Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: 6Fcxk/covG/JT/n0423hAO4gwM00qnAR59HAHTNcG5Y=
Subject key identifier: F7:E0:FF:E0:FA:93:1B:A4:0A:D1:48:2E:10:BB:90:9F:A3:11:E2:3F
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 019511D946368A50FA4FA3080F613DE28796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 0B9C
Signing time: Mon 17 Feb 2025 03:00:06 +0000
Manifest this update: Mon 17 Feb 2025 03:00:06 +0000
Manifest next update: Tue 18 Feb 2025 03:00:06 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: Y5nMuYmUyO8/z8vJ31BUuNl00hhCBU4zmkuyQ1pWU7k=)
2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:46:36:8a:50:fa:4f:a3:08:0f:61:3d:e2:87:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Feb 17 03:00:06 2025 GMT
Not After : Feb 18 03:00:06 2025 GMT
Subject: CN=f7e0ffe0fa931ba40ad1482e10bb909fa311e23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3a:3e:33:0e:7e:20:12:5a:1c:b3:3b:24:af:
15:b3:bb:f5:39:7e:08:17:d2:25:b4:a4:b2:42:71:
05:1f:d3:af:98:fb:44:2d:b2:ae:85:be:2d:91:2a:
bb:63:a4:ca:b2:d9:c3:d4:28:aa:14:44:fe:2b:2c:
90:9c:f2:b3:ff:5d:61:2d:bc:76:b1:86:84:d4:3d:
03:02:a3:26:9f:4a:6f:f8:c6:6a:97:64:9f:18:8b:
c2:9b:bd:85:74:3e:af:92:0a:60:4f:55:6d:5c:c2:
1e:9e:11:73:be:fd:41:f5:6b:d4:7e:7a:f9:d8:ec:
a3:0b:ed:04:72:a3:4c:3e:a6:5c:24:9b:16:d8:49:
2a:b6:55:61:5b:9d:c3:75:e5:b2:0a:dd:e7:d8:8c:
9f:56:17:42:a9:48:b2:23:5b:da:1b:7a:cf:01:0f:
5d:c1:d7:6c:dd:67:25:3f:0b:53:35:38:bc:81:d5:
83:59:ba:7f:9d:c6:3b:87:72:ee:47:04:d0:29:47:
77:8b:89:2d:ac:f9:d2:06:af:83:ae:f1:08:1c:24:
71:fe:16:2c:b6:c8:b3:4e:9e:4f:e0:cb:ee:e2:bf:
61:03:10:92:cd:31:1b:32:6e:ac:47:aa:21:76:60:
72:c9:2b:e7:7f:35:08:a2:90:74:fd:58:8f:45:79:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E0:FF:E0:FA:93:1B:A4:0A:D1:48:2E:10:BB:90:9F:A3:11:E2:3F
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4f:3b:70:41:09:a6:a7:07:fe:eb:9e:aa:f1:36:0a:fe:d6:
42:50:1d:c9:94:44:36:24:fe:db:56:aa:0c:0e:ed:57:24:97:
3d:aa:cd:73:d9:82:6c:47:0e:4f:37:a5:8c:19:43:e0:8d:ec:
ec:65:71:a7:ef:00:81:ef:d2:c2:37:f0:03:d1:6f:bf:a5:51:
cc:21:05:6e:0c:3a:23:01:16:0c:77:f1:f1:b4:8a:f6:34:9f:
ed:34:1a:fe:4a:aa:96:2a:22:17:70:cc:48:66:a5:71:65:44:
21:a8:3a:d6:a0:0b:28:6c:fa:aa:c4:0a:4e:89:07:67:e6:8d:
62:f7:5a:0a:61:46:c3:91:26:16:e9:a9:05:8a:a9:09:6d:46:
39:64:90:1d:7e:7d:99:52:3a:85:c3:d2:c6:6d:62:ab:89:ef:
08:43:e6:6b:53:86:e5:1a:d1:01:94:ac:fa:12:9a:a7:ea:48:
05:d8:20:a3:df:15:52:6f:ef:10:a0:64:fd:c2:a3:81:75:60:
30:cf:99:88:73:59:14:42:d3:2e:09:95:31:26:22:f8:e9:21:
aa:71:49:a9:ee:c9:24:dc:ab:66:8c:fb:2e:52:3e:4e:0e:4d:
14:6f:c4:14:1e:32:b4:19:25:64:7f:85:81:5e:f6:1a:0f:e7:
4b:e7:62:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:49 2025 by rpki-client