Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
File: PNVhnbjXcXN5lW1Op1t22ybRwck.mft (raw, json)
Hash identifier: kSiPxB583iMnujvxwk25GOObKHd9+YhmRvDyIyvJmrs=
Subject key identifier: 1D:A1:79:5B:26:A1:59:C3:61:CF:53:FE:2A:A3:70:61:FA:FE:12:0D
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial: 0195116C1273FA64558562308D829612BA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 01:00:50 +0000
Manifest this update: Mon 17 Feb 2025 01:00:50 +0000
Manifest next update: Tue 18 Feb 2025 01:00:50 +0000
Files and hashes: 1: 4prfTAA9HBYIWFQscXuDZvPOJfU.roa (hash: zMicpYmGFLFzW1lGiXS7QLLBWvT2YuAYQEgxuNA/2gA=)
2: PNVhnbjXcXN5lW1Op1t22ybRwck.crl (hash: Tz+2Wfr8D4lvcvC0ey4+8ur44/juBrgBdCG2kbX9dcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:12:73:fa:64:55:85:62:30:8d:82:96:12:ba:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Validity
Not Before: Feb 17 01:00:50 2025 GMT
Not After : Feb 18 01:00:50 2025 GMT
Subject: CN=1da1795b26a159c361cf53fe2aa37061fafe120d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:d9:e8:1a:51:da:88:d4:21:48:60:d1:b2:
47:a3:49:f0:87:33:e7:6e:d2:87:db:ce:9c:f2:fd:
93:7d:46:f0:fd:08:d2:f7:2d:dc:fb:73:76:d8:1f:
64:fb:5a:21:58:d6:ba:67:4c:15:ab:d1:44:d9:56:
46:e4:27:0a:ca:df:96:c6:0f:99:0c:72:0c:f0:89:
98:14:f4:8f:26:fc:84:5f:02:cf:69:97:0b:c1:c5:
36:b9:0f:c9:15:3c:8c:21:05:95:01:f9:41:d7:99:
9b:96:0b:90:3a:0e:fe:b8:66:5e:2e:0e:42:60:d5:
91:ed:94:4f:3a:0a:22:f1:fa:5a:47:c8:cc:41:2e:
d4:fa:f1:53:60:75:b7:4a:e6:af:6e:13:61:02:03:
09:4a:e8:82:2a:47:4d:1a:66:e2:ab:22:55:7e:fe:
e5:2e:17:47:5e:a4:3e:64:6b:4e:1b:b2:d4:9b:f4:
cc:1e:fc:64:e1:bd:19:44:32:0f:f6:3b:24:ac:16:
b8:b0:66:2d:ad:31:5f:c5:e3:18:04:db:15:8b:4c:
97:ce:8d:22:cf:ea:d3:86:74:19:cc:eb:a4:a0:1d:
42:dd:53:2d:d9:74:eb:b1:e6:f3:57:ed:4d:93:24:
ef:4c:09:d0:85:3e:85:54:99:dc:fd:9e:89:22:63:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A1:79:5B:26:A1:59:C3:61:CF:53:FE:2A:A3:70:61:FA:FE:12:0D
X509v3 Authority Key Identifier:
keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:00:ee:96:2f:ec:c4:b9:b4:03:58:e5:85:4b:0f:b4:08:0c:
de:41:75:1b:85:a0:b0:51:36:da:bf:cd:62:81:4f:f9:04:6a:
5d:10:d1:43:cf:06:fe:9c:77:01:7f:13:b7:c8:94:db:9c:1f:
17:e7:11:6a:f3:8e:b0:c6:c4:d0:89:83:b9:39:ea:f7:3e:07:
b4:06:89:ca:71:ee:ea:b8:2e:aa:cd:73:5c:b6:0b:93:5d:1f:
a2:78:e1:93:15:c7:9f:55:90:3e:8b:9f:c4:4e:fe:56:c8:34:
c7:a0:81:84:f0:4c:d8:c3:d3:c0:cc:fe:9e:3b:07:b0:79:d9:
a2:bf:59:b8:95:1b:c9:ab:7f:5e:7c:37:66:d0:59:fe:a2:ef:
e1:a3:25:94:f6:60:bc:e7:c4:e3:ac:a2:ca:75:2c:74:13:68:
33:76:39:48:90:2d:5b:7c:6e:ad:ac:75:8b:90:02:b5:04:6f:
ce:ac:c9:06:2d:8d:dd:1d:6b:3f:4b:e2:de:bb:53:6e:bc:84:
d5:c1:99:2f:7c:4d:65:73:76:a3:af:4a:3e:1b:e0:44:fc:34:
b9:ae:c9:6c:98:c6:b0:a0:af:99:fe:4d:ea:da:2b:d5:2f:26:
f6:31:75:93:cd:32:27:5f:fb:c0:66:c2:53:be:68:31:0b:b5:
0c:63:eb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:53 2025 by rpki-client