Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
File: PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json)
Hash identifier: K/7BM8fwbjwNI2AhaZhX4NnwQxtcnvb8Uf69dFDj1hw=
Subject key identifier: 89:5E:C0:3F:28:E5:E1:34:F1:96:3D:4F:F0:2A:88:DF:E3:BD:67:2B
Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Certificate issuer: /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Certificate serial: 0194BB29663BEEA1F7B8A1E2B23B6792F311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 07:00:40 +0000
Manifest this update: Fri 31 Jan 2025 07:00:40 +0000
Manifest next update: Sat 01 Feb 2025 07:00:40 +0000
Files and hashes: 1: 3DgJf8B6gHn6-h7mtLpM7uiT9zs.roa (hash: bNvleSp/4QB52V4DZ5fxsf4u+utsXgrzdigeABa48Cw=)
2: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: xrVwDbek6u5e0qRXGNnoHy1VbeLgbP7q483UwzvsfYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:66:3b:ee:a1:f7:b8:a1:e2:b2:3b:67:92:f3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Validity
Not Before: Jan 31 07:00:40 2025 GMT
Not After : Feb 1 07:00:40 2025 GMT
Subject: CN=895ec03f28e5e134f1963d4ff02a88dfe3bd672b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:bc:1a:ce:da:78:67:c2:15:dd:9a:03:0b:
55:cb:5d:c6:cd:96:9f:fa:7d:7f:37:d3:ce:25:05:
5a:9a:ef:af:c6:a7:34:6c:a7:d7:00:24:1a:81:8e:
b8:23:3a:33:a1:73:53:db:b6:dc:ef:01:a7:ad:06:
e5:ec:af:e8:22:13:91:11:23:1c:4d:50:a7:eb:d1:
18:d0:6c:5b:34:75:7e:c2:b4:02:65:06:a7:02:e3:
48:8a:21:81:60:49:b5:28:0e:ff:12:04:5b:cc:18:
0d:21:34:f7:ba:54:c8:13:f9:77:b3:22:1f:54:9e:
74:dc:80:2c:8c:f9:85:07:5b:0b:90:ea:2f:2f:12:
e0:a5:48:d5:e5:b9:36:a7:3f:85:4c:73:cd:2c:f6:
51:0c:ca:11:a5:1d:9e:32:06:80:62:5a:49:4f:c3:
5f:c8:b1:2b:27:fc:41:b2:33:8c:59:44:52:70:7c:
67:3b:6e:57:39:16:51:93:c6:c4:1c:25:ad:3c:cc:
cb:17:3c:6c:27:01:47:9f:d8:3d:00:a0:ee:00:30:
86:65:70:0c:7e:b1:50:05:79:83:bf:d4:09:58:3d:
5e:16:8c:81:82:90:2c:0c:6d:3c:14:34:1b:84:17:
00:f0:a4:02:1a:3d:c2:e8:6d:dd:11:ac:b1:72:d2:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5E:C0:3F:28:E5:E1:34:F1:96:3D:4F:F0:2A:88:DF:E3:BD:67:2B
X509v3 Authority Key Identifier:
keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:83:9d:06:74:5a:58:52:32:46:85:91:45:80:07:bd:7f:dd:
e8:53:23:f6:09:84:cb:2c:74:63:a7:e3:9c:e7:3e:01:a3:6e:
7f:2a:22:bb:59:5f:ac:22:50:b6:9b:eb:6a:d4:68:d1:9d:43:
44:f9:4d:13:89:08:ea:e2:62:3e:97:e0:28:d9:87:59:31:66:
8f:0b:fc:52:6e:da:dd:83:01:3b:6f:88:1b:ab:c3:17:29:27:
e4:44:cd:77:73:98:9f:be:06:2a:6b:51:99:aa:1b:2c:19:e0:
11:83:2b:47:30:87:43:2d:00:e1:38:b3:d7:ea:61:3f:9c:65:
24:fd:49:a5:02:c6:0f:ea:47:7d:ae:3c:a9:cd:8f:6a:f2:2c:
d4:81:0c:b9:a5:f6:00:e2:3c:44:a2:38:fe:01:b4:60:f3:a5:
f2:db:7d:d9:fb:f2:1b:21:0c:51:45:c1:36:9c:5b:0b:13:23:
76:4b:77:63:24:37:5f:9b:d6:e3:e7:95:f3:4a:45:16:2a:b1:
be:0e:35:1b:d4:b1:7a:6d:92:95:4f:f9:80:2c:76:e4:93:a9:
da:53:1c:7c:b7:03:37:1d:f4:ef:cd:29:6b:4e:b7:dc:6b:21:
bd:dc:51:62:d6:e0:2a:b1:d1:39:c4:0d:47:8c:70:8f:e9:d4:
9e:69:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:10 2025 by rpki-client on console-fra.rpki-client.org