Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File: 1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier: 4i3mOzLwjP6oxLDpIkLVmGD47D8A3naLuBMP33U684Y=
Subject key identifier: 3F:FB:CE:BA:19:B8:23:5B:C5:C8:4A:2C:F8:75:10:F2:4F:AB:4D:37
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer: /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial: 01951134826B5E867B787C3496A521CA3974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 00:00:08 +0000
Manifest this update: Mon 17 Feb 2025 00:00:08 +0000
Manifest next update: Tue 18 Feb 2025 00:00:08 +0000
Files and hashes: 1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: gbXkW6HiB6QWV9ohTKU6h8wNGAzHJ7ORNCNdnXBDArA=)
2: Lf04Gu4CGxYLcQBclc4AN9VDJLA.roa (hash: dSOlHoyFZA5kqNN/4PjLQn10doJUzZFyYe2NTurY+0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:82:6b:5e:86:7b:78:7c:34:96:a5:21:ca:39:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Validity
Not Before: Feb 17 00:00:08 2025 GMT
Not After : Feb 18 00:00:08 2025 GMT
Subject: CN=3ffbceba19b8235bc5c84a2cf87510f24fab4d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:f9:77:21:2d:5c:bf:ad:0c:fe:8f:3a:4a:
56:b9:18:e3:72:53:bd:43:53:79:76:a1:04:f3:9e:
5b:54:59:74:0a:91:70:9f:c7:b3:be:39:2d:4c:3f:
9e:c2:47:47:82:61:78:fe:b3:50:4c:c1:d8:b2:8b:
fc:c0:f9:74:8a:9d:aa:81:6d:79:07:a0:48:7c:a5:
03:4d:8a:b0:d5:64:f0:b3:f6:f5:d0:25:aa:b3:26:
d6:f0:5c:a0:41:54:9e:02:75:f5:3a:7c:a4:68:39:
62:ee:5b:28:96:ba:98:67:cb:9b:63:d2:a5:20:80:
90:3e:18:28:e7:91:10:27:fb:b7:27:7e:32:39:95:
05:69:e2:46:a8:45:74:8b:3e:c5:a8:57:a0:99:c9:
44:4c:91:07:74:8f:7d:a5:2e:76:1d:2f:ad:da:3d:
b6:a0:95:75:f2:d2:4b:43:b5:fb:a3:e7:c0:7e:a4:
b9:b4:eb:f0:c3:5f:ad:8d:46:bb:53:b9:82:68:7d:
e9:f9:28:c5:f0:cf:56:dd:6e:9b:f9:c3:ac:e9:61:
f1:2a:8c:60:c5:8c:fb:c6:76:62:71:81:85:54:bd:
e1:49:c6:33:2c:86:74:a9:4c:3f:94:d7:1b:ab:21:
b9:0a:f4:97:02:1e:d6:4e:bf:fe:dc:bb:69:b5:9a:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FB:CE:BA:19:B8:23:5B:C5:C8:4A:2C:F8:75:10:F2:4F:AB:4D:37
X509v3 Authority Key Identifier:
keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9f:e3:74:35:73:78:aa:d5:f8:fa:97:ad:f0:71:cc:04:f8:
dd:41:7d:27:40:cf:27:fc:24:6d:ab:e4:8e:0a:6d:f2:2f:30:
16:93:7a:40:bc:0d:df:1d:d1:3e:20:a1:05:d1:f2:f2:c3:f7:
bf:96:ec:18:89:0b:0b:68:25:cc:cc:af:f1:ac:91:08:1f:87:
45:1f:66:b1:c4:c3:58:2a:7c:48:0b:47:92:70:7d:a8:9c:7b:
4c:98:12:1f:7a:27:5b:0e:78:20:38:1c:aa:6b:ed:49:34:29:
02:40:16:78:c1:41:be:73:12:21:78:33:0e:d1:50:cc:d2:69:
14:dc:a6:79:a9:a7:d6:c8:a7:98:0e:9d:d1:aa:ad:66:97:08:
2a:18:3c:8e:e2:02:3b:70:67:31:54:06:06:43:9d:72:ba:c0:
d7:c5:8f:8a:09:e9:72:7d:2b:2e:58:29:5b:5c:d5:60:ec:52:
64:3f:e5:e0:ff:d2:0b:67:b6:61:a4:ca:b0:00:2e:64:36:2c:
3f:81:af:45:34:3c:b4:13:fa:b4:58:a9:d0:21:67:1f:4b:5a:
1f:19:b6:00:75:8b:2a:fb:0c:92:d7:41:4a:a0:33:16:5d:bd:
8a:65:b0:9a:47:5d:92:5f:39:35:77:0a:0e:a6:8a:5b:55:fd:
0e:1f:d2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:31 2025 by rpki-client