Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier: hCMcElUVjXau9aPpkq76RXQYfmTgItjxwkqTA2gIlNo=
Subject key identifier: FA:0C:DD:93:27:F2:00:C8:57:38:A8:FE:43:09:BC:AF:10:78:0F:D1
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 0194BA84C46AC6DF1243F58B02E3D642E04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 04:00:50 +0000
Manifest this update: Fri 31 Jan 2025 04:00:50 +0000
Manifest next update: Sat 01 Feb 2025 04:00:50 +0000
Files and hashes: 1: V4fEP3mKAgRZldstTINNuk_J6BQ.roa (hash: 8GFsD/JurXta37HamqakliSVJtpBqW+/i/sWeLhcYfE=)
2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: AjeQMA9WSw3WbR2scwbO5lFiUYNMPT2AJdZegRBvV+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:c4:6a:c6:df:12:43:f5:8b:02:e3:d6:42:e0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Jan 31 04:00:50 2025 GMT
Not After : Feb 1 04:00:50 2025 GMT
Subject: CN=fa0cdd9327f200c85738a8fe4309bcaf10780fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:a2:70:cb:8f:73:c0:0a:a8:62:ac:49:dc:
29:6d:27:25:8c:9f:08:f8:a7:6c:ad:be:7e:e3:b0:
75:53:7d:ba:77:8f:ed:a9:d2:e7:50:61:bf:94:b5:
9a:3c:77:86:4e:9b:78:6e:6f:ee:db:80:32:d6:4c:
a2:34:95:17:3c:6f:fa:9d:0e:7c:9e:08:34:51:9a:
2a:83:2c:a9:9d:3f:b6:5f:61:bd:94:a7:95:5d:76:
23:d9:0e:e4:f2:da:2c:19:81:79:cd:0a:1d:39:10:
26:13:a0:11:d0:da:83:eb:db:0c:46:da:d0:5b:e9:
61:15:7f:74:1a:23:bc:63:e0:23:99:fd:91:18:7d:
a1:69:65:c3:c0:d6:fd:b2:1b:0b:0a:a6:ba:4a:7b:
a9:1f:49:1e:2c:2d:f2:cd:ce:f6:c3:d5:5e:3d:0f:
1b:05:b6:c2:54:53:23:d7:1c:07:55:f5:30:d0:e3:
ed:b4:33:68:db:20:b3:92:58:81:9f:53:40:fa:34:
3d:c6:f4:23:dd:2c:68:09:dd:22:90:22:75:41:2f:
2f:35:43:9d:c9:8b:44:fc:2b:f7:49:70:8a:0f:ff:
80:84:f8:de:65:1e:78:52:e9:2c:e2:9f:3d:be:b7:
4d:e5:a3:d7:2c:9e:c0:22:32:01:31:f1:ce:be:e7:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0C:DD:93:27:F2:00:C8:57:38:A8:FE:43:09:BC:AF:10:78:0F:D1
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b5:7f:45:46:56:e0:3e:8b:5d:13:93:d7:68:d5:c9:5b:fa:
b4:9c:36:08:01:1e:51:54:99:20:3a:ec:6a:77:5c:ec:b7:5f:
c4:cd:61:dc:54:c6:82:45:78:c8:02:bf:3b:c1:ac:08:6c:a6:
17:bf:68:81:f8:f4:6f:b1:2c:cc:68:f6:07:6c:fb:10:9d:fe:
83:02:a8:03:57:5d:43:82:ca:84:fd:4d:9b:ff:e1:05:37:64:
5f:a4:a8:95:3d:7d:2f:4c:07:c4:22:10:42:55:c1:1b:77:6d:
5d:6d:6a:00:49:4b:42:c3:d5:65:b6:cc:4e:e4:8b:34:44:f6:
c3:5f:ff:e9:dc:5c:7b:48:0e:93:30:56:9a:9f:d0:6d:d1:26:
d8:e1:ea:00:f0:78:f2:76:b8:52:7c:0e:ee:69:2f:60:3a:32:
a5:8d:5a:a1:5e:e3:bf:75:96:1c:eb:fe:f6:93:06:88:b1:f3:
25:1b:ac:d3:9a:72:85:16:df:9c:70:20:56:8b:5d:50:ed:97:
97:cf:20:08:ad:5e:88:85:cb:cf:4f:94:d5:cf:75:eb:35:65:
48:17:0e:b9:3b:8e:eb:18:51:74:f4:77:e1:54:1f:ee:b2:c5:
2b:6f:89:23:72:0a:ad:a0:de:e2:89:5f:bf:8b:98:c7:3b:eb:
db:d6:79:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:51 2025 by rpki-client on console-fra.rpki-client.org