Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
File: Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft (raw, json)
Hash identifier: U7pKvJeQF8VzT8XFTC7e579J8QVxkVqolKGeaUMJUjg=
Subject key identifier: 6A:45:7D:71:C4:D7:82:09:E2:2B:8F:4D:BC:31:8D:A3:45:5F:5B:0C
Authority key identifier: 3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
Certificate issuer: /CN=3e782de1b5d5292edd136d5278258c67b05be22a
Certificate serial: 01951134B3F0682FA4E4AD121B360F02EF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
Manifest number: 019A
Signing time: Mon 17 Feb 2025 00:00:21 +0000
Manifest this update: Mon 17 Feb 2025 00:00:21 +0000
Manifest next update: Tue 18 Feb 2025 00:00:21 +0000
Files and hashes: 1: HsLH977Wr8CRqPeFRIsKeWuqNBQ.roa (hash: DfN2Ce+eFgUYzjRB1SnZEzwBexeV9U5bLQB9J92xhK4=)
2: Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl (hash: 1/+zAtiH2VjQ4eP9p/9dLZbDZUzU48i4b36Wcqql9Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:b3:f0:68:2f:a4:e4:ad:12:1b:36:0f:02:ef:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e782de1b5d5292edd136d5278258c67b05be22a
Validity
Not Before: Feb 17 00:00:21 2025 GMT
Not After : Feb 18 00:00:21 2025 GMT
Subject: CN=6a457d71c4d78209e22b8f4dbc318da3455f5b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:36:cb:ba:bb:c4:88:19:40:db:5c:89:ff:
45:1c:88:07:e7:d6:f2:32:b9:1d:f4:0a:22:a5:f5:
ca:83:e5:09:26:78:62:f3:d4:7e:8b:c5:7e:67:00:
3e:8e:db:89:a5:43:1d:a8:54:01:b5:c8:00:7c:eb:
b5:37:b9:35:9e:53:4f:81:09:9e:38:e6:31:26:e8:
0a:80:4c:00:2d:49:57:4f:e7:63:f9:f1:7b:0c:17:
56:7d:67:ab:12:2e:23:f3:c3:ab:06:0d:b8:b4:ad:
dc:27:a5:22:33:bc:a8:05:03:c2:f4:cb:d4:2b:bc:
7c:b5:38:ea:ef:d8:ab:60:52:df:f2:ef:ad:dc:8a:
b0:9c:2a:c3:91:d3:c6:9b:7d:1d:87:aa:63:6a:31:
2f:d6:e9:b9:7e:ca:13:54:59:03:0e:02:91:7a:6f:
f4:db:48:f5:0f:eb:e2:47:f5:aa:f6:74:6f:95:6e:
68:a0:40:52:6e:c0:87:0c:dc:f3:97:ae:00:1c:58:
8b:7b:1d:09:ee:cc:99:c8:7b:d7:c3:d2:cb:2e:53:
47:5b:33:19:d2:15:56:6a:25:81:b0:fe:2a:ab:82:
3a:ed:7f:b1:4a:6e:2b:b1:c3:08:66:70:ab:89:0d:
5d:75:ea:03:2b:59:2f:de:07:46:1e:f1:ce:01:12:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:45:7D:71:C4:D7:82:09:E2:2B:8F:4D:BC:31:8D:A3:45:5F:5B:0C
X509v3 Authority Key Identifier:
keyid:3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:be:9f:e9:6b:02:66:bd:3b:3d:3e:c6:31:c0:fb:21:32:48:
09:3d:9e:41:df:fa:29:49:81:4a:ea:7b:69:5c:6a:fa:24:5d:
f1:a3:b1:f9:ea:db:3f:f7:26:4b:bd:c1:92:74:a6:57:52:61:
9a:03:9c:aa:b5:d9:33:e5:b1:64:80:43:56:7c:24:c9:b4:fc:
cd:63:83:e7:19:97:62:a1:e9:00:9b:b8:d0:4c:19:ea:a9:8b:
c9:99:1b:09:63:82:df:ce:38:73:a9:8d:61:4f:54:e8:af:c7:
7b:a3:f8:04:4b:86:89:2b:80:98:ac:a8:a2:00:df:ab:22:c2:
4c:d0:d0:53:6d:1c:db:7e:55:0a:80:dd:d4:8c:58:2b:89:fa:
bd:65:17:c2:f1:90:55:64:5c:b1:fd:7c:e0:19:9d:76:9c:c6:
65:8a:8b:cb:d1:a3:cc:e9:19:2b:d4:00:03:dc:5f:44:ab:01:
26:48:84:ed:e3:1c:6a:77:7d:ca:8a:09:22:9f:80:cc:e7:71:
5b:5a:a1:f0:57:78:88:06:b2:d7:06:13:d3:2f:2c:35:cd:2c:
24:be:d5:1d:e3:22:d3:e6:70:1f:5d:3c:93:01:a6:52:d7:a4:
6c:31:9b:29:cc:c2:99:31:6d:a2:62:af:34:57:ef:3d:00:01:
34:a3:0d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:31 2025 by rpki-client