Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: 2TLLUSPCmQTlVwkU6dyVT28VgWJSeSK0Tdu/jSmf814=
Subject key identifier: E5:00:FD:44:A7:59:FB:3B:A5:52:CA:1D:C6:7E:FE:82:8D:60:E5:F4
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 01951134BF3828143D7387410E379813BC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 060C
Signing time: Mon 17 Feb 2025 00:00:24 +0000
Manifest this update: Mon 17 Feb 2025 00:00:24 +0000
Manifest next update: Tue 18 Feb 2025 00:00:24 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: wvIpth1EMR42QjvIG3szVCF0brVRZ+l6DUIF93ElrgQ=)
2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:bf:38:28:14:3d:73:87:41:0e:37:98:13:bc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Feb 17 00:00:24 2025 GMT
Not After : Feb 18 00:00:24 2025 GMT
Subject: CN=e500fd44a759fb3ba552ca1dc67efe828d60e5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:b4:2b:2f:2e:fa:c4:95:43:cc:d0:7f:e0:
3e:ec:aa:b1:30:1e:3d:ba:8c:97:40:c0:f2:e2:b6:
fe:7d:22:d3:a4:3e:3a:39:b0:46:7c:eb:6f:af:ab:
cc:f9:4e:94:a7:76:95:c5:a7:fd:38:6c:c1:e9:85:
4f:2b:27:38:46:15:d8:61:e6:35:d4:50:c9:4e:49:
d9:5d:95:50:fc:b0:70:a1:b6:9a:d9:55:88:61:4b:
eb:fa:f3:ac:39:43:6e:fe:92:e0:32:e8:f9:de:a2:
b9:fe:5a:05:8f:3b:6a:13:80:30:27:b7:80:76:e3:
b3:40:4f:56:79:10:44:fe:28:1a:46:65:2e:84:68:
09:18:af:8a:55:e8:f3:38:b4:bd:a9:46:f3:c3:39:
92:39:0d:62:d8:22:dd:b3:91:97:c1:84:2f:09:f8:
c5:e2:0c:7c:68:1a:2c:11:df:2e:b7:25:a3:f1:9c:
ae:f2:56:3b:60:48:05:44:b3:96:c9:ff:21:bc:a6:
52:d6:8c:51:8c:71:cc:16:c7:e2:44:70:b6:25:10:
8d:39:8a:7f:59:74:91:ad:1b:9b:c0:9b:97:e5:c1:
d8:4d:bd:75:ec:1a:0a:d8:18:23:fe:68:66:53:31:
88:21:72:26:95:32:e4:86:32:45:1d:8a:0c:37:be:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:00:FD:44:A7:59:FB:3B:A5:52:CA:1D:C6:7E:FE:82:8D:60:E5:F4
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8e:93:c5:15:d5:79:96:8e:98:3f:c2:71:09:a4:40:53:83:
40:a2:6e:7c:87:f4:59:d8:e4:a0:28:c4:22:b4:38:b7:ed:f4:
97:8f:f5:89:7b:9b:51:9c:18:f2:68:79:71:9c:3f:06:c0:56:
fa:c9:35:5f:47:06:50:de:a1:6b:fc:88:f6:c1:49:af:8d:fc:
6d:d8:2d:32:f3:b5:1b:9e:51:3d:da:fc:ad:c6:f4:a8:c9:59:
58:01:c1:92:d6:a2:8e:b4:aa:82:79:be:62:34:0c:26:29:10:
99:1d:a8:2a:0e:6b:f7:fc:f6:0a:cf:aa:1e:6e:20:dc:a5:1c:
43:e3:5b:99:94:56:ab:0b:a1:a6:05:b5:87:60:12:ac:c9:9c:
b1:24:ff:ca:1f:81:02:32:0b:e1:a1:15:d5:5c:39:4d:18:b1:
00:39:7a:b3:4d:b6:f6:ce:0e:82:59:41:c8:b0:0d:04:99:19:
22:22:ad:ee:76:89:5d:2a:5e:50:94:a0:e5:28:92:44:8f:d8:
79:a0:dd:2f:f7:4b:66:cf:76:98:2d:14:85:bd:34:70:f6:ab:
cf:4c:a7:e1:45:dc:c7:3a:9b:15:7f:08:66:b1:c6:dd:f6:1f:
1a:a4:88:71:9a:15:00:1b:0e:0a:43:6f:9c:8b:6b:85:dd:18:
9e:f3:1d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:27 2025 by rpki-client