Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: 22KFhfA72fra9qd7uRB2+QqsaUutpesfdN7MEgSvIbc=
Subject key identifier: AE:65:19:D5:0B:B7:66:5B:38:3F:29:D9:9E:91:27:8F:9E:1C:C4:03
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 0195113524C9453DC0FE45EF1168810AB3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 00:00:50 +0000
Manifest this update: Mon 17 Feb 2025 00:00:50 +0000
Manifest next update: Tue 18 Feb 2025 00:00:50 +0000
Files and hashes: 1: 1adP5-NZ3OGm9i9jXo5g2DtuEHg.roa (hash: 4GXA+o0SJCtO2Bu0u+0CpRTj3wJJBPSJUEdoH/BzRg4=)
2: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: dwoDmK/7j2DgIN36nHOOQ+TFWl2DoMge86MJHkUjxZU=)
3: XfcUo_pFgzzQK3LpHanDAL6qsm8.roa (hash: PqM9+rcTrXNoQwaCLTQL6oXgVIvAF+akxeev/02act4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:24:c9:45:3d:c0:fe:45:ef:11:68:81:0a:b3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Feb 17 00:00:50 2025 GMT
Not After : Feb 18 00:00:50 2025 GMT
Subject: CN=ae6519d50bb7665b383f29d99e91278f9e1cc403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:9e:de:f0:e0:b1:6f:2a:a2:7b:83:67:0d:
b9:ce:e7:c2:85:e1:ad:fa:98:e5:35:ad:f7:75:7b:
5a:d3:ce:17:c8:f4:83:fb:f4:a8:61:36:5c:02:b5:
8a:28:ea:49:f2:8e:4e:60:bf:0a:ec:de:b1:2c:7c:
b7:60:ac:67:0e:ba:0f:9d:6b:85:53:73:a4:4f:30:
f6:cb:68:0f:3c:28:dc:a7:00:e0:e1:61:1f:9f:a4:
13:68:13:23:5d:9e:d4:65:d9:e1:6c:32:cb:20:cf:
b2:ad:4a:47:1b:07:74:83:c6:b2:61:f6:c7:5e:36:
0a:9a:c7:a5:43:c9:dc:32:c3:57:e6:f5:5b:1b:6a:
56:8c:cb:f4:d8:93:eb:91:4d:8a:16:50:45:11:b5:
15:0f:34:8f:5d:e1:3a:8c:fd:19:06:8a:bf:a1:35:
71:1c:7c:da:56:e3:74:2d:90:1c:b6:b9:68:d4:bf:
72:1e:43:2a:8c:3b:1e:a2:9c:b5:b1:eb:0a:bb:73:
7d:18:2f:67:3b:89:12:5d:4d:22:22:2e:52:c5:cd:
2f:2d:32:2e:03:fb:4d:4a:41:f1:b4:59:b0:22:e8:
dd:f9:2c:44:1e:62:db:8e:43:96:bc:75:c9:df:20:
56:f5:fc:a5:d6:f6:74:63:fa:aa:ba:eb:5d:50:75:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:65:19:D5:0B:B7:66:5B:38:3F:29:D9:9E:91:27:8F:9E:1C:C4:03
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b4:99:f7:5e:c5:e2:be:cf:2d:44:da:28:52:3b:1d:44:27:
53:19:43:92:b5:a6:bd:b9:db:4d:a9:6c:ec:c9:47:85:f9:31:
42:9a:1b:ec:97:0a:ce:fe:8b:d2:bf:17:5c:59:76:7f:8d:f5:
58:c8:8e:13:63:33:14:52:1b:4e:24:5a:11:5d:d3:ca:e9:20:
8d:a5:82:ca:be:1c:eb:69:56:63:bb:55:60:8d:27:5d:1c:16:
3d:1d:a5:17:0e:9d:6a:dc:91:17:02:fe:b5:dd:37:27:98:c8:
f2:7c:dc:66:77:ce:b7:db:17:27:d6:7b:94:a4:f9:52:60:4f:
69:02:b3:c1:8c:41:62:7f:89:ff:6c:90:d5:7e:16:9e:e8:b1:
b2:78:f1:37:60:60:17:ea:44:bf:ed:42:b5:cc:4f:33:af:64:
91:d0:69:90:d3:01:7f:82:e2:68:86:30:a5:8a:44:03:5a:84:
18:fe:ae:51:19:7b:32:ea:b2:bf:d9:3a:06:47:53:e3:ba:6d:
0b:d4:71:8a:5d:7b:e0:82:70:28:e5:27:33:f6:e5:07:86:8b:
2f:bf:62:83:ab:24:d6:14:83:79:2e:07:2e:47:45:32:49:24:
15:6a:f1:31:f8:16:32:6e:5b:56:26:6b:f4:cd:31:8d:26:c3:
31:39:ec:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:32 2025 by rpki-client