Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
File: PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json)
Hash identifier: Px+JHkxRNoxw5sW1/P9zeCQ5BlzrOlFE/YfjLF0WYKI=
Subject key identifier: 07:2E:1F:57:F8:F8:13:BD:3B:CC:CE:F6:6B:E6:64:FC:8A:F3:52:6B
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 01920B71B4DF755384C9645411B47FDC040C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
Manifest number: 42
Signing time: Thu 19 Sep 2024 18:00:54 +0000
Manifest this update: Thu 19 Sep 2024 18:00:54 +0000
Manifest next update: Fri 20 Sep 2024 18:00:54 +0000
Files and hashes: 1: 5N_kgbicsvOFuDHv_jewlQhqPNE.roa (hash: tI+tauaRKBG5kr3fekvGp9BgapqO98xD3ZV6FohnT0s=)
2: P98rIcyyKiStl2M8O3Gsre7fd6c.roa (hash: sBDPxtvFQorfqUxVJwvSmyGZwPH13Qtcsyd16z6qvXU=)
3: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: /aDStGhEDuK4vdxGnLopT9RkRxsqnjlUxvgpER6xfm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0b:71:b4:df:75:53:84:c9:64:54:11:b4:7f:dc:04:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Sep 19 18:00:54 2024 GMT
Not After : Sep 20 18:00:54 2024 GMT
Subject: CN=072e1f57f8f813bd3bcccef66be664fc8af3526b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:49:d8:4b:ba:6a:8a:54:cf:d5:ff:32:af:d4:
17:ce:2e:96:b1:16:1b:55:22:9e:06:84:bc:a9:b8:
4b:16:3b:d4:dc:1c:64:13:fd:2c:0b:9d:8a:1e:e3:
6f:bf:e4:a3:d2:62:e5:da:5c:8d:db:cd:83:e4:9e:
15:c6:0f:67:e0:15:ac:06:4f:51:4c:40:fe:e4:65:
3e:e4:41:6e:dc:bf:96:5a:6c:1f:a6:28:58:54:4e:
76:27:b4:45:87:89:c8:7e:a6:7f:36:ed:7c:c1:53:
1c:1d:27:01:31:99:94:52:40:2f:bf:a0:ae:25:68:
eb:18:fc:43:97:29:c4:1c:da:71:20:f4:36:b2:1e:
be:af:f4:89:dc:09:94:0d:07:df:bc:74:0c:f7:94:
19:0e:7c:30:ff:23:09:73:db:b1:07:f7:c7:32:a0:
bf:d6:c6:19:32:43:5c:ba:cb:0b:78:27:64:54:81:
4b:d2:a7:43:e7:d2:4d:b5:9a:a6:4a:0c:3a:23:01:
ef:d8:74:32:3b:75:ef:2d:be:79:19:48:05:a3:e0:
b9:92:0f:43:d2:63:7c:3a:4a:ac:b7:87:ea:64:ad:
5b:d5:3b:61:b4:d3:f4:98:db:2f:c3:04:d4:bb:92:
c0:92:1b:86:55:e8:52:73:48:40:70:86:25:78:93:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2E:1F:57:F8:F8:13:BD:3B:CC:CE:F6:6B:E6:64:FC:8A:F3:52:6B
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:19:76:10:b6:03:a6:08:7f:ea:2c:0f:52:e7:2f:27:f2:8e:
93:90:9b:3f:a9:fe:31:89:e6:23:ff:d8:eb:45:e8:f7:24:18:
5d:4b:2d:ce:c9:74:a1:ec:20:f0:0a:1b:47:36:3f:3c:dd:48:
48:d2:5d:c2:73:3e:4b:af:22:67:9b:60:99:13:96:b6:62:ff:
19:0f:20:19:c7:3e:f0:0b:8f:89:20:e0:05:af:c8:bd:b9:f1:
81:4f:e7:4e:ad:26:44:e6:d7:af:69:01:31:b1:77:4a:76:10:
c7:04:0c:ac:af:6b:ea:8b:46:53:ac:19:44:f0:ce:d1:d5:e7:
32:49:47:ba:9f:83:e2:1c:0e:19:6d:6c:66:c0:37:19:b1:91:
de:3e:17:b8:e2:dc:6e:15:13:d6:0f:15:0b:78:b5:29:e0:1e:
dd:f1:7a:c9:aa:e2:b6:b9:7b:c0:f9:08:c8:41:6b:2d:80:40:
02:30:dc:ad:94:fe:2a:ef:17:76:ad:bd:fb:90:1b:a5:e3:a7:
bb:a1:9d:0b:cb:d0:ad:0b:10:a4:60:01:76:fd:75:32:41:c1:
da:0e:15:db:96:c7:a1:13:1d:3c:b3:dd:96:fb:5d:9f:6a:92:
3a:e0:b7:47:fc:0b:8e:43:a4:75:b0:8d:8f:74:bd:88:72:3b:
71:47:ba:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 23:43:56 2024 by rpki-client on console-ams.rpki-client.org