Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
File: g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft (raw, json)
Hash identifier: BUJAWrsPXUXeQzQEw+P+Q6Av63sFoi5BvX1QjhuLxrs=
Subject key identifier: B7:AE:CE:E3:A8:02:43:BD:E1:05:B6:2A:9B:65:63:7B:07:3C:05:45
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Certificate issuer: /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial: 0194BB600AAE3B8A734ECD232C4510B2B9C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
Manifest number: 09F5
Signing time: Fri 31 Jan 2025 08:00:20 +0000
Manifest this update: Fri 31 Jan 2025 08:00:20 +0000
Manifest next update: Sat 01 Feb 2025 08:00:20 +0000
Files and hashes: 1: EvTzLNAJ6H7qRnNSh82gSKiMMgg.roa (hash: qhUzbtll1fZR91tCmRG4V9VmK3ep2kPWk4uvDeplZCU=)
2: g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl (hash: v0ZmOUm0G9cUC4wpqyVrYeytQq5g8Hl08bKPXYnFClM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:0a:ae:3b:8a:73:4e:cd:23:2c:45:10:b2:b9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
Validity
Not Before: Jan 31 08:00:20 2025 GMT
Not After : Feb 1 08:00:20 2025 GMT
Subject: CN=b7aecee3a80243bde105b62a9b65637b073c0545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:12:15:1d:a6:a5:9d:65:6b:31:c4:6f:fc:ea:
4f:12:ef:d0:be:51:6c:6a:6b:b4:c6:6c:65:a8:c6:
1c:06:24:39:32:3f:7b:6b:8a:7a:13:44:14:8b:78:
6a:4c:ba:48:25:f4:07:97:6a:0b:7e:5a:4c:1c:61:
3d:ea:1c:36:3f:1d:6e:3d:4f:4a:a2:39:73:77:90:
46:41:10:8b:07:14:dc:cb:77:19:1c:71:95:8a:a3:
f2:8f:48:da:23:e4:b6:bc:b6:c9:91:e9:48:f3:c3:
cb:0d:b3:ab:07:40:3e:60:0b:0f:02:5c:30:dc:77:
0d:52:f3:aa:13:79:fc:0e:ad:be:c5:c9:b8:91:08:
e9:ff:25:f6:48:ca:4d:ba:71:3e:87:83:d0:2e:c3:
76:bc:82:16:2b:55:c4:a3:a8:6d:f4:5c:c1:cc:bf:
bc:26:0a:7e:d6:7d:c9:8b:fb:0d:0e:eb:e9:22:c5:
61:c8:3e:1e:48:ea:d6:b8:c2:25:f7:bd:91:7a:ee:
d4:15:bc:d9:33:e8:ca:7f:0e:1e:81:91:f6:c3:15:
60:45:b1:60:97:74:11:72:45:3e:21:f1:51:54:cc:
af:d5:c9:dc:53:3e:6d:f7:55:bf:1a:b0:fa:2c:2a:
6b:e8:37:26:73:27:19:d6:6b:7f:b7:5d:88:f7:7a:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AE:CE:E3:A8:02:43:BD:E1:05:B6:2A:9B:65:63:7B:07:3C:05:45
X509v3 Authority Key Identifier:
keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:33:f0:fd:3e:1a:cc:fc:5a:6c:88:aa:75:46:66:08:2d:12:
36:d3:35:5f:4a:45:d3:5c:22:66:b7:5c:63:73:b4:78:39:6f:
62:59:c1:1e:c4:76:ff:71:33:e7:08:3b:59:f8:68:90:6e:da:
bc:73:bb:f4:86:de:45:7a:c3:96:5b:50:63:da:1f:9a:97:00:
68:e1:41:28:95:9e:13:45:aa:7c:ea:1a:84:2c:be:58:61:9f:
ae:aa:8e:36:01:d2:f3:2f:65:48:2b:a0:4a:2a:35:94:a8:f8:
25:bd:72:58:91:4c:ed:70:66:7d:b8:ea:f7:7e:6b:69:75:a3:
19:d1:9a:d8:71:33:2f:cc:a5:95:5f:a3:a9:85:42:5d:0a:62:
05:5e:d2:62:10:47:45:5d:dd:77:24:32:a6:80:43:54:7e:a0:
bd:23:0a:06:66:c6:99:d3:01:2c:df:64:9e:dd:af:95:59:ed:
2c:0b:7a:2a:c2:57:4e:68:1a:da:56:04:6a:f4:fc:89:45:ff:
27:f8:a4:93:e1:9d:33:ba:25:8f:e6:ce:1a:fa:85:e2:df:7b:
8b:b4:be:47:fa:66:d7:08:fd:e6:02:af:37:88:11:d8:61:4b:
18:24:0b:be:9c:f0:48:48:10:02:b4:dc:18:b6:a1:d3:dc:98:
cb:f5:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:02 2025 by rpki-client on console-fra.rpki-client.org