Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
File: pdroBcyUvdKfwnEHzWOwvSfJFNA.mft (raw, json)
Hash identifier: KDgCWL2eAV7i8+qCArLRIpIlGBRgGQZQogsdAfUxDA0=
Subject key identifier: 11:53:DA:94:ED:D0:9B:3D:60:EC:B2:B8:05:04:0E:BA:23:C5:DB:7F
Authority key identifier: A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
Certificate issuer: /CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Certificate serial: 0194BABB271857E4F14F0F59CCC8F2966F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 05:00:14 +0000
Manifest this update: Fri 31 Jan 2025 05:00:14 +0000
Manifest next update: Sat 01 Feb 2025 05:00:14 +0000
Files and hashes: 1: jRK4xjLjW0AS7WU026pDGWREkHo.roa (hash: ER6luwoElNhKf2QyVxJrryvA3AGyV4wY+yOa5rcowpY=)
2: pdroBcyUvdKfwnEHzWOwvSfJFNA.crl (hash: O0bUxb6ilZ/52kjm4pqTmxmE3d8sDWA/+y0QfnuHWVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:27:18:57:e4:f1:4f:0f:59:cc:c8:f2:96:6f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Validity
Not Before: Jan 31 05:00:14 2025 GMT
Not After : Feb 1 05:00:14 2025 GMT
Subject: CN=1153da94edd09b3d60ecb2b805040eba23c5db7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:19:eb:0d:e2:9b:ab:2a:b9:35:38:84:4a:
5f:36:60:06:b3:c8:f7:b4:bb:36:92:ae:3c:f6:09:
59:79:ba:04:92:7e:de:44:08:48:50:48:e2:0d:24:
cd:b0:95:38:24:29:74:f6:e5:59:b0:82:e0:25:bb:
1e:94:83:81:85:e6:8b:ef:c9:b3:21:32:04:16:dd:
2e:d8:1e:51:ce:b3:5a:a5:3c:48:00:60:d5:46:59:
0b:ad:ab:44:d1:4b:f8:24:ed:21:44:16:48:f7:5b:
65:37:32:55:1e:c4:4f:fa:87:fd:6e:69:33:86:2d:
c2:0c:19:b1:c4:0c:75:82:bd:4b:40:85:c5:f7:f6:
8c:2c:17:9c:f0:18:95:94:91:13:72:50:a5:4a:50:
41:6a:4d:24:4a:3c:d5:b4:87:1c:5d:b5:04:58:5c:
aa:10:15:05:00:d7:ee:43:c5:4f:62:c8:09:f5:24:
a3:a9:46:aa:74:de:4b:02:5a:8f:19:31:be:5b:cb:
16:af:6d:6d:2e:77:f4:ab:cb:37:9d:56:df:40:da:
d6:e0:5e:e0:dc:f2:f2:7a:a8:43:aa:b5:58:96:9d:
91:f6:f3:2d:9d:0f:68:1d:39:17:e7:97:bb:2c:c2:
2c:3a:02:e7:5e:82:60:bc:17:92:bb:a1:fd:2b:1e:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:53:DA:94:ED:D0:9B:3D:60:EC:B2:B8:05:04:0E:BA:23:C5:DB:7F
X509v3 Authority Key Identifier:
keyid:A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:63:c9:5d:4f:b7:73:ad:d2:44:ce:8d:53:24:e0:29:26:a9:
40:8e:28:1d:52:11:d8:19:2b:13:e7:04:6c:a8:80:03:19:ec:
ce:ac:90:d1:8e:f1:74:b8:a3:39:ed:83:50:07:ad:43:c6:87:
a2:fb:f3:7c:7e:2b:bc:ea:80:f8:f1:bb:80:2c:bf:6f:a8:d9:
eb:0d:91:f1:26:ce:51:89:40:f6:c9:e2:b5:45:10:66:5d:fc:
af:53:8a:43:89:6b:77:f8:78:f2:b6:80:c4:08:ce:ce:16:75:
32:b4:b1:ed:fd:33:40:df:37:67:d7:17:97:e5:90:52:ed:74:
99:c5:de:2b:13:f7:80:84:1d:92:94:ae:15:a5:88:4f:a9:3b:
1e:af:93:95:3b:09:48:e6:f5:4f:87:9d:12:3c:0b:45:78:a7:
b0:f9:30:9f:62:9c:73:db:eb:2c:48:8c:50:78:9c:e5:3e:a6:
d2:1b:1b:5d:54:4d:7b:4e:43:cb:a0:f3:58:a2:28:b8:07:d3:
77:78:0b:6d:18:be:12:62:aa:2b:a4:0b:07:ed:4b:b5:4e:87:
e9:96:11:fd:6e:76:fc:b4:a2:a8:3e:b4:39:f3:db:c2:0d:f5:
0d:23:8d:95:9b:39:db:99:d6:31:75:e8:99:ba:e2:d4:c3:75:
c3:5b:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:04 2025 by rpki-client on console-fra.rpki-client.org