Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json)
Hash identifier: DLPffJApqt9euLXajj9DxLMMKB590jI75s93Jg+YC9M=
Subject key identifier: 44:50:5B:6F:A6:28:8D:F8:E6:BA:72:7B:1E:9F:EC:47:CB:8A:1E:35
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial: 0194C388393AC79742DE8A3A45D0EAA9CAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
Manifest number: 8E
Signing time: Sat 01 Feb 2025 22:01:12 +0000
Manifest this update: Sat 01 Feb 2025 22:01:12 +0000
Manifest next update: Sun 02 Feb 2025 22:01:12 +0000
Files and hashes: 1: HaT6DXZ4LF2lc652Plm-kzzODow.roa (hash: VZ7qodJDKPgUVh1pa0yajPCZJZwGY0+Ucvcj6Tjkgzc=)
2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: GYqR6+FSZKdQcIgDDd6XMqIzx308TJ5scUHXnb3W6fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:39:3a:c7:97:42:de:8a:3a:45:d0:ea:a9:ca:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Validity
Not Before: Feb 1 22:01:12 2025 GMT
Not After : Feb 2 22:01:12 2025 GMT
Subject: CN=44505b6fa6288df8e6ba727b1e9fec47cb8a1e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:37:1e:c0:f1:cb:52:9c:94:39:6e:6c:84:
12:89:9e:a1:97:25:8c:1d:f1:1e:31:15:7a:e1:62:
8f:20:dd:f9:15:3b:59:19:cc:01:98:e0:2f:dd:f5:
d9:e1:18:37:09:0d:44:bb:d4:12:f4:fb:13:03:94:
de:3d:f6:e4:50:76:a2:87:da:04:6f:31:b7:42:8b:
3f:b0:82:63:0c:fe:22:e6:05:56:07:3d:5b:3d:61:
10:83:19:91:8c:8e:b1:ea:f2:d7:1e:9e:38:b7:ef:
0f:e3:15:46:b5:ea:c9:57:09:e1:e7:7f:98:f1:2d:
83:1a:fd:e5:5c:fe:d6:b2:d7:8d:b8:aa:f9:cc:94:
e9:77:90:29:85:50:b8:a9:ce:c3:19:3b:9f:ab:98:
6f:47:01:ce:cb:cb:27:c7:71:b8:82:db:30:8e:1a:
64:a8:69:c9:08:d1:5d:8c:e1:e3:ee:9c:50:6b:81:
de:3a:eb:56:fb:20:4a:6e:14:d0:c2:36:84:cb:8a:
ee:69:88:7e:2d:01:82:c1:1a:a5:5b:e9:5a:7a:29:
4e:2f:d0:64:86:86:09:f3:77:81:45:ab:f3:c0:3e:
0e:69:79:24:c4:42:c7:81:23:90:42:09:0f:6a:8c:
80:14:79:7e:46:9a:17:2b:17:a9:11:bd:4d:90:68:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:50:5B:6F:A6:28:8D:F8:E6:BA:72:7B:1E:9F:EC:47:CB:8A:1E:35
X509v3 Authority Key Identifier:
keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:27:4a:85:3d:cb:96:cc:04:70:83:e7:c2:c2:84:4f:57:c1:
67:b8:05:bc:b2:af:a0:e7:57:44:fa:46:4a:65:07:2a:1d:0a:
48:56:90:9d:33:21:23:1f:89:45:50:a7:75:5c:61:9c:9b:b6:
10:c2:a0:e2:b6:f9:90:59:ee:17:13:ea:55:96:97:1c:80:40:
3b:0d:0e:31:a5:c0:15:8f:5c:16:f8:97:a1:88:45:60:2a:f3:
a6:06:07:4f:b3:2d:37:4c:86:98:c5:2d:f3:31:c7:1f:a9:7d:
21:18:72:0b:8f:7e:05:8b:ab:9f:20:3f:d2:f0:52:23:d3:1d:
d1:b9:b3:98:fc:b6:5e:ee:fc:41:8a:f8:54:a7:35:5c:58:11:
08:d4:80:a6:51:39:c1:13:7b:e6:12:6f:5a:b2:2f:02:63:7d:
f6:73:08:c8:21:68:b5:49:5c:89:c2:80:ac:59:59:9c:fa:79:
46:04:3d:07:28:ff:bc:08:32:b3:b5:47:99:b6:4f:0e:74:00:
9e:8c:bb:6b:ed:72:3e:d3:7a:52:df:b0:2b:9e:f4:fc:f1:54:
cb:17:ca:ef:bd:81:21:09:00:46:9a:3e:20:45:21:96:28:04:
d4:82:ac:ac:b2:f9:d1:6c:94:bc:7e:a8:ed:67:61:e7:e5:a1:
bb:80:a9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:03 2025 by rpki-client