Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
File: gmkF0cEWiypmBwmtsg80xuTAPX8.mft (raw, json)
Hash identifier: VJBEObHlF5SrQob4K1er8EscAXy8Qtz11+F/uTbTNx8=
Subject key identifier: FE:2D:AA:7C:15:59:4B:EE:6C:6E:66:ED:37:F7:55:BF:35:93:B9:55
Authority key identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
Certificate issuer: /CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Certificate serial: 0194BB971314C5583612631F15EA9BFABFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:27 +0000
Manifest this update: Fri 31 Jan 2025 09:00:27 +0000
Manifest next update: Sat 01 Feb 2025 09:00:27 +0000
Files and hashes: 1: YsPCa2LhHTzsReR9IeNzv5T3mos.roa (hash: LDFsTcsV1AxqY+xNyJv9Hm+hGyPSKYS1sTcP7lh9G1w=)
2: gmkF0cEWiypmBwmtsg80xuTAPX8.crl (hash: XaLw1d35jj010oWJXu2vkxseJmiKCu57/sUQIAXlHak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:13:14:c5:58:36:12:63:1f:15:ea:9b:fa:bf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Validity
Not Before: Jan 31 09:00:27 2025 GMT
Not After : Feb 1 09:00:27 2025 GMT
Subject: CN=fe2daa7c15594bee6c6e66ed37f755bf3593b955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:bd:3b:d5:d9:96:0c:2b:f2:24:0b:f7:62:
4e:7d:b7:86:64:1b:16:c5:83:3a:6a:7d:e0:98:bd:
91:55:b2:a5:52:48:9e:1d:f1:95:a7:f1:f9:b3:8a:
ff:f3:a6:19:f3:d3:ad:31:6a:dd:6f:c8:4f:2d:d5:
28:42:ca:d2:fb:f2:bd:7b:ab:1c:81:f0:f8:b8:74:
46:d8:1c:df:53:da:fe:1d:09:fa:91:25:30:ef:8d:
b7:26:33:c6:3b:23:c8:76:89:09:fd:c9:48:ab:25:
97:59:69:5a:f6:84:cc:4c:0c:00:8e:82:88:3a:d2:
df:66:ed:a1:61:dc:37:e2:ba:a8:09:07:92:d1:28:
c6:7b:7d:21:39:d7:cc:4c:5e:3e:e5:fd:b8:9e:fb:
2d:38:55:6f:16:df:46:24:c2:30:4c:bb:46:b3:78:
5b:2e:5f:76:1b:9e:97:56:40:80:bc:06:38:d5:34:
be:28:4d:1a:c1:fe:64:1d:18:b2:3c:c3:c8:80:32:
d7:fe:bf:01:64:e5:f8:a7:22:a1:d2:2a:87:b7:bc:
0c:04:4e:f1:d0:32:8e:65:f1:94:3d:28:85:db:6c:
e0:d1:ef:8c:4f:76:0d:65:b6:a4:9e:d9:82:2b:76:
98:20:7f:e7:aa:3d:9a:ba:c7:b8:2a:61:35:6b:12:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2D:AA:7C:15:59:4B:EE:6C:6E:66:ED:37:F7:55:BF:35:93:B9:55
X509v3 Authority Key Identifier:
keyid:82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:20:dc:ea:ba:d7:84:3b:e6:c7:c0:91:17:33:3d:92:3c:dc:
62:11:85:3e:84:5c:30:c3:c5:5c:c7:3f:02:88:ae:ae:e7:b1:
71:62:77:af:50:7e:a3:4e:11:ce:27:42:4f:8b:69:e5:c2:59:
12:de:61:cc:4f:ba:31:6c:6c:6e:93:dc:ad:76:72:43:74:5e:
ab:83:7c:7d:ae:70:f6:4b:17:a0:7b:89:e0:a1:37:b1:60:af:
44:dd:25:ed:4d:b1:87:78:a3:ef:13:72:29:af:67:62:65:e3:
b0:1c:ac:1e:9a:97:10:0e:75:44:d3:b8:5f:c2:b4:1b:07:08:
29:ef:0d:8e:20:b5:58:35:eb:07:05:be:b8:62:ff:66:42:f4:
f6:3a:b5:bd:05:f8:00:fe:51:6e:49:c1:34:c1:1c:15:de:f3:
2e:65:54:ae:30:8f:ba:be:fd:3c:88:4d:79:56:20:2c:48:62:
77:b3:45:f7:2b:1c:f7:cb:c9:b8:37:c2:3f:e6:82:9f:7b:64:
7f:9d:6e:c8:18:2f:ca:59:3c:52:9f:ed:41:69:74:42:36:63:
42:fc:50:5b:f8:b8:1b:e7:bb:a7:e1:d7:f6:3e:f9:63:5a:4f:
9d:d5:5d:90:6f:0f:24:a5:17:fb:99:c1:90:ff:d7:e7:49:a1:
63:d4:fe:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:16 2025 by rpki-client on console-fra.rpki-client.org