8d:57:63:1c:99:b8:69:47:9e:9b:c1:23:9e:d4:bc:
1a:0e:06:71:66:af:ff:1a:45:f8:7a:2e:1d:47:8b:dd:9f:bb:
fe:b5:82:e9:ac:fb:b8:db:20:3d:3a:d6:3e:11:6e:a8:7b:29:
d3:a4:3f:20:09:d8:ec:be:da:e1:6a:7e:be:22:9a:61:32:db:
3e:78:74:db:5f:6b:7d:41:ed:c0:97:3a:d5:5a:22:c2:83:40:
fb:26:f7:21:b1:79:01:69:7d:01:d4:0d:f0:6a:2b:1c:53:05:
14:33:96:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:00:42 2025 by rpki-client