Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
File: PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json)
Hash identifier: nRmjJRpIrzFzA6cffQFZm3nSn5/ZpLZrcYBc2SkKJps=
Subject key identifier: 3E:98:88:76:CA:67:0F:11:63:2E:EE:41:F5:1B:54:90:66:50:DB:B5
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial: 0194BBCDEE1CDF727298ACEB663767D75AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: 97b_DOZexsMsbNq0jd1_KnrCkGw.roa (hash: Zsql+k4AO5wopmLFKXiIANICmsUjbHpn09FeXgUdFls=)
2: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: +FKPxyOOUlakEz3nZdX7r9MyghUwkqZaxEKSNMpyhZk=)
3: vFJBXwiLiT0SV6hpYm9T1KH_3Sw.roa (hash: iZ/rALDyZJ1JAyWAtw5uSLsZV8Z+UzVJnNgd7eGfu2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ee:1c:df:72:72:98:ac:eb:66:37:67:d7:5a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=3e988876ca670f11632eee41f51b54906650dbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:84:16:a7:a6:bc:0b:0e:c5:cc:a9:75:1d:
34:cf:49:cf:d4:6d:1f:2c:4c:3d:e9:e9:92:18:af:
b7:9b:59:8b:7d:e5:5a:ba:99:86:02:75:63:c3:53:
51:52:b9:67:6e:e8:1a:6c:1a:00:78:7f:7d:a3:06:
25:30:ae:a9:5b:2b:e2:78:3b:d3:df:5e:11:01:51:
9c:90:8f:ae:f4:49:c8:95:8a:04:0c:92:41:6b:8e:
fa:e5:a4:17:9e:85:5f:96:84:52:9e:a6:7b:6a:b9:
05:19:27:27:9e:20:48:1a:69:f4:95:2f:93:c1:0a:
d6:9a:db:61:c0:80:2b:da:1e:f9:74:01:a5:6e:cc:
fe:9f:f2:ef:91:c7:6b:76:6f:e9:34:ed:bf:80:f8:
58:8f:d8:d4:b3:ed:0b:64:29:73:79:d0:93:b1:6d:
13:79:2f:dc:1b:be:1f:04:ec:eb:cf:48:4c:b7:40:
38:ff:13:82:81:79:60:56:0d:13:0e:2b:09:19:cc:
c9:2a:19:09:89:ba:c7:a7:bd:92:59:f0:2b:48:fc:
1b:ed:f8:2c:f6:2b:95:35:38:d3:b6:ed:41:b2:8f:
3f:b3:ad:8e:51:70:66:bb:eb:be:15:1b:8d:53:27:
65:ee:99:28:46:c2:3f:1c:78:9e:c4:be:20:3a:7f:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:98:88:76:CA:67:0F:11:63:2E:EE:41:F5:1B:54:90:66:50:DB:B5
X509v3 Authority Key Identifier:
keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8b:0f:21:17:e9:35:f8:76:67:a6:2c:e2:2c:b1:2a:b5:27:
b6:3e:ae:4b:d0:29:7a:a6:87:84:9c:a5:fc:7c:d2:8d:8a:7c:
fd:56:f8:9a:1c:66:3e:d5:3d:39:ec:6a:1e:8b:3b:eb:6c:67:
ea:d2:72:b4:d0:45:ec:fe:d9:c4:3c:fc:a8:f2:d5:00:c5:6b:
ec:af:e3:18:ab:17:52:e4:04:af:12:67:e4:d1:d2:48:44:3f:
06:75:59:4d:87:fa:6e:f8:0b:cc:38:16:08:df:18:d4:09:a9:
da:cc:e8:2c:5b:0e:f4:55:38:3a:5f:d4:ca:e8:cf:65:00:4a:
58:25:c5:cf:45:d1:5e:5f:7d:11:9c:6a:76:45:eb:db:e8:ca:
9c:d8:82:ee:34:8b:ba:41:9f:53:6f:3c:31:5f:5d:0f:1a:c9:
07:83:18:00:68:e8:7a:9d:69:86:b2:ff:84:b5:ee:83:9b:20:
dd:7f:3b:af:63:d0:17:3c:f2:b5:5f:58:c6:f6:ef:37:5d:6b:
8e:d4:b3:27:12:c0:67:c3:44:eb:40:99:18:b2:d8:69:74:26:
77:d1:fa:c4:52:20:39:6a:ed:c0:10:02:7c:5a:da:cb:3e:0f:
aa:61:3b:fa:24:2c:24:bd:d6:70:0f:6a:c6:4b:b1:20:57:06:
ad:26:65:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:54 2025 by rpki-client on console-fra.rpki-client.org