Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json)
Hash identifier: 6dILMJ08onX5Grp1esUnQvH2fOpvu4p4lizC7YYeEvw=
Subject key identifier: F9:F4:C6:EF:C1:B8:28:49:B4:82:56:16:94:58:F2:80:5C:2A:46:07
Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd
Certificate serial: 0194BABB37A9BE65E7D3BCFA8000A67A1B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
Manifest number: 0EFE
Signing time: Fri 31 Jan 2025 05:00:19 +0000
Manifest this update: Fri 31 Jan 2025 05:00:19 +0000
Manifest next update: Sat 01 Feb 2025 05:00:19 +0000
Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: CmWipPSHW6YZt9hDMZFrWrQyy2l25OlalUPeuuTKkZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:37:a9:be:65:e7:d3:bc:fa:80:00:a6:7a:1b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd
Validity
Not Before: Jan 31 05:00:19 2025 GMT
Not After : Feb 1 05:00:19 2025 GMT
Subject: CN=f9f4c6efc1b82849b48256169458f2805c2a4607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:59:fc:74:e2:fe:cf:e4:40:e0:87:6a:51:0e:
16:03:9f:ac:64:8b:25:3b:2c:96:61:0c:a7:d6:24:
30:93:53:ab:14:e8:89:62:b3:56:45:18:75:5a:ea:
ba:e1:c6:5b:39:77:8e:9f:cf:29:5e:37:73:5f:54:
42:e5:00:c1:6d:ce:ce:0d:b4:40:c2:f4:c9:a0:7e:
35:d4:09:46:64:4e:12:79:72:20:7d:29:d2:ae:f0:
5b:db:35:6d:35:c0:bc:82:b2:e2:46:93:85:96:ba:
89:2b:d8:75:22:9b:b5:ac:07:31:7a:6a:aa:54:6b:
aa:cf:66:dc:96:5d:15:ba:3d:36:2a:4f:dd:a9:6e:
19:59:1a:99:ad:65:56:75:b3:bd:37:98:41:38:97:
d7:e7:cb:1d:79:8b:44:51:4d:01:15:3d:2c:61:b7:
be:0a:05:2c:05:8c:52:01:90:ca:57:b1:2a:6e:c3:
af:87:a3:4f:28:d2:6a:c3:fd:eb:08:eb:83:84:1f:
1c:70:e2:2d:99:e4:31:99:60:65:6b:63:80:dc:ca:
d5:95:85:fe:6a:45:88:87:0d:8e:69:a0:bc:9c:2f:
9a:5c:27:4f:2a:12:82:e9:17:ca:e5:d4:7a:89:20:
da:76:14:d8:e5:f6:01:b2:65:70:64:ab:24:5c:c2:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F4:C6:EF:C1:B8:28:49:B4:82:56:16:94:58:F2:80:5C:2A:46:07
X509v3 Authority Key Identifier:
keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5d:00:88:2a:c7:1a:1d:60:ba:99:94:23:a7:4d:0a:f2:8d:
36:81:29:0f:e0:6f:16:bc:23:54:0b:b1:e5:b8:18:c2:ed:c7:
7e:10:4a:d5:ba:f1:f9:b0:97:8f:89:42:f2:c8:50:86:8e:a3:
ee:18:1a:37:4c:12:a4:53:d7:06:3b:97:45:53:86:62:16:69:
1e:70:07:52:b1:a4:dd:8c:9a:cc:93:18:82:2b:ed:48:17:36:
63:db:dd:1d:eb:df:47:10:65:09:13:5a:e6:1d:34:c0:8a:f9:
11:88:33:1a:dc:31:57:71:2e:a7:cb:d0:f7:ed:de:62:e2:01:
bc:c7:fc:72:7b:03:d7:0a:f3:c9:89:db:26:2c:a9:aa:80:2d:
93:0d:d7:50:29:1e:83:e8:37:a4:f8:9e:2d:57:26:50:31:c0:
93:62:ec:9c:02:15:d5:69:47:ef:00:fc:a7:1b:1e:75:8d:b3:
3c:98:f4:12:05:4f:ae:e9:c4:f1:47:b5:e1:75:ad:6f:d5:22:
17:e6:fa:61:19:1b:04:3c:78:b9:c3:59:3b:9a:6b:35:df:0c:
42:9c:3c:d6:e8:ad:5c:fa:96:bd:4f:56:e0:d1:39:80:75:d6:
17:5a:50:7b:d0:d7:7b:48:c5:ee:d6:64:e6:1a:96:e4:4c:89:
45:d6:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:38 2025 by rpki-client on console-fra.rpki-client.org