Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
File: GbvChJjrFpWQsGmgBUFMQaF5skA.mft (raw, json)
Hash identifier: DUQALVhqaix7geNC9b1ueKsES2ey15mcNFYuFetnWIE=
Subject key identifier: 70:AF:4C:48:A0:BE:EF:74:F7:45:AE:1B:20:48:88:3A:40:0C:F6:B7
Authority key identifier: 19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
Certificate issuer: /CN=19bbc28498eb169590b069a005414c41a179b240
Certificate serial: 0194BB96CEB73D31E27E3071CEFF428CF38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 09:00:10 +0000
Manifest this update: Fri 31 Jan 2025 09:00:10 +0000
Manifest next update: Sat 01 Feb 2025 09:00:10 +0000
Files and hashes: 1: GbvChJjrFpWQsGmgBUFMQaF5skA.crl (hash: gEi93AjTfOZ0zgNKvFQWYlP0viae7zG0GyuE5B++Ieo=)
2: qMZKQsm86k3APveafN2OHKFVdlc.roa (hash: StEeWkUrbwVbFDe+g7Oaxogo7FQ3MGb8RnH0U7tSpHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:ce:b7:3d:31:e2:7e:30:71:ce:ff:42:8c:f3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bbc28498eb169590b069a005414c41a179b240
Validity
Not Before: Jan 31 09:00:10 2025 GMT
Not After : Feb 1 09:00:10 2025 GMT
Subject: CN=70af4c48a0beef74f745ae1b2048883a400cf6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:9b:68:8f:e2:1b:d5:df:76:28:20:b0:4a:
f6:d7:1b:2a:ac:25:9d:b5:43:1b:72:80:bc:d2:1c:
b1:74:1c:1b:78:c3:60:d7:be:f6:9e:eb:05:f3:ff:
4c:66:44:99:65:62:6a:0b:e5:99:b2:e7:3f:21:f2:
e8:98:56:d4:f5:8c:32:2c:df:6b:1c:59:e0:45:98:
f2:91:24:ab:a1:b0:4a:b9:95:04:81:71:9a:ad:0a:
69:ce:c6:82:7a:8f:b5:78:c0:92:33:ae:6f:86:a6:
c3:e1:ac:7f:6c:ef:0f:a6:08:bc:47:91:86:67:78:
48:18:bd:86:3e:0e:a9:34:49:75:7f:56:33:3f:40:
90:22:40:88:a6:51:69:a5:2d:3c:56:48:be:05:2d:
c7:24:ce:4f:07:d7:38:ac:10:fc:3a:c3:88:d4:7c:
8e:f6:f7:94:73:93:f1:75:4c:15:04:73:23:6d:7f:
8a:42:57:3d:24:41:cb:a3:f5:2d:c9:21:a1:f3:e8:
40:01:45:83:31:e7:81:33:c3:34:e1:63:39:ce:03:
ef:55:e6:ed:a0:67:4a:e6:c4:1d:9f:a3:25:27:43:
c4:9d:99:26:23:b1:44:a5:4f:df:c8:b1:d3:28:24:
bd:90:0d:45:1d:5a:37:ca:8f:a3:db:40:d0:eb:98:
64:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AF:4C:48:A0:BE:EF:74:F7:45:AE:1B:20:48:88:3A:40:0C:F6:B7
X509v3 Authority Key Identifier:
keyid:19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:47:01:be:f1:0a:29:f0:bf:01:56:79:99:31:f9:47:2a:28:
9b:27:db:be:57:f6:6d:dc:7e:48:15:f7:90:f7:2c:7d:c6:26:
b2:d2:09:02:18:22:03:f6:3b:12:42:d5:b1:00:28:e5:b8:33:
b5:ea:94:e9:9b:29:b0:b9:1c:46:18:4f:27:f7:f7:e4:1b:ac:
8c:bc:51:18:bf:c1:ef:eb:0f:6e:56:ea:19:c9:39:c3:05:75:
f6:ae:12:76:0f:81:51:ba:f8:78:44:9e:c7:75:3e:32:9b:dc:
fd:55:cb:8e:e3:46:d5:cb:47:0c:2f:5d:6b:8d:08:44:8f:5e:
57:07:dc:f1:b0:43:58:59:45:4c:4f:38:9e:77:6c:58:f4:8c:
00:88:50:05:f2:ec:8e:34:5f:42:a9:f3:1d:6b:9c:56:41:b0:
ff:4d:b6:0f:0f:de:ec:7c:f9:c3:14:f2:b2:17:78:2a:ed:a9:
0e:d0:4d:e4:dc:ca:a1:af:e3:5c:1c:e4:36:d0:ce:e4:4d:30:
af:0a:8c:19:c4:45:64:ac:53:a3:9e:b0:5c:55:5f:3c:a2:4e:
6d:32:57:e6:a0:cd:70:6e:f5:fe:f0:63:94:21:8b:cc:24:18:
97:0b:b8:3f:b3:f2:8a:f1:4a:30:26:8c:3c:c1:81:8f:a6:74:
0c:8d:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:40 2025 by rpki-client on console-fra.rpki-client.org