Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
File: PwbJ3z-o-T2e8O0EscoENduLxlA.mft (raw, json)
Hash identifier: 9er+ZLkVhUhC2mxxIFBs4FQR2ZWHmt4PP+B7Jvrjuv8=
Subject key identifier: 67:F9:F8:27:61:C4:E2:5B:7C:56:C1:EA:97:B8:80:F6:CB:2C:6C:A2
Authority key identifier: 3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
Certificate issuer: /CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Certificate serial: 0194BABB5C118486406DB57E716CF11E0D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 05:00:28 +0000
Manifest this update: Fri 31 Jan 2025 05:00:28 +0000
Manifest next update: Sat 01 Feb 2025 05:00:28 +0000
Files and hashes: 1: PwbJ3z-o-T2e8O0EscoENduLxlA.crl (hash: d9DO0VVeURu0XqKOrLBABYq7AA9BVeJY4BtqlNtyiJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:5c:11:84:86:40:6d:b5:7e:71:6c:f1:1e:0d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Validity
Not Before: Jan 31 05:00:28 2025 GMT
Not After : Feb 1 05:00:28 2025 GMT
Subject: CN=67f9f82761c4e25b7c56c1ea97b880f6cb2c6ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:a6:50:dd:fe:92:b2:27:ec:0e:ae:06:f6:
3d:7a:80:87:c5:92:d8:52:4a:a6:e1:2a:59:32:52:
d0:99:3a:ed:ae:9d:dd:4c:d4:0a:a9:2a:6e:7c:fa:
14:b7:c2:a5:ff:69:e1:42:6f:b5:27:9d:70:15:a5:
9a:c8:1b:3a:4c:0b:c9:79:c4:1a:63:a3:2a:b8:2f:
1d:fe:7e:1f:3b:f9:d3:ff:76:9f:f8:1c:97:0f:9e:
ab:85:c3:56:75:69:16:37:70:74:40:8a:27:b5:95:
a6:73:e1:2b:0b:40:a7:97:80:eb:b1:3c:0f:fc:72:
54:f2:a9:7c:7f:c8:0f:bb:d2:83:78:31:45:66:c5:
44:81:81:a8:76:ac:3f:f4:83:d4:d2:34:35:e4:01:
77:bf:58:4f:3c:0c:dd:d8:4a:82:e0:7d:8d:d2:85:
ff:fd:04:07:5a:d5:c6:60:8f:ba:7d:c0:5d:3f:90:
32:e0:cc:0d:af:32:df:4e:8e:98:bb:63:ba:54:2f:
ae:60:5f:02:02:4f:9b:ff:3e:ab:d7:f6:53:fd:d4:
bb:39:e5:ba:3c:9e:3e:e5:de:0b:7c:77:cb:a9:cc:
c0:6b:ec:fb:13:cb:53:65:e7:d2:1c:85:9a:47:79:
75:7c:77:95:f8:21:bc:51:85:6b:56:ae:45:9a:8e:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F9:F8:27:61:C4:E2:5B:7C:56:C1:EA:97:B8:80:F6:CB:2C:6C:A2
X509v3 Authority Key Identifier:
keyid:3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:52:4e:fe:e4:c2:94:5a:6f:c7:49:c6:8e:1f:84:d7:ec:15:
3e:65:6c:ce:57:2e:f7:98:d8:54:7f:2d:cf:18:8a:48:bf:57:
bb:a4:f2:d1:6b:fc:0b:39:c4:4a:d5:72:df:72:41:11:5d:6d:
aa:25:18:61:dc:ee:fa:a1:20:0f:1c:b8:46:cf:97:cb:9a:e6:
8a:3a:93:e3:f9:14:2a:14:96:d3:ef:a6:6b:bb:86:cc:8e:94:
26:d3:95:d9:af:1e:18:ac:b9:e5:27:78:57:83:77:b7:6f:69:
1c:da:e9:e1:4f:c6:0c:f2:55:d4:1c:0a:1e:d8:a3:1a:ea:94:
30:00:be:f7:53:1c:a1:63:48:c1:3e:c1:26:2f:12:97:97:82:
fe:b2:49:10:51:b0:3a:a8:a1:bf:49:ef:f6:b0:3d:94:3e:c8:
61:f2:ec:77:ec:36:93:2e:22:a3:f8:8a:1c:da:d3:cc:14:9c:
32:18:b8:ec:43:05:9f:c0:c3:e4:7a:60:2a:c6:69:64:8b:2e:
d8:ba:ba:a0:90:ee:6c:86:02:ed:f9:a0:a9:59:12:61:c8:87:
09:3b:16:53:5d:8e:82:a8:c6:74:92:64:7d:0a:2a:a0:a2:8d:
c5:fd:16:03:f3:b2:5c:28:87:6e:bc:83:80:cc:c2:f6:e4:8a:
5b:da:cb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:27 2025 by rpki-client on console-fra.rpki-client.org