Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
File: pnkWCgRJ6LUPwByF3PzlSyxim1E.mft (raw, json)
Hash identifier: lYInREs4yTT04nLSL3D7VpGoSbCagdPoEP2vdPKXuwE=
Subject key identifier: 03:B1:0A:3C:BA:73:73:F7:9E:84:36:9F:50:F7:68:85:42:43:26:B6
Authority key identifier: A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
Certificate issuer: /CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Certificate serial: 01958BF2AEE1605FC7DBD5AA6F8A994C805A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
Manifest number: 0E9B
Signing time: Wed 12 Mar 2025 20:01:32 +0000
Manifest this update: Wed 12 Mar 2025 20:01:32 +0000
Manifest next update: Thu 13 Mar 2025 20:01:32 +0000
Files and hashes: 1: 6zgBCVzd-5kdX0sgGe0YDglrk04.roa (hash: mpYaeNHnIzoaHZnsNjSuZCAnd5S6WeK+VhnJsngc1QQ=)
2: pnkWCgRJ6LUPwByF3PzlSyxim1E.crl (hash: Mq1V/67CMjCk5wQFAHyUcJIF+w8cvXdw0OxPidN75OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:ae:e1:60:5f:c7:db:d5:aa:6f:8a:99:4c:80:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Validity
Not Before: Mar 12 20:01:32 2025 GMT
Not After : Mar 13 20:01:32 2025 GMT
Subject: CN=03b10a3cba7373f79e84369f50f76885424326b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7b:9c:79:40:18:6b:14:92:e3:8f:a1:43:4a:
89:22:7a:5f:dd:9c:ee:89:d1:05:8c:26:9c:b8:84:
d7:19:49:24:35:c8:2d:8d:ca:b6:35:06:cd:83:18:
ea:de:9b:20:ec:40:3b:8c:e3:c1:b0:6e:f2:ac:71:
30:2b:4b:eb:75:57:a0:dd:2b:19:72:75:26:16:f2:
c7:39:33:1f:22:2b:cb:3b:31:98:ac:a1:24:40:65:
ae:d3:72:0a:c8:f5:b3:1f:57:da:fa:12:8a:92:97:
4d:17:ef:31:be:47:d4:bb:09:3a:11:91:fd:64:d2:
f9:6f:28:4b:4b:ca:aa:88:4f:c4:a4:54:7c:3b:54:
30:00:e4:3e:4d:08:79:f0:bc:af:e8:79:9a:c2:8b:
56:bd:e9:16:8c:2f:27:82:99:72:f3:32:45:a5:f9:
e2:a9:fd:e1:de:f5:b6:bb:59:1f:b1:65:77:a4:cf:
a3:11:b0:c0:57:1d:a6:f1:2e:38:48:b1:55:93:65:
9b:2e:b3:6d:20:44:c5:03:61:a9:89:00:60:39:85:
aa:ca:b2:0f:c0:1e:93:67:16:b3:ca:a6:65:a0:55:
a1:c3:5a:ec:44:0f:16:0a:0b:0a:28:bc:15:52:28:
47:3d:77:22:fb:62:d3:d9:17:7f:da:ab:54:c2:f2:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B1:0A:3C:BA:73:73:F7:9E:84:36:9F:50:F7:68:85:42:43:26:B6
X509v3 Authority Key Identifier:
keyid:A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4b:8c:67:e2:d1:9a:b5:82:9f:fb:cf:71:94:d9:4e:5c:ad:
43:64:36:fd:30:e2:e0:c3:0b:ab:31:51:3a:19:c4:7f:ef:e5:
45:c3:8b:b7:e8:16:c9:fb:e9:31:e3:7d:04:e6:d2:a8:5a:bd:
7d:5b:b6:30:d4:da:41:46:b4:30:86:0d:22:36:5d:78:0c:17:
14:e4:21:65:81:22:61:f8:44:09:76:2a:e7:34:56:de:e6:f4:
6e:da:1f:13:5a:1b:08:81:19:55:e5:c8:9f:2c:94:00:72:c6:
53:eb:fa:60:43:9a:2e:53:77:9f:84:6c:47:c6:1b:c8:1b:9c:
ef:af:29:e6:16:c8:7c:11:36:65:49:11:a6:97:a6:92:43:c8:
34:cb:2c:53:d4:27:38:41:e8:02:67:4c:b7:16:d8:7a:18:39:
78:49:63:6f:23:71:d4:ec:f2:18:f6:c7:41:41:fe:db:d3:26:
23:b0:6e:20:31:71:19:0a:39:86:f5:c5:9d:91:61:ce:8a:b0:
fe:a7:77:c8:64:9b:45:18:5e:b1:a1:b1:2e:1d:7a:83:7e:32:
ba:21:df:d5:90:12:5e:2e:3d:6c:f4:3a:68:e0:33:b8:b3:62:
0f:54:c4:f1:32:81:a5:4e:8c:bb:14:08:d0:12:94:87:29:c0:
46:3b:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:57 2025 by rpki-client