Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
File: PRzEAjSeGROS0ex0acG8gkNjRDk.mft (raw, json)
Hash identifier: ffB8E2Trqs5i0MeZKNsle000jW0y1A4ssHZ0bKqddIQ=
Subject key identifier: ED:0F:75:26:93:3E:56:85:E9:7F:93:FB:14:EC:11:1C:82:2B:E9:4A
Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
Certificate issuer: /CN=3d1cc402349e191392d1ec7469c1bc8243634439
Certificate serial: 0194C4D18BB5BC8B70C9D057831BCB9C5C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
Manifest number: 0871
Signing time: Sun 02 Feb 2025 04:00:54 +0000
Manifest this update: Sun 02 Feb 2025 04:00:54 +0000
Manifest next update: Mon 03 Feb 2025 04:00:54 +0000
Files and hashes: 1: PRzEAjSeGROS0ex0acG8gkNjRDk.crl (hash: +Zv8nQpZkcWFhP4gpKym4T1zxrxMWhMB+zmstMN2h4Y=)
2: flDyEgY09JcTncHiiRnZ44dc3Jg.roa (hash: U/d1Btmo0ndLftNS6W3aEjJNMxknGgzWNSoSOFVtfm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:8b:b5:bc:8b:70:c9:d0:57:83:1b:cb:9c:5c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439
Validity
Not Before: Feb 2 04:00:54 2025 GMT
Not After : Feb 3 04:00:54 2025 GMT
Subject: CN=ed0f7526933e5685e97f93fb14ec111c822be94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:ef:c8:0a:01:76:97:03:b3:d1:32:7d:8a:
5e:d5:a1:2e:7a:49:7f:9c:0e:2a:47:93:34:5e:09:
8c:f6:32:2c:67:3f:f9:30:23:bd:70:18:c3:eb:31:
98:8d:d2:f7:16:35:5b:fe:eb:30:f3:5b:61:00:e0:
37:ea:60:fa:df:27:36:aa:62:5b:15:1c:36:b0:6f:
39:8b:21:b9:f3:05:f0:2d:6d:1c:bc:72:22:15:ca:
67:40:d3:76:90:2f:36:0a:7c:61:69:97:17:37:83:
5e:5b:e1:75:df:95:ca:d5:f1:0d:83:df:e1:74:fb:
df:2d:8f:50:e6:17:ea:a6:a5:0e:d8:9c:8c:6c:31:
8b:44:28:06:3e:49:a2:aa:7b:b9:5b:72:50:97:b0:
e7:e0:b2:d8:bd:91:f1:37:2c:18:fb:e6:a2:fa:7c:
ad:c6:90:36:72:da:fd:4f:69:d0:c5:3e:15:a4:1e:
68:65:c7:04:b9:c5:00:f1:fa:dc:a1:86:36:fc:2f:
ca:d3:d7:0a:f3:5a:7c:48:5f:aa:34:f0:f4:19:26:
46:8f:0f:94:84:c4:e7:11:69:e9:c0:2d:8b:4b:fc:
79:5d:e0:2c:dd:72:29:77:c3:6e:ab:78:2e:c4:be:
b4:dd:97:74:a3:1d:e6:cd:64:25:bd:a8:06:3e:b1:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0F:75:26:93:3E:56:85:E9:7F:93:FB:14:EC:11:1C:82:2B:E9:4A
X509v3 Authority Key Identifier:
keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e6:cb:02:1b:d3:de:f0:a4:d8:cb:eb:f1:8f:b7:35:36:ae:
bc:27:d1:78:6e:0f:cd:fb:d1:b2:6c:8d:f4:09:cb:42:92:5d:
7e:8f:52:01:03:b3:f7:51:2b:a2:f5:2c:16:b0:17:9f:87:79:
1a:94:a6:a1:66:06:95:3c:f4:25:95:26:91:39:34:12:fe:3b:
df:f2:25:6c:23:96:4c:b2:d9:dc:40:42:24:35:0c:d2:cf:94:
17:25:9e:d4:64:d5:09:e5:c8:10:a7:e3:0b:69:44:8d:1e:e6:
4d:3e:d9:b8:6f:a5:4d:f0:21:b6:16:b1:f4:72:bb:7e:f8:73:
c4:89:7c:a6:9b:5a:8f:2e:f3:bc:92:b2:29:48:96:6c:f9:0f:
75:22:e0:5a:f1:ad:6d:2e:9e:ac:5f:c5:1b:51:66:59:26:c9:
7b:76:4b:96:28:ec:1d:7d:1a:67:c5:f9:8d:38:d4:df:35:fb:
c7:3c:93:5d:1c:87:8c:71:11:d4:87:3b:5f:e7:b0:16:90:49:
16:82:37:80:ba:f1:a4:b4:3e:61:03:73:39:82:a6:82:c0:58:
6b:ef:9d:9b:39:e4:7c:79:e6:82:63:29:46:80:ce:51:6f:71:
2b:fa:f4:f1:12:be:82:5a:e9:ee:38:e5:27:16:2c:ee:fa:f1:
ba:dc:05:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:56 2025 by rpki-client