Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: WPsYQWKsE44GybU1xVAYJ1A+m96QFutewRKyEzayMUQ=
Subject key identifier: E9:96:FA:83:9B:5A:46:8B:61:D9:0F:41:19:82:B7:25:97:6E:04:7C
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 0194BABBCAD09B0FC47E97582B712874C3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 069A
Signing time: Fri 31 Jan 2025 05:00:56 +0000
Manifest this update: Fri 31 Jan 2025 05:00:56 +0000
Manifest next update: Sat 01 Feb 2025 05:00:56 +0000
Files and hashes: 1: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: mtdsIv9v3ctfb6lNJOEvx9XaaLAtRP2QTDUjfniXl9Q=)
2: vDazkPOiPtoCYetZfRX-qpQ69j8.roa (hash: B0GK+5WaWwtXf0DhRaPxfP/Ak+Di2Wr89zC0Jym0UK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:ca:d0:9b:0f:c4:7e:97:58:2b:71:28:74:c3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Jan 31 05:00:56 2025 GMT
Not After : Feb 1 05:00:56 2025 GMT
Subject: CN=e996fa839b5a468b61d90f411982b725976e047c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:3f:01:2e:0a:3d:a2:7b:d4:a4:18:0a:b1:
60:c8:03:7e:e1:8a:4e:1a:f1:0f:fb:e6:8b:ad:94:
4f:c0:98:bf:e7:1b:08:d7:ff:45:ef:af:83:a4:da:
81:e0:4c:cf:e1:04:00:1f:b1:53:9a:99:ea:a0:7c:
33:34:86:71:7b:a8:07:db:67:c7:52:7d:e0:a9:37:
ca:e3:91:f9:bb:36:48:21:d2:5f:f4:f5:bb:57:fd:
0e:9d:63:d1:6a:ab:b0:9e:d4:aa:c9:0e:15:b7:6e:
9a:df:e5:35:98:56:60:38:ca:d2:ba:28:99:7d:f7:
56:99:59:f4:75:9c:5e:8e:43:7a:8a:f3:a7:11:bd:
61:20:ba:e1:80:5b:9b:e0:24:df:81:c5:f9:2d:ba:
8a:1c:fb:82:1e:ec:b4:1b:97:db:b4:0a:87:6c:4a:
8c:1e:f8:3c:5b:b3:e3:88:29:8d:54:83:7c:d3:22:
c0:8b:be:b6:4b:6e:63:b3:c6:29:b3:b5:1c:85:dc:
bc:38:6a:3a:c1:6d:bc:a9:33:08:78:78:f3:3d:b2:
e1:51:2f:67:24:0d:66:87:56:50:83:2f:4b:b9:28:
8b:28:fc:a4:f3:43:f0:07:88:f8:fc:2c:6a:1b:84:
7f:5d:5a:50:e9:87:86:b3:0e:ca:81:a5:15:4c:48:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:96:FA:83:9B:5A:46:8B:61:D9:0F:41:19:82:B7:25:97:6E:04:7C
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5e:7a:41:fb:f1:13:d4:85:61:51:3a:bd:e6:5b:84:9f:b4:
c7:3b:f0:cc:8c:56:be:f8:d3:81:d4:10:b3:ba:61:db:6d:62:
dc:bd:37:9f:c1:42:b9:b4:49:11:f2:bc:bb:86:d5:58:a9:56:
d1:76:c5:47:95:95:5d:86:8c:c8:b4:d2:6b:aa:59:b9:3d:8c:
df:d6:7a:9f:45:fa:ff:40:2c:76:92:d9:7f:42:70:73:9c:64:
6f:e2:06:a5:66:08:30:d4:c4:5e:00:96:c6:f6:af:f2:46:eb:
77:11:b2:90:6f:64:61:c8:5e:b1:10:eb:98:b2:e0:c5:bb:90:
fa:5c:b9:8d:35:13:24:52:7a:f7:9a:97:bd:f3:88:c9:2b:c1:
3d:82:07:72:a5:e6:24:cc:b6:c6:2e:a4:b5:98:9d:b6:e6:68:
00:c2:57:04:ee:ad:f8:84:36:4f:77:1d:e0:14:95:8d:ae:5c:
9c:d8:45:62:b1:4b:90:33:05:ff:23:28:a9:e6:32:28:e5:c9:
a9:9b:2d:bb:86:27:8e:02:0e:63:60:11:2b:ee:75:26:75:70:
2f:9c:b5:27:fb:8b:9a:8b:76:7b:a9:24:b7:1b:42:e2:c8:95:
ad:61:3c:22:ae:b6:f0:4a:54:d3:5d:64:6c:72:a9:94:f6:a0:
15:fd:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:57 2025 by rpki-client on console-fra.rpki-client.org