Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: t+IBQZLp2BXlBRkowICt8fc9vbAvX30ryhCrw0x6s/Y=
Subject key identifier: 39:81:67:3B:4E:2A:A1:95:C9:FB:E5:E1:4E:A3:85:85:33:D6:92:E6
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 0195108FE6D4E073CD6397D3DE5DBC730357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 1352
Signing time: Sun 16 Feb 2025 21:00:20 +0000
Manifest this update: Sun 16 Feb 2025 21:00:20 +0000
Manifest next update: Mon 17 Feb 2025 21:00:20 +0000
Files and hashes: 1: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: 6jDkTpI3jY83qRzKGcVra59s4TXuYB/zBQplZjl+KLM=)
2: ev3ATXcLdak2upi-q5CN2dVa8sw.roa (hash: Pui9NepJvKzqfzXLpJKX8HaOdkpWn4dOU8GbtL7nT0M=)
3: jnu9mPgopzA31RWkYxNmWkz3kyg.roa (hash: cra9mYolkxUmIpM2wu5PjhAJgTEYoxZ+ixlWu91VIrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:e6:d4:e0:73:cd:63:97:d3:de:5d:bc:73:03:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Feb 16 21:00:20 2025 GMT
Not After : Feb 17 21:00:20 2025 GMT
Subject: CN=3981673b4e2aa195c9fbe5e14ea3858533d692e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:4e:2d:6e:39:00:29:18:8f:62:a1:01:96:
3b:38:17:7c:c0:d2:7e:1c:d1:39:44:72:f7:67:ec:
aa:c1:e4:41:b3:7f:f2:58:56:d4:77:fe:9c:2b:9d:
1a:fb:8f:ad:69:d5:64:23:81:20:04:07:f6:2b:d1:
36:b0:71:72:55:e5:33:3d:b3:bb:5f:60:4d:40:86:
b0:c7:a8:6f:96:c0:c3:d3:13:2b:40:7f:ac:a8:33:
2b:ad:26:5e:d5:c1:c9:1c:d3:71:1f:14:ed:9b:ae:
20:2a:3d:30:92:f7:a5:1a:1f:37:c0:c2:0c:2e:3e:
a0:01:18:7e:c7:82:c7:96:c2:53:d6:2d:fe:40:3b:
4a:54:8d:1f:dd:2c:56:af:85:bd:9e:e0:c8:7d:76:
18:98:97:e4:25:c3:8a:a7:23:b5:f2:c2:33:19:1c:
78:55:f2:c0:a9:3c:b7:40:09:07:d3:4a:34:82:49:
c1:4b:da:0b:59:82:47:b3:24:50:e5:6f:20:ec:f6:
8b:dc:e6:be:dd:d0:5d:47:01:55:cf:ed:6f:4e:f8:
66:00:a8:f6:11:19:d6:58:b0:39:b8:ec:ab:dd:9c:
18:e0:d2:6e:f7:f6:6d:b6:93:78:6e:40:b6:04:73:
c4:87:40:e1:1e:3e:f4:24:0c:26:67:91:89:86:d3:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:81:67:3B:4E:2A:A1:95:C9:FB:E5:E1:4E:A3:85:85:33:D6:92:E6
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3f:4c:62:26:55:f3:4b:d8:fd:35:c0:b6:ef:9b:8a:fc:8c:
0c:74:74:27:33:91:3a:93:e5:f8:9d:99:f5:05:bd:46:56:a4:
7c:85:84:b8:92:77:22:45:dc:69:bf:ab:aa:26:18:ec:ee:c1:
2a:66:0b:0e:39:8f:53:ab:b6:bf:96:e3:f2:9c:81:6f:f9:4a:
78:dd:db:1b:0d:f4:4a:26:59:b1:5a:28:14:3f:a4:1b:f7:89:
35:84:c3:0f:56:fc:7a:11:be:20:7e:65:d2:33:50:60:b0:af:
13:85:fe:b9:8e:95:60:76:56:8c:cd:bd:0d:0c:bd:c0:ef:a9:
0c:48:6c:d7:ed:39:f4:89:49:23:5a:73:97:8f:8e:58:6f:8f:
76:a1:cd:5f:bc:c6:09:5f:2e:36:42:14:6a:ab:63:d1:e0:95:
74:b2:f2:9a:1b:3d:77:82:79:43:3c:02:62:f3:57:bc:b7:2c:
10:b4:e4:f9:36:fc:7b:3d:0d:ae:af:12:22:c2:e5:e7:10:91:
e2:6c:0a:66:c9:de:d3:6c:90:d9:8c:73:6c:33:78:f9:e3:77:
ed:26:06:a0:78:04:3c:d8:c2:c5:92:78:e0:df:f1:92:7b:ad:
f5:b2:00:07:c0:70:f1:09:6f:f2:b5:db:1c:98:d7:bd:2f:03:
61:98:4d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:08 2025 by rpki-client