Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json)
Hash identifier: +gFJ2LMG+MUA56FHAkYde+O/kQouQFCD+Af7wDenyoo=
Subject key identifier: 0A:1F:24:34:CD:70:C2:91:EF:7B:0E:8E:CC:26:07:E1:6C:D7:5D:2E
Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Certificate serial: 0194C507CFA18CD5D47CC4B68E54795A9596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 05:00:10 +0000
Manifest this update: Sun 02 Feb 2025 05:00:10 +0000
Manifest next update: Mon 03 Feb 2025 05:00:10 +0000
Files and hashes: 1: LfvParklu0gxciTOgFZh-BpaZYE.roa (hash: fxMbCosgtYcMMEyUONm7A6ez+akqjsDq1R4iKueGkms=)
2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: bh+C2RyVlDf90od0Apvn+m2l9m94dy7GuskM9jRr+KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:cf:a1:8c:d5:d4:7c:c4:b6:8e:54:79:5a:95:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Validity
Not Before: Feb 2 05:00:10 2025 GMT
Not After : Feb 3 05:00:10 2025 GMT
Subject: CN=0a1f2434cd70c291ef7b0e8ecc2607e16cd75d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:5d:c8:11:8b:d9:c8:72:f4:0b:ce:73:f9:
d9:ea:d5:a7:e1:f8:a2:60:b4:f0:f3:75:21:54:5b:
9b:5d:fb:e9:97:75:2d:47:f2:ce:54:75:cf:9a:ff:
b4:2d:3c:66:41:4a:c7:b8:a0:94:c1:c5:a4:1e:69:
bc:fb:f3:e3:13:95:d9:2e:4a:b3:ca:44:d3:c6:6d:
e5:1b:65:68:e3:aa:fb:75:47:ce:a0:59:26:41:4a:
64:34:2e:6e:33:bc:87:02:9c:75:11:99:e8:2d:73:
6d:eb:46:9a:76:74:01:d6:1e:3d:35:f4:9e:d4:93:
00:97:95:4f:46:40:0e:e1:2f:9c:74:46:6a:51:c3:
09:cd:bd:df:69:61:df:68:b2:09:75:cb:94:69:59:
c5:47:cd:a9:6b:fc:86:85:61:35:15:6c:25:2e:bd:
c0:21:7e:35:c5:9c:09:31:f1:9d:5d:29:b3:1d:48:
a8:fb:0e:4a:f9:7f:a3:5e:d4:c4:fe:d1:e2:9a:cb:
89:68:2e:7e:99:2f:07:f7:87:a9:81:dd:0c:28:f7:
7f:35:69:64:99:a8:ac:eb:a1:dc:bf:ce:32:f7:f1:
a8:b9:4a:77:43:17:65:12:2f:01:10:16:bf:ab:30:
57:85:eb:61:b2:50:06:6a:8d:e6:35:f9:ba:58:28:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1F:24:34:CD:70:C2:91:EF:7B:0E:8E:CC:26:07:E1:6C:D7:5D:2E
X509v3 Authority Key Identifier:
keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:49:f8:17:d1:79:d9:4d:d4:dc:94:47:5c:3b:bf:86:56:dd:
8d:e6:98:80:a0:43:bf:84:27:93:4d:63:1a:66:9f:01:aa:e6:
a8:c6:16:62:61:e4:cf:16:bf:40:10:9e:d4:5a:44:3d:15:7a:
2e:5e:95:5e:5d:23:4e:d7:35:75:eb:1a:38:87:97:d4:03:25:
3b:14:6a:22:51:1a:a4:9c:da:0f:e2:26:c0:03:ec:07:2d:72:
2f:07:db:e0:91:c3:1a:c6:dc:2c:64:52:de:4e:9b:d4:b3:f0:
eb:1f:be:4d:80:92:3e:15:50:b9:47:fb:bf:55:19:c4:bb:9f:
84:0a:28:e9:c1:4f:0a:62:8c:3e:9f:8f:95:02:4d:dc:e3:8d:
ed:9e:3c:8d:69:de:eb:c9:32:83:8c:28:b8:d3:9b:39:74:1a:
24:d9:ac:43:f3:c6:70:35:80:8e:93:21:32:d3:30:ee:4b:59:
8f:78:2b:42:e4:84:b8:f3:e3:46:1f:95:fe:79:29:32:9d:0d:
0d:79:fd:43:c3:8b:75:d1:bc:3b:c7:61:75:09:e5:bc:a7:42:
39:e5:45:71:a0:e7:7e:5e:dd:61:28:34:0a:b0:41:51:de:70:
fe:8b:d5:47:05:75:50:99:34:f8:7f:f4:7c:bc:63:4a:e0:5e:
53:be:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:45 2025 by rpki-client