Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
File: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json)
Hash identifier: 5+Zt1KV8goiwvffvXqj/i0cNp8Pw5gy/E333q6Q7zAw=
Subject key identifier: 1C:89:92:04:CD:27:1D:10:74:2E:50:EA:4C:C9:99:41:0C:0D:47:58
Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
Certificate issuer: /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Certificate serial: 019511A2C629606F5CA5967888DA8436FB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 02:00:35 +0000
Manifest this update: Mon 17 Feb 2025 02:00:35 +0000
Manifest next update: Tue 18 Feb 2025 02:00:35 +0000
Files and hashes: 1: 3Gi7K5otbF8YAPl6ViRUI8XiRNU.roa (hash: aFHAU+eeRwSzWLG9T2U4VKkPQW4ZT7Ys728VZHAX80s=)
2: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: g4NcXu/tEs+1e/uadhMkfkZSKYhxCw1/jTZCJE6vbQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:c6:29:60:6f:5c:a5:96:78:88:da:84:36:fb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Validity
Not Before: Feb 17 02:00:35 2025 GMT
Not After : Feb 18 02:00:35 2025 GMT
Subject: CN=1c899204cd271d10742e50ea4cc999410c0d4758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:ae:8d:7d:28:e0:c8:a1:50:93:ff:7a:2a:
17:ac:8a:1f:97:ca:e3:07:27:7a:6c:50:cf:d6:8b:
02:18:44:d4:5b:34:d1:97:1e:14:53:fe:38:10:70:
53:bd:ad:ba:4b:12:b1:37:85:da:38:00:c7:62:71:
84:b7:51:fd:d0:ca:98:c7:e6:d6:63:9c:03:e8:ce:
98:8b:ac:2f:fd:ae:c1:db:cd:ab:91:36:38:f9:2d:
83:26:dc:3c:c3:13:d4:89:de:93:a4:c4:cb:51:ca:
32:7d:52:bc:7e:b3:13:70:9a:eb:1e:fc:a6:a0:a2:
4b:7b:f0:bb:42:88:18:d5:91:7f:ec:a3:60:07:45:
34:8b:71:a1:7b:44:35:bd:b1:fc:5a:7a:81:69:ed:
a1:f4:20:93:9b:2d:78:c8:2c:cf:0e:75:ef:e9:6f:
66:4e:0a:29:2b:8a:a5:b6:ea:e0:61:07:69:63:ac:
36:1f:e5:00:ab:f3:6a:90:11:18:de:00:da:f6:9c:
fd:21:30:05:32:83:f1:2f:5a:e4:72:48:dd:22:27:
05:46:52:ed:8f:e6:8f:be:cb:4d:33:e4:b0:06:02:
c0:71:df:d3:c4:be:62:2b:5e:c1:0d:71:e4:34:bf:
64:19:ff:c0:d4:c2:fc:4f:03:9a:8c:12:c3:49:57:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:89:92:04:CD:27:1D:10:74:2E:50:EA:4C:C9:99:41:0C:0D:47:58
X509v3 Authority Key Identifier:
keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1c:48:a0:60:b9:f5:79:02:a4:9d:de:5c:ab:1b:c7:77:08:
31:0a:e1:d9:79:a4:c0:c7:63:e3:cd:f5:b0:ec:bb:4f:8d:31:
5e:6f:1d:2b:0e:86:fb:8d:9a:f4:6e:80:eb:3e:ea:56:93:11:
a0:90:59:54:9e:1f:65:0c:44:45:9a:59:c6:9e:d3:c6:b3:63:
8d:55:2c:dc:f9:c6:06:70:cd:f3:ab:77:07:c9:c7:93:5c:56:
a9:d6:1e:e0:72:66:0f:97:0f:6f:33:3a:a3:69:e6:82:6f:2b:
d4:4b:c8:b0:e6:41:eb:ac:ca:23:e1:27:11:19:c1:cd:89:3e:
c5:6b:ac:8e:c1:a5:13:7a:a2:b6:1a:26:bd:05:af:a8:64:08:
e0:cc:cd:20:83:6d:cf:41:b4:5e:d6:84:4a:2d:a6:73:17:c3:
70:16:80:27:64:37:87:2f:0d:77:34:8b:6b:cc:f9:2c:0f:9b:
37:d6:f8:31:d0:89:80:0e:21:20:a6:9d:6e:b8:aa:93:03:0c:
55:45:cc:22:d6:9c:45:95:a9:fb:d9:87:ae:1f:d3:fc:a8:00:
a5:df:3c:8b:c7:35:ee:3e:73:3e:63:98:33:bb:35:a1:49:05:
f9:20:c1:5d:9e:94:eb:1c:9e:4f:c5:b8:f5:3c:12:62:ed:ca:
48:29:56:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:55 2025 by rpki-client