Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: HD/PXYLck/EkpGkrqWnpV32IzFIRX5o2HMSU9n06Ipc=
Subject key identifier: A6:4A:D4:0B:0D:01:88:ED:A8:3A:99:95:08:4B:C0:BA:21:42:5B:C3
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 0194C387EEA8F7ADD4029302992448CB72A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 142F
Signing time: Sat 01 Feb 2025 22:00:53 +0000
Manifest this update: Sat 01 Feb 2025 22:00:53 +0000
Manifest next update: Sun 02 Feb 2025 22:00:53 +0000
Files and hashes: 1: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: O8/SfTxvbrbo7vFImX9FchZUGeK1CRTigYPYuwpmzIo=)
2: kMic-cYu_3jAGaMkqOjyp2h03_Q.roa (hash: q724sfMAPnUFvRmxjRBhUtLlfNKhUfTz/xhqtAFnU88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:ee:a8:f7:ad:d4:02:93:02:99:24:48:cb:72:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Feb 1 22:00:53 2025 GMT
Not After : Feb 2 22:00:53 2025 GMT
Subject: CN=a64ad40b0d0188eda83a9995084bc0ba21425bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:0f:92:13:22:3d:1d:c1:53:26:00:2b:29:
ef:1b:fb:5f:db:92:4c:ad:48:6c:31:bc:b7:33:d8:
53:82:23:5c:77:61:4a:d0:df:04:2b:57:a7:a0:6e:
e3:be:b6:ba:74:e0:5f:c1:84:be:d0:17:49:c0:47:
4a:83:af:75:8f:72:dc:e2:4f:cb:60:92:11:d1:66:
84:4d:35:a1:36:01:80:f8:40:1f:3d:8b:24:21:5c:
1d:5f:ec:86:6b:c4:c5:8f:fa:75:ec:2b:ae:57:e0:
11:d4:c9:20:96:a6:b1:95:4f:c8:10:2c:99:0c:9e:
2a:b8:57:72:42:92:23:3d:6b:31:3c:3a:a0:b8:5f:
7b:ff:44:86:38:53:3f:b3:2c:37:0e:44:4f:09:62:
93:20:99:33:85:4d:f1:bb:5e:dc:db:fd:07:1c:ef:
94:29:f4:13:7e:ee:77:b0:3b:40:61:44:ed:fb:c6:
1f:74:a9:91:61:a3:1d:b8:94:4e:5a:66:78:a6:0d:
74:71:0a:4e:5a:72:f0:04:16:0a:0b:3b:c9:63:0f:
5c:c8:f4:b5:eb:fa:64:26:eb:c5:ff:06:fd:49:71:
3b:af:bd:e1:e8:80:a8:2e:e8:8e:3e:d8:fb:5c:7f:
3f:b7:bb:e4:17:de:c1:7c:d5:59:8b:55:46:04:f4:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4A:D4:0B:0D:01:88:ED:A8:3A:99:95:08:4B:C0:BA:21:42:5B:C3
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:10:df:29:a0:9e:8d:a4:0a:71:5e:87:58:bf:0a:f9:7c:4d:
d4:6f:f0:55:39:a9:af:02:9c:ca:c4:0c:99:87:06:c6:25:39:
7a:d1:ec:8f:cb:65:bd:af:08:5d:24:d2:29:25:2d:2a:b9:f0:
3b:95:60:4d:c5:81:f7:50:76:7a:1c:d2:4e:c8:be:28:bd:bb:
52:6b:a4:04:10:1e:36:d6:17:bf:04:f4:b4:1e:1e:d7:f1:69:
1c:da:4b:c8:50:99:d9:b6:ea:66:ad:5f:ae:11:ef:51:cb:3c:
c6:bd:5f:e4:24:8b:ea:b6:78:81:28:82:09:38:cf:61:00:cc:
e6:33:2b:1f:86:0e:7f:77:71:4c:ab:e6:f4:c0:5f:38:75:69:
3c:b8:4f:77:24:39:37:20:13:5f:19:d5:64:6e:54:06:83:09:
3f:9b:a4:b3:75:5b:10:cc:f9:eb:12:fb:22:bf:d1:e5:7c:5e:
72:6b:77:a9:16:be:a8:5d:e0:c8:72:de:9c:f2:09:84:64:fa:
dc:c3:c6:1f:89:c6:fb:b7:46:60:96:02:d5:f5:88:d9:00:e3:
21:3e:bd:f0:f2:27:b1:fb:8f:6c:70:e7:77:1e:82:6b:05:d8:
04:2a:c0:6a:fe:2d:2a:d0:3e:75:b1:34:74:7c:2d:b2:16:ac:
d5:18:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:04:29 2025 by rpki-client