Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
File: PmxFIHWfOk74uamifiUzznMsVBE.mft (raw, json)
Hash identifier: i51qW1plpG5/eT51Zuczaua9/nLf1uP2AXFffOZIIOk=
Subject key identifier: CB:7D:07:80:CC:BC:44:01:64:84:A7:94:EF:B1:8B:43:70:FF:A1:AF
Authority key identifier: 3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
Certificate issuer: /CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Certificate serial: 0195127E90B560D16F14D57624DAF1B76C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
Manifest number: 13EA
Signing time: Mon 17 Feb 2025 06:00:39 +0000
Manifest this update: Mon 17 Feb 2025 06:00:39 +0000
Manifest next update: Tue 18 Feb 2025 06:00:39 +0000
Files and hashes: 1: PmxFIHWfOk74uamifiUzznMsVBE.crl (hash: w5z+YGJyjGTSuzh2bjU3LynM9mABSdFjuBYAsRNTfcA=)
2: f62uVetw4VLEAcyA7iUss0CmbKk.roa (hash: KfBTV0RaWF6oQ2oIYy/lZbeXGP7Rdv40K79+xRa2szk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:90:b5:60:d1:6f:14:d5:76:24:da:f1:b7:6c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Validity
Not Before: Feb 17 06:00:39 2025 GMT
Not After : Feb 18 06:00:39 2025 GMT
Subject: CN=cb7d0780ccbc44016484a794efb18b4370ffa1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e4:84:fe:04:d9:1b:a4:1d:c2:d5:be:ba:70:
1e:9b:33:8b:a5:0c:68:b9:7a:61:d3:09:44:e5:12:
3c:d6:2b:41:f4:9b:a9:3e:a8:f2:ea:ac:b5:ec:f1:
bf:07:0d:46:d8:c8:c8:6e:97:7e:a4:66:fa:fc:23:
1a:37:ca:3e:a1:25:07:2a:a3:f3:f4:7a:e0:f8:6d:
3a:92:db:bf:e1:3a:98:7d:9f:41:fb:8b:a8:94:a5:
23:d7:f4:cb:f6:ef:b9:f0:ba:42:eb:c2:45:f3:67:
41:64:57:8f:67:ed:fc:39:8f:94:a7:a0:ab:a3:9a:
18:61:50:9d:e1:1b:6f:f3:68:d0:83:35:e7:f1:c4:
61:b9:b5:15:ee:de:85:fb:30:ce:ac:29:d3:15:dc:
d8:68:bf:97:e1:a3:28:9e:ad:46:03:e4:c6:8f:e9:
8a:88:f3:91:0a:36:ac:34:fb:a3:2a:0c:b8:d8:8b:
19:91:b3:27:1b:94:a6:29:bb:e5:f9:2b:38:a8:36:
84:65:2c:c6:cb:ba:16:87:09:23:28:42:46:e1:01:
13:7b:c5:a8:c5:45:05:2b:2c:a0:21:b5:5e:38:bb:
72:58:5c:a4:7d:97:8e:2c:07:72:2a:3f:66:08:c3:
85:4d:82:f4:eb:19:4e:e5:3c:c0:1e:60:bc:22:70:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7D:07:80:CC:BC:44:01:64:84:A7:94:EF:B1:8B:43:70:FF:A1:AF
X509v3 Authority Key Identifier:
keyid:3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:79:25:e9:ac:6d:56:e2:5c:f2:fb:16:10:54:b8:b9:ec:2d:
0c:e1:6d:8a:29:b8:8e:12:fe:64:48:ae:96:30:5c:ce:0b:24:
7f:e7:58:e8:af:4c:d6:8b:db:f9:e9:bf:b0:8f:66:96:2a:a9:
74:57:32:58:df:d3:c5:92:c1:55:5c:94:52:69:69:e5:7b:44:
47:25:77:ac:ae:ab:b5:d3:9f:3e:43:15:c7:ce:20:2d:e1:30:
15:b5:ff:ac:95:a3:f1:1e:a9:b7:0d:31:9f:3b:2e:fb:26:b4:
56:b1:ed:69:d9:e6:2b:74:f7:4f:f4:07:e3:6b:ac:65:6a:21:
9b:dd:0d:82:31:39:76:1b:f6:3d:42:69:cf:7b:41:6f:49:f0:
21:b9:aa:33:67:d9:a8:39:51:31:26:54:9e:fc:dd:eb:4a:d2:
2f:52:2d:65:30:b8:25:eb:d5:f9:6e:c1:33:7a:e9:e0:8b:b1:
39:c2:33:eb:c1:84:48:6c:11:56:07:2d:ef:8b:ba:53:a7:2d:
c7:ab:40:d2:d9:bf:d6:49:f2:05:c2:0e:99:da:f9:fc:a1:21:
38:89:1d:16:e8:e9:5d:da:d5:82:f9:04:e2:3f:b6:5d:bf:8c:
81:64:52:d8:24:c1:88:35:2e:79:62:0c:4f:23:a5:27:3c:e0:
85:73:f7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:02 2025 by rpki-client