Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: /r8F3WmQEFZzFlD5L5jbd9sQ6+B5oDZZZMlS4a8N2t0=
Subject key identifier: 40:B8:3A:02:A2:46:12:13:C7:8D:C0:BA:22:37:F6:7C:AB:4C:AE:0F
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 01950F0F876C0CD2C6EDEAB7CDC8AD1EAA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 0E92
Signing time: Sun 16 Feb 2025 14:00:30 +0000
Manifest this update: Sun 16 Feb 2025 14:00:30 +0000
Manifest next update: Mon 17 Feb 2025 14:00:30 +0000
Files and hashes: 1: 1Xqi7Z1GlyKJmmpJLPuLaaDGlwA.roa (hash: R1V6MsHqSpwWAHrp5zkXdM7XbLDDs5vw6HyT3BRV75o=)
2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: vmrq5VtknuOhAQPI2QCJk7wdcWPITD6sPp26KBeSbcc=)
3: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (hash: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:0f:87:6c:0c:d2:c6:ed:ea:b7:cd:c8:ad:1e:aa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Feb 16 14:00:30 2025 GMT
Not After : Feb 17 14:00:30 2025 GMT
Subject: CN=40b83a02a2461213c78dc0ba2237f67cab4cae0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:c9:bf:2f:c5:4b:8a:3c:48:57:d1:3a:1e:
8e:32:e8:1f:54:4c:ce:45:f4:87:1b:c5:39:67:c3:
6c:9d:55:7d:ea:1b:4f:43:21:af:ad:7b:f2:3c:b9:
a9:1d:f8:88:cf:5a:bd:bb:18:6b:dc:58:1f:51:8d:
08:17:77:19:2e:33:2f:c0:93:80:ef:9e:a9:24:48:
54:83:b8:13:57:34:a4:1d:52:59:b6:4c:1d:83:fe:
ff:4f:3e:3c:3d:27:52:35:18:7c:11:2b:af:17:de:
4b:d4:64:11:bc:5d:fa:b5:15:a3:e3:68:35:60:d9:
02:22:26:ff:a0:53:51:f2:31:69:6c:e6:53:c7:c0:
cf:c9:a0:a5:65:00:6a:cb:12:4e:9b:60:d2:62:3e:
9e:2a:5f:a9:1c:31:0b:05:e9:a3:f6:74:e5:64:1e:
d2:15:9e:d3:d2:64:b9:cb:2d:5b:6c:02:d4:91:77:
28:12:e2:47:00:dc:77:60:7b:27:ab:44:5a:c4:37:
be:40:27:46:e4:53:e8:19:88:29:42:6d:d8:58:45:
92:29:88:7b:70:1d:ac:bc:b2:68:c9:86:9f:e9:7b:
34:05:c9:04:cc:4d:72:3d:1b:13:ec:64:a9:0b:ec:
6a:7c:ff:54:1d:2a:7b:8e:2b:18:69:de:d6:a2:0c:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B8:3A:02:A2:46:12:13:C7:8D:C0:BA:22:37:F6:7C:AB:4C:AE:0F
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:07:9c:4c:c7:99:06:a2:34:51:06:90:d3:35:2b:14:b9:0a:
36:0a:1a:f1:e3:2f:a9:c6:73:25:28:e5:77:f6:e3:99:a6:a2:
a4:67:1d:f1:f5:af:4b:2c:4b:37:24:6a:1e:62:5c:0c:56:11:
e2:50:93:95:89:de:e5:b9:b3:1e:38:4a:77:b8:5d:3a:62:52:
4d:59:56:81:c9:f4:20:6f:b8:67:58:86:d2:a9:44:79:f1:ee:
fc:49:84:c6:92:6d:10:1d:dc:e7:da:95:be:2d:3e:86:22:bd:
d0:5c:27:c8:e0:49:05:81:e2:36:97:ff:6d:c2:32:49:ea:8d:
6d:99:2d:03:69:cc:aa:43:b2:84:1d:f1:d3:c4:91:03:0c:42:
de:c6:5b:84:2f:2e:53:eb:f0:5c:3c:a7:61:67:20:5d:8f:38:
0d:98:2a:ff:2d:b2:da:98:47:2f:27:6f:2f:a6:07:ea:58:a1:
c5:63:fc:ce:b1:a8:8e:77:fb:99:4a:af:35:46:3d:12:df:18:
b0:f0:56:0e:ca:7c:2e:16:e4:e9:46:f7:ff:8b:cb:23:da:39:
ad:cf:3c:b9:24:70:38:f6:32:d4:1d:c5:af:b0:3a:a5:27:b0:
38:d8:95:c9:67:c6:2c:1f:7e:39:9c:71:cc:2e:cf:e1:92:8a:
db:54:72:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:20 2025 by rpki-client