Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: le75K5zvKdo08hORJWqlNOE7dLQTsrO+yvaROI0HokM=
Subject key identifier: 8E:75:EA:1D:B7:7B:E2:EE:01:8B:A3:21:7D:EB:9B:CC:E3:4C:DE:1F
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 0193535159EC21DA9AECF1CE001E846DC5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 05BD
Signing time: Fri 22 Nov 2024 10:01:00 +0000
Manifest this update: Fri 22 Nov 2024 10:01:00 +0000
Manifest next update: Sat 23 Nov 2024 10:01:00 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: oSKHrIrOxIbfDmNaZOGFaIWl9DWLn/FGOUcVPZhu1mg=)
2: jn-UtAWCTo-cubFZcSv3X-paMM8.roa (hash: 1a47sB5lihbWSK9/YMtuDow/nQsXKloGoLM/G7XVMQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:51:59:ec:21:da:9a:ec:f1:ce:00:1e:84:6d:c5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Nov 22 10:01:00 2024 GMT
Not After : Nov 23 10:01:00 2024 GMT
Subject: CN=8e75ea1db77be2ee018ba3217deb9bcce34cde1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e8:a9:3a:6c:e5:b7:b4:42:25:75:33:f3:87:
a0:01:51:56:57:f6:82:77:b3:c5:9f:aa:ad:8e:c1:
76:b0:e0:be:75:40:b8:75:20:17:74:e6:41:ff:8d:
2c:1a:fd:06:30:38:c3:4f:72:52:a5:9c:7c:3f:22:
61:9e:71:c1:45:ef:eb:17:ec:23:82:7e:76:37:58:
c4:63:5b:b6:2c:34:86:e9:06:d3:30:1c:e0:7e:63:
47:92:4e:e2:c5:56:ad:d7:a8:a6:4b:99:f0:d0:98:
7f:58:69:c2:92:f1:4b:14:dc:56:31:ea:50:64:b5:
43:88:f6:72:68:a9:df:31:21:e9:58:6e:f5:89:48:
9f:b3:a8:24:eb:d3:c9:90:fc:fa:6f:4c:65:1a:ed:
a7:2a:d5:db:9a:5d:c4:1b:1c:26:a2:06:d6:9a:1d:
99:e4:01:a0:24:56:a9:b9:fe:23:75:ce:23:8f:27:
25:ea:cc:e8:7a:00:de:f8:a4:e6:b6:2d:da:25:46:
cf:db:06:75:90:f3:e4:f3:e1:18:13:ef:ae:c1:98:
41:63:b4:a5:0d:69:74:1b:a6:7a:72:0f:db:2e:fa:
48:8d:45:e8:93:60:3b:35:af:a1:55:86:d4:42:f5:
40:f0:6b:06:a0:bf:ac:d5:bb:37:a7:6a:ba:66:61:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:75:EA:1D:B7:7B:E2:EE:01:8B:A3:21:7D:EB:9B:CC:E3:4C:DE:1F
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bd:29:0e:a1:d2:11:05:b4:3b:53:cc:23:bc:98:b2:98:cf:
31:90:a9:0a:56:04:b7:af:9f:fc:b1:dd:24:77:b4:12:a6:3a:
bf:a9:93:96:f6:c0:95:b8:f8:7e:1f:5f:ab:af:44:21:c9:1c:
99:7a:9e:1e:45:9f:0c:4b:d0:80:eb:bd:3f:2a:61:a4:74:28:
d1:98:42:b3:5a:1f:d1:39:c2:9b:5d:d8:e4:21:8e:2d:ba:bd:
9b:39:6f:ef:3a:b9:7e:cb:2a:0f:61:be:0a:09:25:61:c4:15:
66:bf:39:e3:3e:25:21:05:06:49:58:44:d8:6a:2d:00:0e:98:
e8:ca:7a:94:ad:98:7a:f2:18:d9:23:bb:79:25:3f:fe:2e:32:
77:3d:01:a3:c3:a2:79:5c:1d:32:53:48:e5:89:aa:b6:03:73:
21:93:85:61:e6:72:44:26:50:f8:8d:16:73:87:2a:03:01:6f:
f5:bb:84:23:24:ad:6f:d0:7b:a0:07:ac:41:e4:cd:72:06:34:
1d:1d:af:3c:b1:12:a5:b1:86:25:28:07:5c:b2:e4:11:ef:9f:
c3:e3:32:59:7e:d6:17:16:0c:15:79:ff:ba:84:72:f2:ed:cf:
30:60:28:2a:04:6f:4e:37:09:2f:da:49:ff:e8:ac:2d:73:5d:
19:4a:92:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:25:24 2024 by rpki-client on console-ams.rpki-client.org