Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier: OLC663MNXVRSUW09xvTfcG6R3eDLV3WEe+4qjguzF9s=
Subject key identifier: F0:92:E1:79:87:E8:5C:7F:BD:F4:59:A8:FB:0B:10:F6:31:69:45:2F
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 0194BA841D25FE71E40A6FC0FEC5FF8610C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 04:00:07 +0000
Manifest this update: Fri 31 Jan 2025 04:00:07 +0000
Manifest next update: Sat 01 Feb 2025 04:00:07 +0000
Files and hashes: 1: 4E8aKuSUAJGEZx4-_4p226okfIQ.roa (hash: pf8xgGvbWtDjdqLKfY5/LWfzgLwmraxV+sdu2DNs804=)
2: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: mUOcvycual6zPQA7atCMhGk1m00YyGq5JMnF4+tGAf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:1d:25:fe:71:e4:0a:6f:c0:fe:c5:ff:86:10:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Jan 31 04:00:07 2025 GMT
Not After : Feb 1 04:00:07 2025 GMT
Subject: CN=f092e17987e85c7fbdf459a8fb0b10f63169452f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:d8:a5:e3:be:dd:ba:d9:6c:e9:c3:68:cc:
18:da:25:b7:2b:b6:35:70:92:d6:5d:39:17:84:45:
13:b5:fa:48:01:6d:fc:90:f7:ed:ae:e5:f5:e5:68:
16:cb:0b:21:ed:13:f5:2a:72:5b:1b:58:ad:a0:71:
c7:b2:24:ec:aa:cb:db:23:ce:6f:95:43:d7:4c:e0:
e4:7a:a7:ce:a9:bb:be:55:c1:91:86:1d:0c:6f:1b:
47:2b:b9:8b:ad:9a:0d:fa:c4:86:b1:b6:7b:58:69:
4a:06:86:d1:6a:32:34:3b:f4:1e:89:e7:da:a4:1f:
eb:98:3c:d2:68:71:f5:81:7f:ba:0e:0f:47:af:32:
91:99:6d:e4:bd:03:b3:ef:cd:e1:f9:38:6a:8a:7e:
e8:f3:e2:e8:0b:e5:39:cb:9b:db:c9:33:66:04:d3:
95:40:1c:f8:27:d0:a5:8b:5a:00:1d:dd:94:0f:2c:
ec:78:1f:d9:54:e9:8b:7f:de:54:b8:9d:6e:47:f2:
23:72:7e:7f:b9:4f:82:05:d7:b9:20:71:16:68:08:
d0:19:79:44:fd:1b:88:1c:47:3e:b7:12:c8:c6:79:
cd:3c:b4:4c:51:b2:ff:5a:69:08:50:e2:07:30:07:
6a:ba:be:ae:90:3f:80:71:71:eb:4d:f6:2d:fa:03:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:92:E1:79:87:E8:5C:7F:BD:F4:59:A8:FB:0B:10:F6:31:69:45:2F
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ba:25:d0:8c:bc:f1:a3:91:37:d5:20:e0:1d:ff:03:97:9b:
ab:68:89:36:6e:b4:3e:c0:a4:45:63:7a:9d:7d:2d:05:e0:cf:
e1:d1:86:1d:25:10:2c:5a:bd:6c:8e:62:24:8d:b4:74:ba:82:
df:f1:06:ca:cb:b0:3a:59:f0:27:53:57:b8:e6:c1:26:d4:7a:
41:60:be:8b:03:63:d2:e7:e8:60:ba:7b:d2:f6:e2:e2:1f:41:
b4:f1:3a:1b:11:46:eb:76:17:c2:b0:d7:62:87:b4:1e:33:d8:
f7:20:9b:2e:4e:40:16:69:90:5a:31:9b:ba:18:2c:42:06:8e:
d0:ec:27:4e:1f:b7:d9:8c:92:62:dd:89:f6:a3:25:26:c8:7b:
f3:a3:d3:13:83:5b:34:82:40:74:3d:c8:fd:61:df:b7:39:7e:
2b:b6:9a:fd:aa:3d:69:2d:7b:13:f9:0f:8e:2e:88:08:1c:31:
a7:b1:2c:14:e1:4e:4c:02:c1:25:7f:4f:d4:fe:64:51:90:8e:
e5:02:59:4f:cd:15:09:1a:74:28:09:25:b6:51:83:63:0d:d3:
74:44:0a:5c:af:85:49:c2:30:e6:f1:c1:2b:d7:d3:ef:63:3e:
f4:dd:42:b0:d4:5e:af:5f:97:f9:75:b4:a4:45:dd:52:01:0a:
42:33:ad:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:26 2025 by rpki-client on console-fra.rpki-client.org