Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: EqANIUgVHfpt4LXJyPw4ySZUtZK7vLh5KKHUWOH35xE=
Subject key identifier: 55:8E:FF:8D:4D:38:CE:34:6C:76:1F:A8:3E:85:F7:9E:C8:F2:6A:94
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 0194C507F4100EF3E964959DA58AA43A430A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 19
Signing time: Sun 02 Feb 2025 05:00:20 +0000
Manifest this update: Sun 02 Feb 2025 05:00:20 +0000
Manifest next update: Mon 03 Feb 2025 05:00:20 +0000
Files and hashes: 1: cbfaYBjluJFGRHIZotfNKfL5QOM.roa (hash: hnnwP5hTMZNnGccOJwmbq229la5aF88t7OiSZXiU/mU=)
2: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: /YFik1ggKUbbJ8tIAJLB2WpBboJq36xvDQoR/oXXxdc=)
3: zwNxRZCXOiLKuZa_7Wmh9NcuOqQ.roa (hash: 6xxBkLaHc1up/veCbZl0eXM5uTf3B1SDA3dM0Oft33U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:f4:10:0e:f3:e9:64:95:9d:a5:8a:a4:3a:43:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: Feb 2 05:00:20 2025 GMT
Not After : Feb 3 05:00:20 2025 GMT
Subject: CN=558eff8d4d38ce346c761fa83e85f79ec8f26a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:d7:ff:59:c8:44:aa:06:c7:57:23:91:45:
04:26:3a:c3:8f:15:ea:9e:6e:45:65:e7:1d:5f:8f:
ed:80:e4:4c:3d:d3:04:fa:ce:d1:ab:49:45:b1:3a:
4d:9b:ac:dd:6f:66:a9:63:9e:8e:33:0d:8f:57:81:
03:63:fc:d1:99:5d:db:f9:33:9a:19:5b:7e:a2:47:
20:c1:e4:35:42:49:7e:74:61:a6:55:ef:14:d7:51:
ed:95:35:6b:c5:63:f7:ef:cd:1d:5f:24:88:fb:0e:
02:a7:c1:ba:97:99:02:1e:54:71:b6:75:88:c4:bf:
1e:39:63:6a:02:ad:03:99:92:ce:2e:79:05:34:bc:
19:eb:dc:c6:c1:b3:b8:74:3c:32:4f:73:12:0a:6d:
bf:df:b4:8a:03:7d:1f:60:f8:fc:ec:8d:dd:29:67:
60:9d:68:87:c7:ee:aa:9d:df:a4:60:7d:e7:1c:51:
1b:15:25:b6:b7:33:c4:32:bb:da:54:21:2f:6f:c9:
4e:27:46:71:71:2e:7d:52:19:09:ef:f4:1b:e6:22:
4c:9e:f8:15:06:f9:a1:92:06:5a:b2:7f:76:ad:62:
44:09:8e:23:19:b3:72:1a:e6:5c:de:43:c5:83:be:
bd:49:0c:c0:d1:8d:a4:7a:6d:2e:8f:79:ef:fb:7d:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8E:FF:8D:4D:38:CE:34:6C:76:1F:A8:3E:85:F7:9E:C8:F2:6A:94
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:91:21:0b:f6:fb:90:30:ba:c7:04:a6:96:a9:91:f9:44:5e:
85:0d:40:0a:18:54:07:0f:bc:b7:70:79:84:52:51:91:50:37:
60:bf:db:0b:5d:64:60:3c:1e:6d:ab:1b:ca:85:f6:f3:79:25:
40:45:c6:3b:d6:9c:58:59:28:9b:37:9e:8a:1a:bb:14:83:63:
69:6f:91:74:16:f5:6e:3d:40:a9:aa:89:1a:12:fa:79:17:41:
5b:3a:98:30:ca:40:a4:d8:1f:bf:25:de:7e:81:cf:b9:de:bf:
ef:0c:e6:23:78:64:63:1b:80:27:d3:05:d0:46:3e:b4:5c:a8:
7f:e0:36:cb:19:52:8f:53:33:ff:ea:e7:ad:1d:f3:97:74:27:
8b:8c:f0:e9:b0:00:61:82:7d:b6:21:15:9f:1d:6e:3b:68:c0:
5a:9a:f8:e9:da:4c:e5:6d:b6:a3:2a:88:ca:c7:68:a6:a2:4e:
75:c0:57:73:1b:ed:e7:70:0e:3c:80:2b:d3:e5:5f:db:90:ed:
65:59:45:d0:2f:fb:34:a0:61:3b:d2:ea:51:c5:32:bb:b0:d2:
e7:7a:c1:c1:6c:86:5e:7c:2e:2a:78:76:f2:25:fb:68:20:39:
0a:36:db:4d:5d:bf:69:68:54:ca:73:e2:5b:41:ee:d0:e3:a6:
29:ff:4e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:53 2025 by rpki-client