Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json)
Hash identifier: 0gasdUDV0rHxD15C+C3rZXADf8qhpHOm0YCgEKxeaes=
Subject key identifier: 09:02:34:EB:08:03:91:89:B0:8E:10:C0:23:CF:13:8A:B7:79:E5:F1
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 019511D938309C4BD0CE78F1CF0E1A041F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
Manifest number: 0233
Signing time: Mon 17 Feb 2025 03:00:03 +0000
Manifest this update: Mon 17 Feb 2025 03:00:03 +0000
Manifest next update: Tue 18 Feb 2025 03:00:03 +0000
Files and hashes: 1: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: E1yu+zZaIf1FuLJVHH/cA+GKocttnsiyru9seaLqPYg=)
2: dA9mnK7u8SrMJvStuVXROxjQcrs.roa (hash: JKT3V8fX4yHMnqh46H6Ra4xfMdM8EBf4akbaDFvA95s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:38:30:9c:4b:d0:ce:78:f1:cf:0e:1a:04:1f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: Feb 17 03:00:03 2025 GMT
Not After : Feb 18 03:00:03 2025 GMT
Subject: CN=090234eb08039189b08e10c023cf138ab779e5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:6b:6a:e4:a4:d9:31:e0:85:e4:fb:b7:d1:
14:83:45:a8:e1:26:63:68:33:e1:8f:a9:4a:54:34:
5f:2e:43:7e:8e:ac:ef:8e:11:e9:c3:81:0b:c3:70:
2e:3e:14:f9:72:f6:88:c1:e6:a8:ab:14:8c:18:ed:
f1:d3:0e:7b:bc:20:6e:9c:9d:75:28:ae:7f:ee:0b:
50:4b:8f:c7:2e:8c:bc:72:c3:a7:83:bb:07:ef:b0:
43:ac:d7:45:46:ea:43:64:63:8d:44:b8:66:c1:12:
84:f5:0b:7e:a3:e2:f0:ab:d1:e1:6d:8c:75:6c:98:
be:9b:23:61:a2:7a:ea:8f:29:31:fa:44:43:69:15:
5d:cc:e5:f9:b3:c7:c6:00:40:75:59:5c:b3:86:b4:
42:e3:f6:be:e4:ef:87:77:96:e3:ce:d1:79:6f:5d:
be:10:27:a8:ad:79:64:22:c4:18:cd:28:24:61:2e:
dc:dd:ad:a2:81:e0:a1:2e:fd:5b:5c:56:3d:58:45:
b1:00:68:1a:86:ef:e3:1f:b8:6b:3a:ec:2c:ff:93:
13:20:1f:a6:92:11:f6:56:2f:dd:ac:f4:2c:5a:53:
a8:aa:e7:58:7b:15:7a:f6:37:95:51:e0:ab:ac:aa:
f9:20:f2:9d:16:6a:9e:f1:40:74:19:67:c0:dd:4b:
44:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:02:34:EB:08:03:91:89:B0:8E:10:C0:23:CF:13:8A:B7:79:E5:F1
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:50:ae:eb:5a:ca:2c:36:31:ec:ee:b5:d3:cc:e6:e1:96:42:
62:22:38:9e:cd:3f:57:c5:a3:3e:02:e7:16:e1:d3:01:e5:8a:
53:d2:9d:69:f7:cc:b4:67:06:a8:c2:46:78:52:79:1f:43:ab:
a3:64:13:e6:76:31:6f:c0:ce:c9:fd:ad:ea:2b:24:ea:42:9e:
4c:16:2a:c3:3b:b4:01:76:0c:7a:8c:b5:4e:68:2d:ff:00:6c:
86:9a:44:f0:df:38:12:a0:e9:68:7f:e6:7f:7b:8a:01:3e:3d:
20:3a:ad:0b:a9:ac:a1:45:32:b8:99:d8:46:12:36:39:70:77:
2c:ce:7b:6a:b2:7f:d6:ba:db:41:cd:a6:2f:8c:7a:27:2a:89:
79:6b:2f:f9:1e:98:19:94:72:30:0c:a0:b6:5d:7b:a5:a1:f5:
f9:37:db:00:7e:a9:09:bb:be:09:cf:84:1a:77:a9:88:68:1e:
27:f1:e5:e8:19:0c:f5:9c:d7:c4:39:9d:3f:9f:d8:93:62:0f:
a1:1f:fd:1f:83:dc:cd:47:aa:87:6f:a1:fc:0e:9d:26:51:7d:
f5:fd:8a:ea:4d:dc:81:8c:ca:17:b2:b3:95:6e:29:75:d2:5a:
0d:18:1e:82:f3:f0:ad:b8:df:d9:a0:d4:00:ec:69:1b:43:d9:
3e:2d:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:00 2025 by rpki-client