Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
File: gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json)
Hash identifier: pH7Ak+4QoYF1DxHiSEphdMWbb823SvewMhK65AJKZ6Y=
Subject key identifier: 7B:AD:F7:64:7F:65:EB:CB:E2:EC:C9:41:82:01:C6:65:95:FD:5F:3C
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial: 0194BABBC42808659DFCD4D05452E73BA0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 05:00:55 +0000
Manifest this update: Fri 31 Jan 2025 05:00:55 +0000
Manifest next update: Sat 01 Feb 2025 05:00:55 +0000
Files and hashes: 1: EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa (hash: +4JZ98C4BqbbLLfwtggPDHTa1SBuwVe0r20VBr9Sh7Q=)
2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: cJY0zqDIQJQ81ey1biiF7mUyaDP/pzYCVNeUh0Ca8HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c4:28:08:65:9d:fc:d4:d0:54:52:e7:3b:a0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Validity
Not Before: Jan 31 05:00:55 2025 GMT
Not After : Feb 1 05:00:55 2025 GMT
Subject: CN=7badf7647f65ebcbe2ecc9418201c66595fd5f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:a0:51:d6:2f:45:80:bd:e2:3a:e0:a4:63:
71:89:59:38:bc:84:b9:52:9e:37:b8:a4:49:55:ea:
f7:c4:a6:09:e8:aa:80:87:3d:ef:3a:73:0e:75:ef:
6f:69:dc:9c:5b:c2:7a:54:0c:39:7f:ac:94:aa:d7:
00:3c:fe:fe:cb:97:cc:d5:bc:2b:f0:b7:52:29:6f:
5a:73:c3:cb:ac:25:c5:d5:58:8a:ab:6a:16:a4:8b:
37:20:b2:81:1f:d8:86:60:bc:d1:e5:f1:c9:30:ef:
b3:69:54:20:3b:66:73:9b:07:c2:50:5e:be:03:c6:
e6:92:d6:56:39:f0:c7:ff:d5:ea:c5:24:5e:07:40:
16:e1:70:1a:ac:e2:df:83:68:1c:6b:de:23:4a:b3:
12:e1:b5:ad:e5:b4:2b:80:ba:25:d9:64:cd:d9:d3:
a4:ed:3c:a4:8e:86:ce:b0:3c:17:b7:5a:b2:ab:27:
43:0d:08:24:d4:d2:c2:5c:d2:bb:94:7d:77:ad:6b:
d8:0e:bc:9c:5c:46:62:9d:d1:ac:57:53:f1:d2:43:
d7:6a:64:74:41:a3:3b:cf:45:da:61:92:d1:4c:00:
2e:fa:6d:a7:89:de:aa:d2:c1:81:40:2d:9b:bf:64:
5a:cf:44:81:2b:9f:a5:4c:5f:a9:99:cf:0a:d1:41:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AD:F7:64:7F:65:EB:CB:E2:EC:C9:41:82:01:C6:65:95:FD:5F:3C
X509v3 Authority Key Identifier:
keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:69:d0:ba:12:37:d0:ec:64:e2:ad:80:ce:67:40:da:c3:2c:
d6:07:a8:3e:f6:2b:10:d4:68:97:00:16:34:01:58:e7:4e:23:
e6:76:c6:69:85:0e:d5:28:5d:7b:ac:6e:a6:ae:a6:54:7e:3d:
19:6f:5d:4c:d1:f2:27:fd:cf:0e:e0:2d:30:ca:c8:d2:c4:8d:
2b:88:f8:1f:c8:11:15:c4:55:b3:d1:7d:df:8b:49:09:7b:fb:
5d:af:a0:21:c5:13:63:01:3b:33:a0:29:54:b5:2b:47:f1:5e:
61:fa:1e:b1:58:fe:47:33:21:c7:2f:16:c7:80:49:ec:72:37:
aa:33:70:24:6c:46:3d:b6:60:1a:d6:20:ca:73:ea:ce:c9:17:
a2:d2:63:60:bd:75:db:8f:ea:86:7f:bd:a1:da:eb:15:83:a6:
35:89:55:16:84:46:c2:db:1b:ce:11:2e:93:ef:40:50:66:4d:
48:ef:75:2f:19:8b:59:99:59:62:cd:ad:36:98:d7:18:6e:b0:
fd:79:f1:f0:b1:f5:fd:e5:8b:c3:c1:a6:2b:34:6f:04:d9:5c:
b6:82:39:4c:37:09:d3:eb:db:dd:f5:25:78:6e:5d:25:0c:19:
0b:1a:2e:86:e9:5d:c4:14:85:b3:ae:66:4b:db:6e:68:6c:06:
aa:7c:4c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:16 2025 by rpki-client on console-fra.rpki-client.org