Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: DKeLPggF34AKRQb+ZOuv5I9880BDnkT9QI3crz9UChc=
Subject key identifier: E6:E1:0A:0E:BC:B0:C4:F4:CE:F9:31:2B:89:6C:86:06:04:CA:A9:55
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 0194BB603F1BAC35DDF995192FA2E6FE0755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 03EA
Signing time: Fri 31 Jan 2025 08:00:34 +0000
Manifest this update: Fri 31 Jan 2025 08:00:34 +0000
Manifest next update: Sat 01 Feb 2025 08:00:34 +0000
Files and hashes: 1: 8a65sLJcMpTKTXM1KK1QaGfwWng.roa (hash: AQSp0mg8gXMxn9jS/ccqb4ZFNGKHjoQo9RopDCtq2JU=)
2: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: 1nvKQjwhijulOu9yCYWkxB6vZHDmXtZ7cAfFfqO2rDc=)
3: UXTqM7OJZrCNMf_WXfbtOToQRAk.roa (hash: mzfOsI6oNfEpkOHOqiggoPrJ5JkezNl8t7J1lOi2apE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:3f:1b:ac:35:dd:f9:95:19:2f:a2:e6:fe:07:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Jan 31 08:00:34 2025 GMT
Not After : Feb 1 08:00:34 2025 GMT
Subject: CN=e6e10a0ebcb0c4f4cef9312b896c860604caa955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1b:5c:42:00:0c:90:de:4d:e0:41:b0:55:8a:
6b:92:4b:ec:a4:26:fb:66:42:3d:b7:7b:ab:14:7e:
e7:27:a6:0e:4f:93:e5:83:67:58:ad:58:24:6e:b9:
0a:73:0e:2f:0e:25:72:4d:c3:e7:07:a0:52:11:83:
8a:8e:e5:bc:89:fc:f0:6b:69:03:ca:21:56:70:b4:
8e:2a:61:8e:dd:2b:85:37:f7:b6:21:e5:f8:78:20:
ef:31:72:50:2e:7a:99:fa:7d:38:49:92:92:c9:b1:
6f:3b:9d:28:ce:09:f1:84:66:4c:2f:14:47:50:3e:
cd:fb:6b:4a:ad:65:97:fc:1d:ef:ea:c1:11:e4:18:
74:e6:d7:50:dd:9b:d6:21:d2:55:e2:39:19:92:e1:
84:47:03:eb:75:59:3f:78:41:8b:a3:bc:40:fc:06:
a1:d3:c1:98:c7:1a:28:1e:d5:b5:62:d0:5d:32:f2:
39:0d:cf:04:e4:44:c7:c9:f0:d9:43:c9:df:5c:e3:
e6:35:8e:ce:9d:38:a6:3d:9c:d9:10:b8:3a:c0:69:
14:28:ca:1a:cc:98:ad:56:6f:d4:f4:eb:d5:3e:29:
2e:1e:f1:60:3f:0a:e4:0e:40:9e:f8:ef:c3:5d:65:
c7:34:25:b4:25:8a:4c:1d:66:20:e3:24:05:a8:86:
12:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E1:0A:0E:BC:B0:C4:F4:CE:F9:31:2B:89:6C:86:06:04:CA:A9:55
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:8c:45:65:9e:63:a4:a0:b7:d4:9b:de:51:50:9b:8b:fa:95:
cb:2f:44:92:d5:2f:4f:09:3d:2d:d9:5c:b2:4b:5e:4a:e2:a4:
5e:0b:cd:78:35:66:10:bb:c6:03:c6:fb:f1:c2:75:5d:7a:86:
b6:05:8e:d6:43:9c:53:fa:30:3f:af:d5:13:c1:f2:ee:d6:31:
5e:0b:e6:b7:e2:ce:c3:67:e4:84:69:f3:93:d1:d4:55:75:8b:
50:bf:ca:2d:09:b3:8d:b9:3d:97:6b:d9:82:be:4a:ce:c8:08:
ed:5a:bb:aa:43:31:02:39:8c:92:a8:dc:85:05:f8:5e:38:0f:
1a:bb:e5:ac:78:8c:82:73:a4:ec:79:42:77:1c:52:7c:c3:56:
d6:f9:ad:82:13:c5:cb:61:6b:83:f4:1a:97:44:54:bb:97:e7:
09:bd:0e:14:29:7a:93:96:de:36:ab:4e:09:27:08:3e:8f:57:
2b:fc:9d:37:7d:0d:06:bf:ec:7a:55:3e:04:02:5d:33:c5:6f:
f5:ce:50:31:f6:d9:61:52:08:99:53:40:44:3b:73:c4:bb:44:
95:a7:9f:36:43:dd:df:60:a4:65:0f:0f:91:2e:52:8f:a4:55:
c7:e4:8e:74:09:ca:99:45:39:4a:6d:12:d2:be:a0:d1:28:a5:
68:ce:16:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:59 2025 by rpki-client on console-fra.rpki-client.org