Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier: XgPZ0u9SbTPKrnDU1eUsDjLTL+QQPOF7v3zdfgnnhzU=
Subject key identifier: 7D:22:7F:40:4C:E4:44:84:6E:0C:5C:3B:85:3C:8F:8D:AE:C2:2B:69
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 0194BAF202AB4B51FCF28F97E5CE8F61BF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 06:00:10 +0000
Manifest this update: Fri 31 Jan 2025 06:00:10 +0000
Manifest next update: Sat 01 Feb 2025 06:00:10 +0000
Files and hashes: 1: 1Cpy8hReysvqo6rJK2S7mrGPkKE.roa (hash: D4UL2BT0SqLhRGOh0lwv2Oqr8FVnOBm4wqYMVb3RDbk=)
2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: U4cqRhoz8SdHS0SeIdAHzh+jeS/LgfFSi9ZR7wmLgSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:02:ab:4b:51:fc:f2:8f:97:e5:ce:8f:61:bf:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: Jan 31 06:00:10 2025 GMT
Not After : Feb 1 06:00:10 2025 GMT
Subject: CN=7d227f404ce444846e0c5c3b853c8f8daec22b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:bb:78:70:6b:ca:b6:aa:c7:40:fc:93:4c:
df:72:24:78:ae:c0:b5:d4:ac:82:49:cf:90:0a:bd:
bc:20:eb:0e:c0:0b:c4:07:57:0f:8a:5b:8c:df:26:
ff:c3:d6:c9:54:4f:19:47:64:a5:fa:c4:3d:0f:8e:
cf:09:68:e7:88:04:6b:71:2a:80:9e:c2:ca:c0:21:
38:3e:f9:12:ab:6a:a4:02:44:c8:f9:11:12:15:36:
e2:55:23:99:0c:06:ce:83:e3:e1:2b:c6:be:6f:00:
b6:0a:64:2d:3e:40:fd:9a:34:e8:3c:82:29:56:49:
91:a4:51:da:75:94:c8:c6:d3:6d:22:5b:4a:e6:aa:
b2:e6:5e:cf:09:11:c4:ac:06:9b:0e:e2:55:78:e8:
28:96:a5:6e:1c:da:ef:23:96:ba:bb:0a:7f:e3:44:
a3:07:69:95:31:ea:3c:91:a3:5f:39:20:78:4c:07:
a8:bc:76:c1:23:1d:99:33:26:2a:96:85:a0:61:0b:
2f:f3:a8:09:db:0c:54:3e:8c:61:1c:0c:43:f3:f5:
fa:d6:e1:d8:30:f0:73:ac:aa:ef:98:80:4c:00:9d:
dd:ed:33:cc:3b:9b:5b:97:9f:54:48:63:bc:d4:20:
12:7b:b2:b5:95:99:cc:78:4e:7b:7f:57:27:56:11:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:22:7F:40:4C:E4:44:84:6E:0C:5C:3B:85:3C:8F:8D:AE:C2:2B:69
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f0:b9:38:f7:79:5e:07:63:7a:a9:db:91:ad:cc:90:12:3c:
95:f7:97:f0:75:48:e6:de:57:05:1b:b8:a3:aa:63:2f:c4:63:
d1:da:ae:d7:52:03:ae:b0:6f:2d:c7:b8:00:44:9c:3c:b3:c8:
ea:a8:a7:89:ee:9a:8d:98:7c:38:63:fb:6d:59:3d:58:74:a4:
05:78:46:65:41:b8:a5:32:4a:c5:aa:0f:08:bb:7b:93:74:bb:
1a:77:61:93:bb:54:f4:d7:aa:42:bc:22:26:fd:77:2f:12:65:
8c:bd:95:5d:47:e1:83:89:9d:9f:04:92:8b:81:94:f2:f3:e2:
54:b8:ae:b5:58:38:de:9a:89:f0:11:34:93:dc:83:e2:82:4a:
ba:d0:fe:ad:0e:ac:6d:18:c5:d2:b7:97:87:6b:c7:8c:05:1d:
e3:b9:f4:a2:1c:d1:7c:ef:41:3a:e1:0f:9a:58:52:11:c0:3d:
14:d1:d1:a1:af:39:69:82:ac:8e:8a:16:24:49:94:22:c1:23:
af:af:2c:2a:69:4a:79:42:bb:be:2c:90:ca:cb:5b:6c:e5:5a:
05:18:62:fe:c4:72:43:c9:9a:01:63:ce:06:a7:62:56:cd:4b:
84:77:83:62:18:db:08:57:db:3d:e6:de:5e:cd:a5:22:2f:e4:
48:09:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:35 2025 by rpki-client on console-fra.rpki-client.org