Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
File: pcEGAjxJWQSwQKy5l49Po7DF4tw.mft (raw, json)
Hash identifier: JQ8bVoKeCl++rUrc2tlD/Kqj7Af3ggKb4y5IQYrpPCU=
Subject key identifier: B9:C4:1D:73:DA:EF:B4:1D:37:FE:26:78:EF:56:F3:D7:D0:12:59:AB
Authority key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
Certificate issuer: /CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Certificate serial: 0194C387D56205BA1BBC0A8549B7DA2CC01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
Manifest number: 025C
Signing time: Sat 01 Feb 2025 22:00:46 +0000
Manifest this update: Sat 01 Feb 2025 22:00:46 +0000
Manifest next update: Sun 02 Feb 2025 22:00:46 +0000
Files and hashes: 1: pcEGAjxJWQSwQKy5l49Po7DF4tw.crl (hash: 0PgwYbfZdmgNzt9BbOnVTVLlU+ocpxquLfx08yHT7fo=)
2: yTZlHlMAE_3YBA7oQmF4fIZqHOM.roa (hash: lfCvg73z+0fvdagtNm9IPM2kVoIfwTGx2gcIBEuq7Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:d5:62:05:ba:1b:bc:0a:85:49:b7:da:2c:c0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Validity
Not Before: Feb 1 22:00:46 2025 GMT
Not After : Feb 2 22:00:46 2025 GMT
Subject: CN=b9c41d73daefb41d37fe2678ef56f3d7d01259ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:47:ce:01:fb:25:c3:e7:19:48:3d:3e:01:
d7:70:cf:3c:68:4f:82:a8:3a:63:41:12:7e:2e:5d:
59:2f:12:01:f3:b9:e7:39:e8:ea:26:96:dc:fa:48:
51:b6:d3:58:91:aa:17:9d:4e:f4:08:19:2f:e4:78:
ea:8e:85:62:dc:fc:83:bb:b5:ce:d6:6b:50:13:39:
a1:63:40:cb:5c:81:17:bd:c1:70:6f:b5:e7:5e:a8:
cc:dd:ea:64:26:a2:b5:74:ce:a3:84:87:68:43:16:
03:c8:5a:d0:d0:cd:d8:61:85:bf:7d:0c:da:31:ab:
32:5e:0a:6b:6c:c0:21:85:0c:2c:f2:7c:a9:76:74:
a4:e2:1e:ed:6b:14:1e:93:0a:4a:a0:58:f8:e7:34:
c8:ab:04:19:79:5c:1a:cf:43:1c:74:1e:dc:09:cc:
3a:61:b6:44:0f:fe:67:13:f4:09:32:b7:be:af:ea:
4c:d1:5f:82:b5:30:2c:e9:bb:da:f2:45:bd:17:fa:
37:d4:b6:94:33:7d:82:b7:d3:7c:50:68:d4:a3:4f:
ff:9f:9b:78:a3:fd:11:54:20:c8:3f:b7:51:e0:a5:
67:91:01:2b:1b:0d:f1:53:1c:0f:c2:6f:73:4b:c6:
30:7a:18:74:42:14:f4:8b:a5:18:14:5b:f2:ed:a2:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C4:1D:73:DA:EF:B4:1D:37:FE:26:78:EF:56:F3:D7:D0:12:59:AB
X509v3 Authority Key Identifier:
keyid:A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ba:ef:b1:5d:ed:98:4e:cd:e8:13:05:c6:92:0d:b4:b9:12:
19:7c:cb:b8:cc:48:9e:e8:ef:d9:a1:5c:63:d5:57:70:19:f2:
4e:40:4f:24:0c:a7:0f:2c:ae:83:7e:d0:1a:65:dc:eb:9d:b4:
77:b5:3a:df:0c:d3:8d:af:ab:b4:6f:a3:44:b7:79:20:d1:86:
74:26:4b:1c:68:23:2a:74:6a:cc:87:73:37:84:88:7f:36:59:
b4:e9:8a:aa:21:ff:9a:d4:2f:4b:1c:80:d1:93:67:b3:1c:09:
a4:cd:f8:c6:42:d9:7d:63:48:70:27:7f:ac:a6:c5:08:58:e0:
5f:4e:37:8f:2a:4c:71:af:12:c2:7c:05:87:07:b0:f5:c9:2c:
fd:39:b8:11:15:33:d2:4f:1b:f7:16:01:85:1d:78:59:0b:f4:
90:81:a1:96:17:15:b9:56:c9:26:13:9c:30:63:70:62:a3:3b:
74:40:bd:99:b2:f2:33:6c:55:f3:35:7a:ce:b2:23:b1:03:f9:
6c:77:4a:68:26:b7:17:99:df:e8:13:81:e8:bd:4e:fb:96:c8:
0d:73:72:8f:74:28:b0:ee:48:23:11:f7:26:ed:17:2f:68:a0:
cd:ff:09:b3:cc:19:71:a5:0c:db:ab:cd:77:ff:83:af:5d:9c:
81:07:aa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:00 2025 by rpki-client