Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File: PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier: vvKBt/VVzeWbfLfjCy0BbTVVmDuitw9Qqo+Jms0qDUE=
Subject key identifier: 93:D4:C2:BE:53:39:86:08:8C:BF:DA:B9:98:0E:16:7B:5C:6F:EB:DD
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial: 0195124797B3A4F4209638A4D1F1566AF743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 05:00:36 +0000
Manifest this update: Mon 17 Feb 2025 05:00:36 +0000
Manifest next update: Tue 18 Feb 2025 05:00:36 +0000
Files and hashes: 1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: zmkX3ihr7yJuukbsWBEYGTKgZYrUn8wy6BRHFOkS9Rs=)
2: tJh122419FX7oJQGYtZtkXOvqn0.roa (hash: 80WcSAxcwtJA+++UZrQ3DpOoXBp5rklUr6m+pRMbNZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:97:b3:a4:f4:20:96:38:a4:d1:f1:56:6a:f7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
Validity
Not Before: Feb 17 05:00:36 2025 GMT
Not After : Feb 18 05:00:36 2025 GMT
Subject: CN=93d4c2be533986088cbfdab9980e167b5c6febdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:70:22:e2:2f:97:f8:6b:ba:83:0d:d0:cb:
13:90:ba:69:c5:9a:55:df:1a:fd:92:19:e7:f8:45:
c0:a1:5a:d0:61:49:b7:c8:b4:cb:4a:04:5c:75:f7:
8f:76:d4:d4:b3:ae:94:4f:f3:5f:49:4c:1b:73:0f:
b3:11:0e:cb:73:46:d6:5d:e1:44:0f:50:41:2f:b6:
3e:9a:cb:3c:28:82:16:96:df:4a:71:72:04:ef:76:
2f:03:43:0b:c0:b6:1b:c0:19:01:9e:d1:4c:a0:c3:
96:99:d3:1d:0b:7a:25:58:84:f6:d0:1f:21:a2:4e:
95:ea:6d:93:b2:71:6e:f1:50:ce:6e:25:36:c1:79:
9c:ad:72:7f:5a:6b:74:c6:c7:fb:6e:1c:ca:7e:53:
4e:bb:85:74:b1:00:69:9f:54:6b:59:0a:e4:4f:4b:
6d:18:93:f1:72:37:40:64:38:2f:ca:0d:50:6d:49:
09:85:a3:96:3f:39:bc:91:fa:0f:5d:18:9a:1e:b4:
e6:c6:29:8b:5c:61:5e:ae:fe:d0:36:81:92:f1:bf:
a5:7d:a4:1f:30:2b:73:62:88:0d:e0:3a:5d:01:b8:
1b:1a:ef:d7:88:20:a3:84:b6:7d:18:47:e3:41:8b:
40:65:50:c1:3c:14:17:66:0c:08:e2:ac:90:ea:88:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D4:C2:BE:53:39:86:08:8C:BF:DA:B9:98:0E:16:7B:5C:6F:EB:DD
X509v3 Authority Key Identifier:
keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:31:a6:30:6c:49:8b:85:b5:b1:0a:7b:18:4c:30:d3:df:cc:
7c:c0:c4:d1:16:5c:ee:25:e7:cb:31:ee:72:7d:71:45:96:69:
d4:ee:ec:b6:1f:08:0c:55:38:23:7a:23:3e:1d:52:5d:02:7c:
1e:b1:fe:4b:3a:75:72:b1:08:5a:3a:47:e9:1a:85:2c:ba:72:
32:73:b0:85:fa:95:91:2d:6e:d7:1f:0a:96:22:ad:36:7a:38:
1f:35:41:a8:b2:50:1d:03:8f:c1:ce:b2:77:3e:42:ea:2a:f9:
c7:54:ce:71:e1:67:57:ef:21:9e:d8:3e:b3:b5:50:d7:a1:cd:
ed:8f:4f:45:40:d5:7c:4c:65:ec:37:e3:19:1a:d3:bc:70:94:
c2:a5:29:3e:83:5f:1f:d3:54:16:1b:6d:3f:12:eb:e0:0f:ec:
af:12:74:c1:20:1f:27:4b:0f:c9:ad:08:3d:7c:dd:70:7e:72:
e2:39:06:be:e2:36:44:55:9d:43:eb:1f:42:06:4b:62:85:1a:
6f:08:04:4d:f5:90:bf:50:a8:fe:ce:75:27:fe:90:13:4f:ce:
a8:44:99:be:b2:7d:82:d5:fb:b9:83:f8:fb:a6:e0:f0:8b:bd:
61:62:8f:ee:14:7c:e4:84:11:fe:a1:5a:31:62:64:00:9e:6c:
7a:86:2d:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSR5ezpPQgljik0fFWavdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjY2E4NDliMzc1MDE1ZjQzM2U5YTI0MGVjYWJmMDNjZjE1
MmM3ODEwHhcNMjUwMjE3MDUwMDM2WhcNMjUwMjE4MDUwMDM2WjAzMTEwLwYDVQQD
Eyg5M2Q0YzJiZTUzMzk4NjA4OGNiZmRhYjk5ODBlMTY3YjVjNmZlYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO1wIuIvl/hruoMN0MsTkLppxZpV
3xr9khnn+EXAoVrQYUm3yLTLSgRcdfePdtTUs66UT/NfSUwbcw+zEQ7Lc0bWXeFE
D1BBL7Y+mss8KIIWlt9KcXIE73YvA0MLwLYbwBkBntFMoMOWmdMdC3olWIT20B8h
ok6V6m2TsnFu8VDObiU2wXmcrXJ/Wmt0xsf7bhzKflNOu4V0sQBpn1RrWQrkT0tt
GJPxcjdAZDgvyg1QbUkJhaOWPzm8kfoPXRiaHrTmximLXGFerv7QNoGS8b+lfaQf
MCtzYogN4DpdAbgbGu/XiCCjhLZ9GEfjQYtAZVDBPBQXZgwI4qyQ6oiKtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPUwr5TOYYIjL/auZgOFntcb+vdMB8GA1UdIwQY
MBaAFDzKhJs3UBX0M+miQOyr8DzxUseBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yNzU2MzYtZmUzZi00NTI4LWJkN2Ut
ZDYyNTVmMjUyN2RhLzEvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yNzU2MzYtZmUzZi00NTI4LWJkN2UtZDYyNTVmMjUyN2Rh
LzEvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDGmMGxJ
i4W1sQp7GEww09/MfMDE0RZc7iXnyzHucn1xRZZp1O7sth8IDFU4I3ojPh1SXQJ8
HrH+Szp1crEIWjpH6RqFLLpyMnOwhfqVkS1u1x8KliKtNno4HzVBqLJQHQOPwc6y
dz5C6ir5x1TOceFnV+8hntg+s7VQ16HN7Y9PRUDVfExl7DfjGRrTvHCUwqUpPoNf
H9NUFhttPxLr4A/srxJ0wSAfJ0sPya0IPXzdcH5y4jkGvuI2RFWdQ+sfQgZLYoUa
bwgETfWQv1Co/s51J/6QE0/OqESZvrJ9gtX7uYP4+6bg8Iu9YWKP7hR85IQR/qFa
MWJkAJ5seoYt0w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:01 2025 by rpki-client