Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
File: PNVhnbjXcXN5lW1Op1t22ybRwck.mft (raw, json)
Hash identifier: zs7dgJjvkhpaiuxdcWZQq8gAerV53x0bpy4dnYRv74c=
Subject key identifier: 99:53:04:C3:EE:F1:42:E7:90:51:1C:01:A3:1D:EB:1B:A8:CC:F9:09
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial: 0194BA8497D7F25668626362F8E7113E5025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 04:00:39 +0000
Manifest this update: Fri 31 Jan 2025 04:00:39 +0000
Manifest next update: Sat 01 Feb 2025 04:00:39 +0000
Files and hashes: 1: 4prfTAA9HBYIWFQscXuDZvPOJfU.roa (hash: zMicpYmGFLFzW1lGiXS7QLLBWvT2YuAYQEgxuNA/2gA=)
2: PNVhnbjXcXN5lW1Op1t22ybRwck.crl (hash: 22kdw56epcJKhkuYtcyY5gii5DQ4ezyzvHmKgJ8tT98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:97:d7:f2:56:68:62:63:62:f8:e7:11:3e:50:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Validity
Not Before: Jan 31 04:00:39 2025 GMT
Not After : Feb 1 04:00:39 2025 GMT
Subject: CN=995304c3eef142e790511c01a31deb1ba8ccf909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:cd:ea:85:7e:2d:93:5b:d5:6a:93:89:b1:
ba:58:52:dd:52:eb:e2:2d:ff:05:df:09:89:b3:5f:
05:5c:90:fc:c8:65:bd:0f:a6:1f:9f:dd:ec:fd:bf:
75:d5:b8:68:14:4d:f4:72:0c:2c:50:d8:0e:3d:b9:
cf:24:14:fe:ea:72:52:d3:cb:4a:28:7c:a6:be:7e:
d6:7a:7b:7f:82:3f:2b:e6:3c:94:42:a3:05:85:41:
d1:89:03:a1:2f:46:c3:63:09:a6:76:e8:54:19:2e:
90:9f:91:3b:30:74:4d:7b:20:b5:ea:17:a6:ff:ac:
c9:26:2a:bb:6d:bc:9e:94:69:9d:05:b2:a3:30:d4:
18:3f:85:a0:03:af:af:38:44:9a:b9:10:59:b1:18:
75:16:43:ae:78:2a:a5:d2:98:3e:39:fa:3c:47:1c:
a9:52:34:b0:a6:2d:02:f3:aa:d9:44:04:91:3b:82:
6e:5b:fe:fa:05:47:2b:6d:61:a7:2b:47:21:2b:0b:
e8:2e:86:91:49:4e:ba:ad:8d:2f:b7:2c:cd:00:56:
5d:61:f4:f5:53:e3:89:28:0e:dc:a0:fd:46:58:a2:
1d:fc:f3:5e:a3:09:bb:b0:82:88:b9:01:46:99:ff:
6a:c8:bd:36:a8:76:d3:bf:ce:cc:04:5e:d3:8e:b1:
e0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:53:04:C3:EE:F1:42:E7:90:51:1C:01:A3:1D:EB:1B:A8:CC:F9:09
X509v3 Authority Key Identifier:
keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:34:b8:26:09:2a:c8:fe:6c:90:8c:44:96:9b:e1:10:8b:90:
08:2b:86:aa:53:62:e4:74:af:11:60:9e:4b:e9:61:50:eb:73:
72:4e:4c:f8:c2:6c:61:df:d3:c0:01:66:1a:4c:8c:6d:28:69:
a6:0a:e4:3e:13:39:e6:30:ea:e8:7d:db:38:2d:3e:f4:65:49:
ea:f0:81:dd:e6:b9:e0:83:42:86:da:7c:c4:5f:20:5c:6d:7c:
33:b8:14:ed:17:3e:74:ca:46:8c:d9:d0:01:7e:b9:e9:a9:a1:
59:2f:38:fd:60:7d:10:bf:6a:a7:e2:ad:73:af:ae:b2:82:e1:
54:0a:54:2a:0d:90:11:b3:6d:b4:60:8b:6f:ae:0e:eb:a8:d8:
2a:de:d7:d6:b0:c8:81:3b:f4:01:18:96:26:45:bf:3f:de:6a:
b7:bc:2d:2f:e4:b7:e9:88:73:ea:ec:ee:1a:eb:a6:22:63:aa:
53:a7:9b:bf:b0:4f:4f:b0:29:78:ca:9b:7c:bd:0b:f9:61:40:
66:ff:3f:76:23:bd:5e:cf:a7:22:b2:e6:1c:ad:75:f9:ab:ee:
3a:2f:94:a9:38:e9:4d:9c:c7:ac:5d:10:27:3c:ac:64:a6:59:
da:cc:b0:3f:cb:4f:ff:e3:af:42:2f:2e:7d:bd:da:18:b4:cf:
26:2b:10:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:40 2025 by rpki-client on console-fra.rpki-client.org