Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier: FIwb/CMVlj5iq7JPx7OI8gpqhVc1w6PpPLu2IoxTRWs=
Subject key identifier: F5:6C:D9:62:70:05:39:DE:BF:CD:64:EA:8B:2A:40:8C:68:9A:00:FF
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 0194C38812DE9C376C19D9A982EDED32E740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number: 06B4
Signing time: Sat 01 Feb 2025 22:01:02 +0000
Manifest this update: Sat 01 Feb 2025 22:01:02 +0000
Manifest next update: Sun 02 Feb 2025 22:01:02 +0000
Files and hashes: 1: 2JNRo-dtGNGJcp7kMDpk5VpUcF4.roa (hash: sJo6COvD7U5zSVoX5aZ2ujJN+R6hvJF0qpAtUrijnZ0=)
2: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: Ek39N/pS5AQ4afqBilomSDCCkPHHV+goES4Jtoa2rGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:12:de:9c:37:6c:19:d9:a9:82:ed:ed:32:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: Feb 1 22:01:02 2025 GMT
Not After : Feb 2 22:01:02 2025 GMT
Subject: CN=f56cd962700539debfcd64ea8b2a408c689a00ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:66:99:87:67:0d:62:35:89:00:60:d0:93:
f6:bf:33:f0:b1:e1:e0:a8:bc:21:1d:10:73:4c:a9:
8f:fc:92:62:df:6b:2a:14:88:e2:ef:c6:3e:cc:15:
c5:4d:f2:55:d4:c8:54:05:c9:4d:95:0a:4e:f5:ac:
9f:db:83:9c:cf:c4:b3:68:f9:36:1f:d2:27:71:17:
9a:6b:bf:fa:1c:3c:dc:51:b4:49:f5:61:c4:7b:9e:
ca:fa:79:86:b2:a9:28:fd:eb:eb:bf:79:05:de:9b:
1e:60:8b:4e:2f:c4:c9:dc:61:03:7c:ca:6b:14:f4:
e1:f5:8b:3c:28:ba:8f:b8:66:9c:f6:8e:18:47:66:
f1:bf:47:44:7e:3b:f6:a4:0f:75:47:a0:3e:cd:e4:
87:a1:b0:de:5e:4e:0a:a0:07:31:ef:7f:9c:99:20:
1a:17:37:6d:6b:4e:79:a8:da:5e:f2:de:59:f0:23:
ab:cc:46:fd:92:a8:08:c7:66:5e:d8:b6:67:7f:bd:
92:9a:6d:31:1e:1f:94:8d:03:e1:32:73:af:06:b4:
81:da:ee:8d:b7:f2:b2:f9:3d:24:e0:58:ae:97:e6:
8f:36:13:ae:55:da:c6:39:8d:b3:52:c8:b3:df:3f:
b6:20:7f:75:8a:dc:80:c2:7b:7b:bd:9e:d4:7a:ba:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6C:D9:62:70:05:39:DE:BF:CD:64:EA:8B:2A:40:8C:68:9A:00:FF
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cf:25:b1:ae:25:a6:34:df:78:63:d0:7c:01:f7:05:cc:7b:
78:31:12:bf:53:1d:ea:0c:73:f0:08:12:67:84:b0:3d:98:cf:
ae:76:be:13:f9:4c:6f:68:6e:c8:21:b1:8d:71:aa:6c:9d:18:
1e:cd:da:55:1a:c6:34:a8:9a:05:df:2a:46:09:23:d3:fe:0a:
f9:fb:86:cd:f9:c0:68:87:60:1f:75:ca:96:80:56:28:44:20:
ae:68:63:2c:c6:8d:0d:a8:29:28:ab:0c:16:ec:cf:15:1a:cb:
55:58:56:17:47:2e:eb:34:84:94:ae:3e:bb:63:07:74:4a:66:
7d:49:08:1d:b2:a4:ae:bc:c6:9b:c1:f9:1e:29:3f:24:67:84:
49:52:54:c8:57:11:46:60:c4:19:1a:64:5f:b1:8e:32:fc:cb:
8c:ed:48:99:4e:3e:70:21:9f:72:26:2c:ee:8d:53:2c:ad:02:
02:de:93:55:ff:86:df:73:2f:21:96:22:53:5c:04:3c:e3:fa:
fc:36:69:c4:b2:89:a1:d2:1b:c2:43:e9:94:db:16:c0:84:8c:
34:9d:26:5f:de:fb:46:46:a1:da:14:6f:d5:72:f5:02:64:0c:
e8:da:6c:f8:3a:e1:e9:f5:9c:94:99:51:32:bc:98:9b:76:7e:
93:4c:d2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:41 2025 by rpki-client