Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: KyFfpEs2x1FiHfeWnEj7XG+HIw2qTy68XAl4x9tDjfk=
Subject key identifier: 03:7D:67:F6:FC:21:9C:00:A6:83:1F:88:74:0B:C4:B1:5F:9D:37:6C
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 0194BAF2808E3B32E8E41F2727D7CF47EADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 0FDF
Signing time: Fri 31 Jan 2025 06:00:42 +0000
Manifest this update: Fri 31 Jan 2025 06:00:42 +0000
Manifest next update: Sat 01 Feb 2025 06:00:42 +0000
Files and hashes: 1: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: olyj/K3sCVaprdsMgYCEuiC8f3U50ibkuhNpM6h4b3c=)
2: mvLDmuyuUuZFiCTIw_g9i8uNgFg.roa (hash: GZj+Xi5SIMQUMGweRfOhuKIks60lK9TTGOmmhsaxut8=)
3: zURslIPoCzmuF9cVBs91SF_jfZs.roa (hash: PBlZSBkxr5D+YnPFObnzHQvndsM2zZG1fAG0x5+wRk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:80:8e:3b:32:e8:e4:1f:27:27:d7:cf:47:ea:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: Jan 31 06:00:42 2025 GMT
Not After : Feb 1 06:00:42 2025 GMT
Subject: CN=037d67f6fc219c00a6831f88740bc4b15f9d376c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:19:5d:cc:65:09:4b:b4:90:32:99:6e:d5:
ca:97:b7:75:48:44:f1:47:f1:b6:dd:96:69:b5:3a:
20:78:36:4a:6e:71:51:fc:65:80:40:12:b6:c6:e3:
8b:cb:1f:29:3c:b4:ab:a4:f0:30:42:1e:74:57:83:
5b:18:11:8e:b3:c3:7e:bb:4d:dc:bf:cb:10:0c:29:
73:30:7f:ac:d0:86:db:29:6d:73:68:e3:22:85:f7:
29:71:03:60:28:5b:47:cd:bd:94:0c:7b:08:ca:cf:
16:96:be:48:df:3d:9c:e2:40:d5:43:ab:24:af:36:
a0:09:d7:8f:04:de:98:bf:7e:30:2a:66:e5:67:c9:
16:29:c7:1a:96:2c:67:67:34:09:df:57:8f:82:b9:
f3:0c:11:55:6f:ba:f0:cf:f3:c6:9f:eb:9d:f6:45:
f8:66:d1:7a:15:48:cd:40:ae:c0:79:b9:2a:04:d0:
c0:ee:f0:33:32:bc:e0:2f:77:14:29:ce:c4:f5:be:
ee:14:a2:68:ba:bb:48:b2:ec:72:f3:9a:15:c0:06:
61:2a:83:fe:89:09:e1:e2:94:51:df:f0:08:6d:bf:
07:73:dc:39:66:20:76:6f:bf:a6:c3:cb:3a:9e:13:
1e:88:ec:0e:aa:43:6d:03:63:56:bb:03:28:98:21:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7D:67:F6:FC:21:9C:00:A6:83:1F:88:74:0B:C4:B1:5F:9D:37:6C
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9c:60:96:2d:d4:30:c5:cd:35:9c:19:6f:67:32:52:46:31:
5b:6e:3d:61:dd:1f:ab:e2:83:b5:74:2a:d5:1d:f9:34:78:c2:
60:e8:ec:f2:4b:79:52:d8:52:1d:6d:28:3a:a2:6b:e1:d1:20:
1d:20:b1:6f:bd:4f:f0:56:cb:6f:41:01:4f:3c:13:89:2e:7e:
83:58:f2:69:48:17:f5:23:45:12:52:a1:8a:4a:91:b8:20:4c:
69:21:c4:26:05:28:ce:f9:1a:c7:9f:f8:e4:4c:f8:44:b7:7c:
15:72:8b:64:21:d5:1d:55:29:37:f5:11:a2:f7:23:c8:b0:e2:
42:94:74:6a:9f:f4:1f:b4:1d:57:22:34:74:53:b7:fd:b4:7c:
a9:7e:65:1e:34:97:b2:b7:ad:44:ee:53:ba:66:09:06:39:e4:
18:8e:d0:b3:9e:38:3f:45:03:fe:7c:68:ee:90:0a:d9:ac:a5:
63:5e:49:6a:56:ce:bc:c7:77:16:b9:f0:e5:01:87:88:0d:07:
7f:b2:c2:41:07:59:46:1a:c1:03:4f:ea:c1:ce:e2:9d:fb:b8:
f7:09:f9:21:05:33:0a:1b:d6:fb:57:e5:34:c1:d9:e3:df:0f:
c1:ca:cd:81:a4:b1:27:87:ea:63:82:bc:ec:45:de:76:41:c8:
47:92:90:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68oCOOzLo5B8nJ9fPR+rfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmM2JmNTExNzc0YjZlMWQ3MDZiYjI3MjdiM2QzMTI1Nzc1
YTkxMmYwHhcNMjUwMTMxMDYwMDQyWhcNMjUwMjAxMDYwMDQyWjAzMTEwLwYDVQQD
EygwMzdkNjdmNmZjMjE5YzAwYTY4MzFmODg3NDBiYzRiMTVmOWQzNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPoZXcxlCUu0kDKZbtXKl7d1SETx
R/G23ZZptTogeDZKbnFR/GWAQBK2xuOLyx8pPLSrpPAwQh50V4NbGBGOs8N+u03c
v8sQDClzMH+s0IbbKW1zaOMihfcpcQNgKFtHzb2UDHsIys8Wlr5I3z2c4kDVQ6sk
rzagCdePBN6Yv34wKmblZ8kWKccalixnZzQJ31ePgrnzDBFVb7rwz/PGn+ud9kX4
ZtF6FUjNQK7AebkqBNDA7vAzMrzgL3cUKc7E9b7uFKJourtIsuxy85oVwAZhKoP+
iQnh4pRR3/AIbb8Hc9w5ZiB2b7+mw8s6nhMeiOwOqkNtA2NWuwMomCEnWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAN9Z/b8IZwApoMfiHQLxLFfnTdsMB8GA1UdIwQY
MBaAFD879RF3S24dcGuycns9MSV3WpEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWIt
YTBkNmRiZmFjNmViLzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWItYTBkNmRiZmFjNmVi
LzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5xgli3U
MMXNNZwZb2cyUkYxW249Yd0fq+KDtXQq1R35NHjCYOjs8kt5UthSHW0oOqJr4dEg
HSCxb71P8FbLb0EBTzwTiS5+g1jyaUgX9SNFElKhikqRuCBMaSHEJgUozvkax5/4
5Ez4RLd8FXKLZCHVHVUpN/URovcjyLDiQpR0ap/0H7QdVyI0dFO3/bR8qX5lHjSX
sretRO5TumYJBjnkGI7Qs544P0UD/nxo7pAK2aylY15JalbOvMd3Frnw5QGHiA0H
f7LCQQdZRhrBA0/qwc7infu49wn5IQUzChvW+1flNMHZ498PwcrNgaSxJ4fqY4K8
7EXedkHIR5KQeQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:15 2025 by rpki-client on console-fra.rpki-client.org