Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft
File: PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft (raw, json)
Hash identifier: /27cv/eJOrZZ000pDQJo/WpJEOLXPoAhjFMq/GI3QFo=
Subject key identifier: B8:20:90:C9:2B:F9:FB:C8:10:AA:11:D1:C0:6B:98:45:B4:D6:9C:4D
Authority key identifier: 3D:56:3E:20:5A:D2:17:43:37:09:B2:00:A0:DC:D3:0C:70:96:1C:96
Certificate issuer: /CN=3d563e205ad217433709b200a0dcd30c70961c96
Certificate serial: 0195109022AA9855A32188AEBA0EE5CAF7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PVY-IFrSF0M3CbIAoNzTDHCWHJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 21:00:36 +0000
Manifest this update: Sun 16 Feb 2025 21:00:36 +0000
Manifest next update: Mon 17 Feb 2025 21:00:36 +0000
Files and hashes: 1: K0VVkly9aNi0yGL2uwtJHWinFa0.roa (hash: gUjyIMB+jt8lh1mExnA7oGVCKt6v3R2m9uw5LrUvVCY=)
2: PVY-IFrSF0M3CbIAoNzTDHCWHJY.crl (hash: mbwhF4svq/oU99orTxrgUu//4bT4Ou10YFgu/1UM/CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PVY-IFrSF0M3CbIAoNzTDHCWHJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:22:aa:98:55:a3:21:88:ae:ba:0e:e5:ca:f7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d563e205ad217433709b200a0dcd30c70961c96
Validity
Not Before: Feb 16 21:00:36 2025 GMT
Not After : Feb 17 21:00:36 2025 GMT
Subject: CN=b82090c92bf9fbc810aa11d1c06b9845b4d69c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:95:6e:06:37:eb:4b:70:a3:c3:0a:1d:8a:
96:ab:d8:7f:5a:7c:08:b4:5a:0c:86:3f:2b:19:f0:
5b:08:a0:21:5a:9b:e4:3c:6e:d7:21:e9:2b:53:9e:
82:27:19:1d:97:d8:9c:39:0e:13:f3:27:1c:ed:a8:
e0:b3:1e:b9:1c:84:1d:f6:7a:f3:29:bb:0b:c7:5d:
2e:a0:ee:ed:32:34:5a:42:f6:78:58:50:a0:a9:53:
8e:13:42:e0:4a:29:f1:10:c4:12:81:39:9c:38:11:
59:64:0c:cf:73:22:27:8a:9d:bf:e4:21:e6:5b:64:
ce:f5:cc:63:f7:92:1b:10:c3:37:60:d7:c1:04:fd:
6e:02:f0:88:62:23:8d:32:eb:ee:bc:97:59:e9:a1:
1b:1c:11:a1:27:62:c3:62:8d:ef:68:0b:13:09:d5:
80:23:5a:20:94:0b:25:06:5d:08:70:f4:17:8a:14:
c3:49:a1:98:c9:07:24:01:8e:3f:15:11:4f:85:e7:
26:23:52:b0:84:2c:d3:7c:59:43:dc:30:ee:1e:e5:
d1:56:68:00:b8:39:0d:9e:61:96:53:bc:db:f4:c0:
f5:79:6d:86:09:7c:12:72:f7:48:96:d5:93:72:6f:
80:27:f2:71:2b:73:bb:3e:05:7f:01:60:c9:a6:ea:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:20:90:C9:2B:F9:FB:C8:10:AA:11:D1:C0:6B:98:45:B4:D6:9C:4D
X509v3 Authority Key Identifier:
keyid:3D:56:3E:20:5A:D2:17:43:37:09:B2:00:A0:DC:D3:0C:70:96:1C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVY-IFrSF0M3CbIAoNzTDHCWHJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1d:37:fc:24:9f:21:a5:83:98:29:80:d4:cd:7d:f6:05:da:
62:7d:c6:48:a5:ed:1e:b6:17:6e:9a:75:8f:af:8d:13:4d:e5:
42:ee:65:a0:e9:28:22:8a:e9:1a:54:f7:2c:83:b1:d4:ee:9c:
7a:85:76:60:9f:86:58:5d:c8:5a:fe:a7:84:2a:dc:b7:d6:43:
81:ea:93:7c:41:a8:9b:e0:21:17:56:be:8b:82:c2:7d:cb:08:
d7:07:bb:fa:1a:11:8d:c3:61:7a:8d:18:9d:e4:f8:93:8c:89:
30:4b:9f:39:9f:88:b5:23:1a:12:d0:22:53:86:b4:f5:97:bd:
63:c1:2e:de:ed:e4:95:26:f1:27:97:10:13:b2:3f:4a:94:29:
36:98:ff:d5:d8:a8:05:8e:4d:9d:c4:ef:9c:eb:1d:0b:26:67:
f6:91:57:19:a9:b2:4a:1c:45:1c:47:4e:c5:67:75:96:90:c8:
8c:30:4a:82:22:50:7f:eb:93:85:4f:11:dc:9c:62:69:61:c3:
b9:bb:41:4b:f4:2d:f0:04:f4:08:aa:d7:27:d3:4a:e6:da:e7:
f1:5f:19:f4:3b:d3:9a:ab:e8:08:86:de:ad:8f:cd:a0:1b:2c:
4f:90:3b:c3:0d:5c:fc:9f:94:75:32:e4:ab:9a:54:89:a9:60:
6a:b0:ed:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:44 2025 by rpki-client