Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
File: PowYl2JPV7404PdguX8RCtW12jo.mft (raw, json)
Hash identifier: AppAfVWAXWBmXSci4bpd/dUj4teIu0edM/wC7EJTtQw=
Subject key identifier: 21:E8:4E:19:84:3E:EC:61:69:60:76:D6:05:F4:B5:B1:4F:F0:B2:2E
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial: 019510C7F091D0FE6CCE643A174DBBAE04B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
Manifest number: 1459
Signing time: Sun 16 Feb 2025 22:01:33 +0000
Manifest this update: Sun 16 Feb 2025 22:01:33 +0000
Manifest next update: Mon 17 Feb 2025 22:01:33 +0000
Files and hashes: 1: OVYlCjQ_Ro8WMpn3BJqI8X0cXxo.roa (hash: H6KoMJLLwg7EnqHTPVQLrBI8uOBDhlfqI6yQtfWr3zo=)
2: PowYl2JPV7404PdguX8RCtW12jo.crl (hash: zy/UXDWEARWNZyKR4xtXDt0eVrMthjN6yx8yAbfASGg=)
3: tPBRBMoiKlpcXEIyGR9zaiu6_tw.roa (hash: RAH5+/Gi51sOyolNLYboHOBHuJn+B4dMhBv3UUgsIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:f0:91:d0:fe:6c:ce:64:3a:17:4d:bb:ae:04:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Validity
Not Before: Feb 16 22:01:33 2025 GMT
Not After : Feb 17 22:01:33 2025 GMT
Subject: CN=21e84e19843eec61696076d605f4b5b14ff0b22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:53:a0:54:13:4a:22:eb:16:3e:bd:ba:26:
47:a1:d6:25:a4:d4:43:a9:26:53:17:9c:24:02:d7:
ba:c7:45:6a:d7:46:a7:88:1c:fb:81:bd:fc:f7:52:
a5:ee:af:b9:d5:48:28:1a:99:e9:30:cf:51:dd:d8:
10:bd:e5:93:a2:29:c1:5c:7a:85:1c:f8:d8:e2:ae:
66:07:c0:f7:e0:61:33:45:b1:5f:ed:da:da:3e:f4:
3d:76:36:e3:3e:2f:59:08:25:a4:c1:39:3d:d9:95:
98:73:0e:1c:25:36:39:b9:33:5a:74:97:92:74:49:
24:49:46:b4:76:4e:9a:15:8d:ec:f1:d2:91:e9:d3:
53:a5:42:72:bd:83:21:4b:bf:8b:20:ff:ba:70:f3:
12:a2:52:86:10:e8:ab:dc:ca:a4:4e:81:b9:96:aa:
88:74:76:62:96:a0:31:71:88:17:80:50:46:e9:4f:
4e:f0:c1:6f:4b:c7:94:1c:a0:4c:a4:9f:ba:b2:24:
3b:93:2b:21:f3:c9:d0:5c:c0:31:cc:b5:ce:e3:0b:
ce:9b:79:20:c1:16:d0:4c:39:b6:25:f3:1c:53:57:
d3:01:00:58:b0:e4:ba:9a:3e:c9:0e:75:ff:62:fc:
ab:e6:d0:c7:4c:ae:85:c1:97:7a:59:98:c3:a6:70:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E8:4E:19:84:3E:EC:61:69:60:76:D6:05:F4:B5:B1:4F:F0:B2:2E
X509v3 Authority Key Identifier:
keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f9:ef:bd:06:01:b5:89:49:8a:33:cc:8d:b6:1f:6a:59:3d:
72:af:0a:13:a2:bb:ba:ad:20:fe:55:d9:e0:9e:25:6f:e7:a3:
d5:90:aa:91:96:69:c7:76:1f:f9:5f:f4:ca:f4:d5:ec:0f:53:
56:b7:2d:6b:ee:61:94:30:9d:22:1a:08:ba:51:87:3a:97:8f:
79:27:06:9d:8f:5c:a6:f3:20:c2:53:c5:ce:11:dd:ce:01:d6:
0c:fc:da:31:e8:6c:9e:29:c0:63:f7:2a:d8:a9:1d:f0:51:46:
5b:19:4e:3a:de:65:10:26:e9:00:72:ab:48:af:97:90:52:cc:
87:50:da:d8:e4:15:89:67:98:9c:90:3a:b0:ba:3a:b3:76:98:
dd:f4:cf:55:05:94:0b:d3:b6:3f:62:65:40:31:13:a3:fc:2a:
b3:7d:fe:fb:5d:4d:c1:bc:97:9c:f2:34:30:de:8e:86:30:ef:
e3:e3:07:81:4b:09:18:a0:cf:37:6b:6e:0f:7b:6d:ee:9c:ec:
4b:64:f3:69:85:7e:1c:93:39:1c:b0:c3:3a:4c:ef:85:67:60:
1d:7c:7a:56:cb:d1:df:3c:7c:0a:fb:8e:a4:95:34:01:16:1e:
91:f1:f3:39:1d:f3:2f:ec:c7:58:b8:ba:3a:bd:ba:f1:d9:1c:
00:94:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:25 2025 by rpki-client