Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: JjiOifyZ+11ZrPqNvKhQLccHk1Adrs50rb3PS+G7FGo=
Subject key identifier: BB:A0:FE:21:6A:B3:48:CE:D6:AA:9B:AB:3A:68:0B:56:C3:27:CE:8E
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 0194BB6032527975CB6B534BEB125AC82A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 0E60
Signing time: Fri 31 Jan 2025 08:00:31 +0000
Manifest this update: Fri 31 Jan 2025 08:00:31 +0000
Manifest next update: Sat 01 Feb 2025 08:00:31 +0000
Files and hashes: 1: LsnRSFX0fJ6jFaMFhsNOF1N3rXk.roa (hash: dex17lVhtaQHFqLExDWweZahtCv1yqvsMMQYp4bDPYo=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: 8pB0KjAc+JUR+fFVRWOKM+TX4UtBSC2CBXdLrl/7qUA=)
3: ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa (hash: M90TxVMUtw28EWlnD72m1jWls/YScUzAXqX8GMvniY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:32:52:79:75:cb:6b:53:4b:eb:12:5a:c8:2a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Jan 31 08:00:31 2025 GMT
Not After : Feb 1 08:00:31 2025 GMT
Subject: CN=bba0fe216ab348ced6aa9bab3a680b56c327ce8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:ea:8e:e4:17:bd:49:06:06:da:ae:dd:f7:
b3:7b:16:1e:12:51:b6:f4:58:75:9f:e4:29:95:fb:
b8:b4:97:5d:ef:0e:45:68:fc:d4:43:4c:e8:f9:55:
fa:b3:63:6f:25:88:f3:37:cf:c0:c8:32:d5:06:46:
af:fd:09:1e:25:26:43:34:3b:a0:58:d8:0b:db:88:
5c:be:f0:06:c7:7e:b2:33:cc:13:01:43:0d:f6:09:
b9:e8:99:b0:82:2a:65:66:d9:33:8d:c8:6d:39:3b:
9e:40:28:25:03:1f:56:ec:35:e4:43:98:5c:79:d6:
07:91:e1:93:34:ee:fb:b6:1c:6a:8c:62:35:7e:44:
95:11:a3:5d:74:60:7a:49:f9:7c:32:cf:91:4b:27:
22:44:bd:0c:28:8d:41:5b:4b:d8:e6:e2:0d:a8:d4:
21:3a:c5:56:10:52:c2:a9:55:94:2e:40:43:dd:ac:
1e:b7:0d:40:2e:a9:83:87:42:ad:e4:2f:db:45:59:
5e:ad:af:44:d7:08:7c:c8:d5:98:19:50:f5:27:1a:
75:6b:8c:77:3f:c8:23:bb:fb:62:b6:68:b7:a0:7e:
ff:2a:06:65:11:bd:91:2d:f2:76:e4:9c:67:b9:0b:
b8:1d:77:ea:5e:a0:03:5c:ac:34:0a:3e:bc:f5:e1:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A0:FE:21:6A:B3:48:CE:D6:AA:9B:AB:3A:68:0B:56:C3:27:CE:8E
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:87:b6:d7:61:b8:bc:bf:eb:85:cf:fd:9a:ed:f5:5f:84:98:
0c:3e:13:47:77:52:97:db:3d:1e:a8:4a:28:1a:e4:f6:f4:57:
6c:63:87:59:5d:5c:ea:39:58:eb:16:91:3e:a5:20:26:d0:ef:
75:9b:ca:ae:a8:15:0e:18:cd:4b:06:34:c4:cb:0f:6b:4d:be:
2a:e9:35:3b:78:68:2a:d5:c1:91:cd:f0:36:94:79:8b:44:57:
a8:db:06:d6:ea:01:f1:d6:cd:86:66:4e:47:34:89:f1:05:65:
d9:7d:31:db:42:0d:ee:a2:cd:0d:79:d6:c5:79:da:19:45:2e:
f0:1e:11:f9:0d:b9:84:aa:0b:5e:50:29:66:8e:fe:25:ad:53:
db:cf:e4:5d:cb:45:3c:fc:e0:85:81:51:c5:d8:ce:67:0b:2d:
17:a8:20:fd:46:26:97:bd:67:3b:7d:3b:4c:a0:99:f7:3e:ed:
85:63:eb:03:7e:0b:61:5d:2a:e3:21:19:4e:9c:29:ff:a9:d2:
b5:73:1d:f5:bb:1a:10:84:d1:23:a1:ff:fc:ce:5d:bd:bd:32:
30:39:55:62:a9:83:57:b0:21:bd:02:20:ab:e5:2a:8f:1d:10:
03:bb:08:c4:80:d0:b3:ed:96:d4:ea:d3:25:18:99:c0:50:a4:
14:03:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:56 2025 by rpki-client on console-fra.rpki-client.org