Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: bs26UD+qrCJHVGMKa/X6vp3s3YzhXMZU0CeGlLGDc6c=
Subject key identifier: 41:1D:75:61:B4:76:C0:B5:34:B6:47:80:39:9D:1B:63:CD:12:17:94
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 0195116C1F53ED0892A2436A8A5488874312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 031C
Signing time: Mon 17 Feb 2025 01:00:53 +0000
Manifest this update: Mon 17 Feb 2025 01:00:53 +0000
Manifest next update: Tue 18 Feb 2025 01:00:53 +0000
Files and hashes: 1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: wTcmjwefNNZrfuI3PO0b8o5Vf9XXrj33+RGXuk3Voz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:1f:53:ed:08:92:a2:43:6a:8a:54:88:87:43:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Feb 17 01:00:53 2025 GMT
Not After : Feb 18 01:00:53 2025 GMT
Subject: CN=411d7561b476c0b534b64780399d1b63cd121794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ca:58:c4:d4:54:85:b0:37:a1:e8:91:43:1e:
85:f2:9b:79:ae:9a:54:f1:7b:fb:7f:03:bd:f9:b2:
51:cb:cc:37:2b:3c:e8:b4:4d:c5:c2:8f:82:50:86:
f5:af:98:37:82:06:d9:33:27:82:fe:6e:20:b8:fc:
cb:5e:8d:78:03:5f:0d:ca:55:3d:c5:11:3d:67:fa:
c9:e7:86:43:f0:a7:77:03:ed:bc:06:54:48:7e:c2:
d6:91:d0:f7:5b:f3:df:82:37:b9:1b:78:e7:8a:79:
ca:3b:91:62:3e:c4:e3:3a:a0:2c:fb:64:a4:4f:2c:
e3:0d:32:ea:1b:81:48:b7:d9:43:4b:58:74:d4:73:
50:82:5f:4f:5b:54:38:7d:12:0c:bb:b7:f7:f7:92:
1b:87:ac:5e:3b:30:08:32:53:53:33:6e:2e:72:b0:
e1:58:f1:d3:86:58:fc:d3:15:a3:fb:f9:26:81:a7:
ac:0d:84:e5:44:a2:06:02:18:66:46:89:b4:bd:99:
4d:37:0e:78:b7:e4:a6:f7:26:de:0d:23:28:1d:89:
72:c5:4d:00:5c:13:bf:5c:51:65:d2:08:dc:d3:15:
63:41:97:ec:f2:d3:36:28:77:f1:3b:b8:b6:fc:0b:
ea:99:13:aa:36:b6:57:5a:4c:ec:1a:6b:a6:04:d9:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1D:75:61:B4:76:C0:B5:34:B6:47:80:39:9D:1B:63:CD:12:17:94
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c7:5d:22:a1:5c:34:b8:83:2d:f4:34:2a:e5:1c:e5:1e:16:
7d:79:5c:3b:5d:6f:3d:02:24:15:3d:c0:92:7c:d6:a7:56:40:
7c:26:81:45:4b:89:b5:a1:33:45:5b:58:4d:3b:a0:63:34:89:
c4:fc:23:47:e8:ed:f6:53:86:f4:b1:5c:94:02:21:17:5a:2a:
50:b8:94:22:db:f4:e3:00:b8:d4:75:3c:f5:92:5e:28:86:ce:
33:30:ef:1b:4d:7b:8d:eb:00:25:7c:27:ac:48:e9:83:1f:5c:
c9:b4:55:01:74:c0:7c:af:f6:7c:42:d1:59:e5:e8:dd:44:ce:
c7:40:68:8b:14:e5:59:d4:19:c7:c4:73:22:c4:4b:30:f9:71:
74:0c:0d:1e:c5:59:6a:6f:a3:26:5d:90:5a:b7:b0:0a:6a:c5:
e0:da:d7:c6:e5:5b:0b:29:f2:4c:bb:fc:26:ec:b8:d9:15:b0:
83:7e:e0:11:c0:a3:6c:cf:08:e6:22:f6:a4:ec:5a:73:24:e5:
18:28:9a:d2:d8:9d:17:55:b7:e6:31:c7:32:16:32:e0:4c:4d:
9f:c9:4e:8e:86:c8:bb:d9:ec:61:6c:60:ac:c6:59:2e:31:48:
c5:74:e0:54:d0:6b:25:60:b8:ef:90:1f:d8:43:ac:de:1e:97:
dd:85:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:15 2025 by rpki-client