
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
File: P6E212Q_3A0_sdU0Z9irspm3kXE.mft (raw, json)
Hash identifier: cpwHjnLkk/BRET+A/UrmHT+yXLIuGp85w5023WSmX3U=
Subject key identifier: 06:95:4D:16:4B:3A:EE:1D:89:1A:23:F6:BD:D8:AC:8C:0C:65:BC:26
Authority key identifier: 3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
Certificate issuer: /CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Certificate serial: 0194BB971D88226E4145EA217FD724DE257A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
Manifest number: 0414
Signing time: Fri 31 Jan 2025 09:00:30 +0000
Manifest this update: Fri 31 Jan 2025 09:00:30 +0000
Manifest next update: Sat 01 Feb 2025 09:00:30 +0000
Files and hashes: 1: P6E212Q_3A0_sdU0Z9irspm3kXE.crl (hash: DtkCkuoxhsCXrxtD7vUtJI8omhbolyP5ZCYBahiQOQg=)
2: aQLWCmdbg9aMVtpUr6kgFp-kl8g.roa (hash: MaYzTmKmtA6VMd+7uLB1yAAfoDrTIUYoMrGwKo2T4Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:1d:88:22:6e:41:45:ea:21:7f:d7:24:de:25:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Validity
Not Before: Jan 31 09:00:30 2025 GMT
Not After : Feb 1 09:00:30 2025 GMT
Subject: CN=06954d164b3aee1d891a23f6bdd8ac8c0c65bc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:70:b4:36:9e:4c:57:13:af:56:a4:48:35:
9f:54:98:b9:0a:f2:43:29:aa:fe:84:98:dd:03:79:
db:70:0c:a0:2d:bc:de:51:fe:ee:f9:fe:ad:66:38:
40:54:b6:35:ba:b4:79:d0:10:64:d7:25:e2:6d:3f:
f9:d5:12:3f:63:bd:f4:09:f7:58:13:bb:55:30:7c:
bf:26:55:c3:51:36:40:dd:b6:42:9c:8c:06:7c:6b:
0e:04:51:1d:99:16:6d:d0:46:0b:17:e6:38:53:e9:
bb:2e:9b:82:30:8b:dd:f3:94:16:d6:a5:6f:2a:f5:
83:56:dc:be:31:f0:65:98:0c:8b:45:57:a1:55:32:
58:2b:d0:c4:b2:3a:ba:2c:7c:86:15:da:95:7a:fd:
88:d9:ec:4b:92:94:60:cc:e4:cc:e1:2b:09:1f:39:
a8:00:60:4a:25:44:1c:2b:36:ed:96:8f:65:8d:e8:
9e:da:8e:8c:52:88:f2:e0:bb:2d:93:ed:da:71:0d:
e6:b9:e5:3a:bd:3e:7a:48:37:ca:bc:35:4d:a4:c0:
e6:d6:03:6f:a7:a5:18:b9:34:b4:3a:ef:95:da:a8:
cc:03:05:13:03:a9:1b:40:a8:c1:33:2f:51:5d:1e:
ad:ef:21:44:b0:c0:d8:ca:bd:dd:64:94:2f:6a:b6:
f8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:95:4D:16:4B:3A:EE:1D:89:1A:23:F6:BD:D8:AC:8C:0C:65:BC:26
X509v3 Authority Key Identifier:
keyid:3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bf:1d:b1:8e:00:69:bb:8f:48:be:82:7f:7d:7b:7a:da:71:
da:7b:8c:69:7f:b8:66:d2:3f:02:9b:49:7e:11:50:eb:58:f2:
0b:ab:c1:72:d0:b5:46:a3:8f:5d:3c:9e:1a:c0:fe:5d:c7:77:
7a:d3:6b:32:a3:d1:2c:f4:91:f1:5a:1f:51:24:5e:ce:08:02:
e8:4a:c8:84:18:25:2a:f6:be:a8:30:c6:1d:74:bd:84:77:2c:
92:8a:f3:b3:75:7f:33:ba:5e:ef:4d:f0:63:5d:6a:49:7b:31:
37:68:d9:83:dc:2c:b1:b4:01:5c:9f:2a:96:34:86:69:5c:1d:
c9:6f:af:fe:bf:d9:b0:7c:88:2c:09:54:8d:f0:0e:6f:83:b8:
89:e7:4d:31:83:c9:b5:9e:28:db:37:4a:a8:fe:96:09:5f:e2:
e6:99:e8:90:35:39:03:17:5a:4f:51:68:4a:76:ce:b9:01:66:
7c:4b:82:32:21:5d:ee:8b:0a:2a:66:0c:e2:78:6a:95:45:e9:
8f:09:76:9c:62:c1:e9:b9:86:eb:a7:68:87:04:08:8f:fc:d7:
42:d0:31:97:9d:51:26:b9:cf:74:8b:b4:f2:fb:0b:c0:2f:c2:
2b:ea:8f:08:d0:c9:3b:10:26:41:0b:6e:d5:3e:dc:ac:03:08:
5d:a6:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:27 2025 by rpki-client on console-fra.rpki-client.org