Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
File: PpeXKwFXszTha_kfKifuDi3BOag.mft (raw, json)
Hash identifier: 0X+CKHqdcb81CGGYB0TTqterrzoBXMq2nhJ1Ds1389E=
Subject key identifier: DD:75:1D:41:98:D9:F4:2E:ED:3D:B3:26:77:80:8E:93:1D:84:80:7F
Authority key identifier: 3E:97:97:2B:01:57:B3:34:E1:6B:F9:1F:2A:27:EE:0E:2D:C1:39:A8
Certificate issuer: /CN=3e97972b0157b334e16bf91f2a27ee0e2dc139a8
Certificate serial: 0194C49A314B01DDDAB1DE69E1D3A9B3065F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
Manifest number: 9C
Signing time: Sun 02 Feb 2025 03:00:26 +0000
Manifest this update: Sun 02 Feb 2025 03:00:26 +0000
Manifest next update: Mon 03 Feb 2025 03:00:26 +0000
Files and hashes: 1: PpeXKwFXszTha_kfKifuDi3BOag.crl (hash: ggBE4eAmcvslz8nCvkUWUWmUOicH1MNBGr6x17TykDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:31:4b:01:dd:da:b1:de:69:e1:d3:a9:b3:06:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e97972b0157b334e16bf91f2a27ee0e2dc139a8
Validity
Not Before: Feb 2 03:00:26 2025 GMT
Not After : Feb 3 03:00:26 2025 GMT
Subject: CN=dd751d4198d9f42eed3db32677808e931d84807f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:40:82:3e:51:75:38:93:eb:33:6f:82:b1:72:
4a:77:08:10:31:b1:5b:38:d5:d5:c7:cc:59:78:65:
e7:5c:96:b6:39:a0:1d:58:34:2f:ef:bd:1b:18:1d:
0a:76:08:d6:0f:eb:64:c4:26:44:ce:45:e3:f2:f5:
6a:00:c0:35:ec:6f:ed:fc:48:09:fa:fd:6b:c4:09:
ad:21:a3:1d:7b:a1:a8:3a:28:fb:dc:d5:d1:e4:b6:
a8:09:f7:58:fe:7c:1f:64:5b:e5:71:41:ef:a4:fb:
47:21:41:08:08:08:9d:2f:b2:af:eb:ce:99:7c:7f:
75:07:a8:a2:90:ca:0e:10:6a:50:be:90:8b:f0:5b:
b8:23:cc:4d:f7:9d:d7:63:83:83:99:5f:fb:78:63:
17:b7:63:5a:b8:65:5a:19:61:7a:ad:a0:44:2b:aa:
e6:c7:64:a4:0c:8b:4d:42:6d:72:5c:4e:16:08:1b:
f8:4e:94:56:74:a8:78:53:04:ac:29:bd:81:32:fa:
b8:59:6c:2d:ba:b9:6c:47:d9:29:42:06:c1:9b:ea:
a7:20:6b:5b:d4:20:d6:f7:2b:f6:f0:75:b3:b6:5b:
61:38:7c:87:18:f1:df:c7:2b:14:46:cc:1b:32:d8:
62:03:83:62:ea:d6:53:cc:ba:3a:ca:39:37:b5:d6:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:75:1D:41:98:D9:F4:2E:ED:3D:B3:26:77:80:8E:93:1D:84:80:7F
X509v3 Authority Key Identifier:
keyid:3E:97:97:2B:01:57:B3:34:E1:6B:F9:1F:2A:27:EE:0E:2D:C1:39:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8d:20:05:21:20:97:3b:b7:90:2e:5a:75:4e:e6:ac:ec:51:
0c:75:86:4c:9e:f7:12:a4:b8:b0:b0:02:d9:b9:76:10:63:ca:
77:ec:9a:eb:6e:8f:09:8f:b1:34:2c:a4:3a:e1:bd:6c:37:88:
16:3a:2a:13:aa:5e:43:ee:bc:a2:9d:6b:be:59:1d:20:5d:15:
d0:7c:77:fc:52:c7:56:e8:a4:2c:02:ed:ea:0a:9e:32:f6:0a:
21:4e:d7:cf:86:3a:a2:ab:02:0f:43:41:da:7c:8e:d2:a5:b9:
b0:81:98:55:61:95:79:c2:bd:cb:97:ab:d4:46:f9:1e:bc:94:
83:e9:25:4f:1e:d2:2a:84:d0:2f:b2:5d:d1:c8:ed:fa:b8:bc:
e4:2a:98:6a:5b:02:d2:83:ba:47:2f:49:89:0c:e1:b9:23:5b:
3b:09:13:af:19:01:6f:ad:c8:e4:04:fd:05:5a:47:ee:c4:18:
7b:a2:9c:ef:45:27:7e:1f:c7:1f:0d:a8:1d:36:c8:4b:8c:2a:
75:c8:70:36:03:41:c9:d1:8c:a8:62:d2:5d:44:4f:dc:12:ea:
90:a0:d9:19:39:fb:be:0b:94:c3:94:8d:07:3f:83:55:14:e7:
4b:e5:7e:f6:19:f8:70:b2:6c:94:92:99:b6:ac:40:9c:08:7e:
68:1a:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:41:52 2025 by rpki-client