Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: MtHP+yk6wvq8pF040NCqwIHZ2vzOFf1oXlcwWAeQiHw=
Subject key identifier: 67:DC:04:D0:95:B5:96:5A:69:58:3E:9B:B8:89:C0:D5:75:41:3F:A5
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 019511354631C69ECB28A618CE74FECCC9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 00:00:58 +0000
Manifest this update: Mon 17 Feb 2025 00:00:58 +0000
Manifest next update: Tue 18 Feb 2025 00:00:58 +0000
Files and hashes: 1: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (hash: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=)
2: HCoi5HM2CS9n54Michmh4KOI3ek.roa (hash: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: iPQUeJmiN3+i//y1/EZLc762SB/iiwJF3rtPLnjPPd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:46:31:c6:9e:cb:28:a6:18:ce:74:fe:cc:c9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Feb 17 00:00:58 2025 GMT
Not After : Feb 18 00:00:58 2025 GMT
Subject: CN=67dc04d095b5965a69583e9bb889c0d575413fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:ea:e7:a5:6e:d0:aa:f5:7d:6f:54:45:a2:
b4:a9:a9:2f:07:95:c4:0c:b3:6e:f2:81:ee:6f:5f:
ea:0c:23:45:20:b0:ea:5d:17:24:20:03:0c:45:39:
41:a9:c3:8c:c7:da:9b:5d:b4:b1:be:e6:8d:52:b3:
cb:6a:36:94:25:7d:b9:81:2f:91:13:be:59:52:99:
b8:91:2c:f5:5a:ca:94:86:04:e3:20:54:5a:92:10:
14:99:6f:90:34:aa:7a:fa:79:68:98:b5:fd:a5:21:
56:01:99:ab:03:af:12:9f:ab:99:e8:f5:09:46:20:
59:1f:7e:02:d4:3d:f2:7b:ce:c3:6a:9b:6c:04:66:
17:2d:35:0e:f2:8a:69:4f:86:96:ce:ed:82:91:07:
7a:31:d3:d3:85:5a:11:a9:96:95:94:e3:ca:41:60:
b3:04:c1:68:98:f7:22:29:a3:7a:eb:8c:27:18:31:
5c:82:07:85:16:49:95:b2:fe:35:65:84:70:c6:9e:
3c:e3:13:05:c0:39:1e:0d:e3:a3:b8:a3:4c:dd:10:
19:1c:e6:fc:2a:3d:84:0f:74:8c:25:9e:a8:0c:4e:
06:ce:e5:6d:50:43:6a:56:de:20:a7:25:aa:9f:cf:
e4:1f:ca:f2:b0:72:11:f9:7b:b2:a3:65:bf:56:e5:
1d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DC:04:D0:95:B5:96:5A:69:58:3E:9B:B8:89:C0:D5:75:41:3F:A5
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a7:de:74:41:ec:43:74:f0:e1:3a:9b:a1:60:9b:55:fb:ba:
87:8d:7f:9f:75:8a:57:29:28:a8:4b:13:dc:fb:e8:93:20:33:
b3:df:e6:3c:49:c1:c7:02:96:08:9b:67:d1:4c:cb:0f:f1:ed:
16:d1:25:a8:e2:0b:09:33:76:9a:bb:9c:e8:ea:7c:c9:c6:82:
23:0d:b0:7c:3b:c2:48:ea:d7:6f:ca:d5:f4:39:c3:54:89:1f:
b5:b8:fb:b9:93:08:e8:93:6e:dd:bd:76:47:b9:17:c6:b5:3d:
b4:8f:bc:60:e6:76:09:20:05:fc:d0:5a:1e:5f:8f:f4:fa:0d:
d7:2d:92:50:50:f8:39:b8:f8:fc:f6:3c:59:8f:72:7f:5a:07:
af:b0:0c:d1:0d:fb:bf:85:57:b6:29:1c:43:56:46:16:c3:93:
79:e2:3e:40:c7:b2:f2:ff:36:a5:26:2e:1a:56:63:30:0b:f8:
a5:c5:f7:f6:79:a4:f4:90:d9:df:95:07:31:68:96:48:56:65:
a1:66:93:07:e4:a4:f5:82:0d:43:fc:4e:7b:c1:ab:32:c8:bb:
58:66:35:e3:63:82:c6:f3:18:73:2c:a0:c6:6f:52:06:8d:6c:
9f:a4:15:eb:11:65:15:61:bc:f0:cb:db:9b:f2:93:ca:f3:3e:
76:49:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:44 2025 by rpki-client