Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: ieMfM8vLgMR5LS9K02vswTkMm70d1onVDEZCrN93dSM=
Subject key identifier: F3:E6:E1:42:8E:02:58:93:82:AF:FA:07:D4:6F:29:CA:7C:5B:1B:57
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 019641E86E0CBE82A9493DB1F2D5D87DDB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 04:01:13 +0000
Manifest this update: Thu 17 Apr 2025 04:01:13 +0000
Manifest next update: Fri 18 Apr 2025 04:01:13 +0000
Files and hashes: 1: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: 7OB88M0DneNGSGDJiW4tW1snqmNIzkuWWWPbHWDVV5s=)
2: kMic-cYu_3jAGaMkqOjyp2h03_Q.roa (hash: q724sfMAPnUFvRmxjRBhUtLlfNKhUfTz/xhqtAFnU88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:e8:6e:0c:be:82:a9:49:3d:b1:f2:d5:d8:7d:db:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Apr 17 04:01:13 2025 GMT
Not After : Apr 18 04:01:13 2025 GMT
Subject: CN=f3e6e1428e02589382affa07d46f29ca7c5b1b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:d0:92:a9:07:6a:ba:e8:36:af:88:18:f7:
4f:e0:58:ef:89:05:29:46:1f:c8:fb:81:4f:db:1d:
30:47:66:ed:a4:ec:83:83:bf:c8:e3:40:9b:18:1b:
39:ab:42:ae:ec:3e:47:b8:61:c7:8f:bd:c7:c8:f4:
e2:33:9b:8c:38:e4:ab:27:98:8e:1c:5e:71:56:7c:
e2:0c:73:6b:ca:97:24:03:52:3e:a1:b9:fe:77:6b:
9f:58:9b:a7:ec:eb:49:04:16:35:0d:63:d4:25:06:
34:0c:89:fe:37:40:c0:40:e4:0e:a0:d6:ee:8b:ad:
5b:5c:45:c0:47:09:21:d6:42:35:47:73:84:8b:2e:
4c:e2:0a:d6:2d:de:fe:67:01:f5:49:57:9a:3e:4b:
6c:d0:f3:16:44:d0:1b:5d:f8:46:3b:a9:e0:b8:6e:
1c:c8:49:1c:9c:d1:75:4f:9d:ae:e6:ca:53:52:3e:
be:4e:4b:f0:c8:d0:24:27:12:2e:96:a7:cf:0e:ae:
75:bd:6e:c1:76:fd:fb:e3:e8:1b:97:fc:90:0b:78:
18:48:8b:d8:6c:8d:4d:81:aa:54:7e:81:b9:4c:f8:
c9:eb:0b:d5:64:28:57:05:55:bc:52:b8:6d:5d:e5:
ab:03:f4:c7:b9:0f:fa:34:51:46:31:94:b4:cd:a3:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E6:E1:42:8E:02:58:93:82:AF:FA:07:D4:6F:29:CA:7C:5B:1B:57
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6d:98:34:30:d1:79:37:6f:e3:76:8c:51:14:00:6a:86:7c:
38:24:43:6a:ae:87:a7:a9:ea:d8:8b:b8:b9:70:70:ef:82:7d:
25:c4:1e:41:b0:13:74:a8:af:86:59:3d:8f:d7:02:db:ef:fe:
97:b0:f9:4a:59:84:ff:e2:57:6e:55:1b:05:73:61:b8:3e:ac:
ee:6b:05:47:03:5b:5a:22:0b:09:78:18:3c:bc:8c:52:26:5c:
ec:77:ab:ff:cc:03:7b:ea:66:9c:65:64:af:89:e8:f9:fc:b6:
c6:2d:b5:aa:b1:cf:ab:61:7d:1b:7d:78:27:b5:28:13:4a:70:
80:de:96:a7:f8:a6:56:ab:1b:29:15:d0:fa:b2:16:cb:24:a3:
27:a1:4c:cd:6a:70:db:e6:9f:0d:9c:9c:81:2a:1e:29:21:da:
9c:67:11:27:59:4f:7d:20:2e:48:a2:af:c7:d2:60:d6:23:bb:
eb:d4:82:a9:79:61:36:b1:2b:2f:71:0e:a7:98:67:68:6e:72:
86:88:85:8a:49:16:44:ee:90:57:75:f6:9b:b8:8b:76:a2:13:
97:5d:9a:cf:9f:af:d2:35:fc:2a:b7:2b:71:91:30:4b:df:59:
94:36:d8:da:54:39:89:70:63:77:b4:4b:41:d8:73:3b:16:7d:
71:d7:c6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:24:52 2025 by rpki-client