Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
File: g_j9dJOi_gViIttB7Wkwg7UOzPs.mft (raw, json)
Hash identifier: L5mroMiM9gkhi0gnwbd5aat12/WPnamFYDSxJHDl/Ro=
Subject key identifier: FB:9A:03:24:50:B6:F0:86:79:0F:05:4A:43:BF:83:AA:FC:EA:14:B5
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Certificate issuer: /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial: 0194BABBADE134E52A270E0B88C44AD7D92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
Manifest number: 05D5
Signing time: Fri 31 Jan 2025 05:00:49 +0000
Manifest this update: Fri 31 Jan 2025 05:00:49 +0000
Manifest next update: Sat 01 Feb 2025 05:00:49 +0000
Files and hashes: 1: g_j9dJOi_gViIttB7Wkwg7UOzPs.crl (hash: CtgIPQdrcFLPFVz4K9ve/lSMfh4C4T8yxhUm0kNNclI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:ad:e1:34:e5:2a:27:0e:0b:88:c4:4a:d7:d9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Validity
Not Before: Jan 31 05:00:49 2025 GMT
Not After : Feb 1 05:00:49 2025 GMT
Subject: CN=fb9a032450b6f086790f054a43bf83aafcea14b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:6f:a8:60:c1:1e:fa:64:92:00:24:5b:4a:
06:be:92:4c:46:ea:dc:38:9a:f1:bd:1f:24:f5:86:
5a:86:d3:c2:a9:2a:9f:d2:bb:c4:13:44:71:05:49:
8c:bd:53:e7:5e:e0:43:d8:8f:63:8c:4f:f0:b6:09:
af:67:b1:67:af:a9:69:31:b7:ea:1f:c7:9f:42:c4:
fc:87:f4:27:ba:7b:67:5c:d9:58:29:0c:5f:0a:00:
a3:ee:03:fc:eb:35:ad:cb:db:87:cf:a9:7e:fe:68:
fb:38:be:e7:99:83:46:9a:ba:78:bf:bc:7c:76:c5:
0c:6f:28:9c:4b:36:4d:7d:6d:09:e9:b6:bc:e9:32:
ef:28:48:82:3c:8c:09:fd:c9:38:16:56:14:47:be:
75:e9:bb:f9:44:7a:75:fd:34:16:aa:70:6f:99:dc:
f9:8d:42:24:79:82:06:1f:3a:b0:57:fe:83:6a:a6:
b3:f2:ed:db:6a:89:c1:27:f5:f3:e8:9e:f2:0b:4f:
0c:79:e5:62:db:c8:79:de:55:bf:15:b5:e4:ea:8f:
7f:5e:c4:aa:96:0f:58:39:73:be:78:05:53:df:d5:
44:dc:ed:53:46:42:77:6a:b4:fd:d0:83:6b:20:52:
05:bc:b9:84:f5:95:7c:b5:96:50:0d:72:c0:c7:da:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9A:03:24:50:B6:F0:86:79:0F:05:4A:43:BF:83:AA:FC:EA:14:B5
X509v3 Authority Key Identifier:
keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5e:bd:06:5a:92:04:35:6f:3d:99:0f:ae:ba:82:71:ad:98:
22:11:02:0d:35:65:55:66:9f:66:c0:37:92:77:a2:90:c4:61:
2f:4f:38:fb:d8:85:81:36:31:37:46:16:24:20:a6:24:17:c6:
d7:e3:54:69:91:ad:8b:50:fc:4c:e1:16:d5:64:e1:e2:3e:bd:
cc:6d:52:89:42:4c:60:ab:ed:c0:17:d2:d8:2e:09:0f:8d:84:
87:c7:fe:6d:b0:9d:80:89:02:26:88:23:58:51:75:9e:20:e5:
7a:d1:d4:32:97:04:fe:c7:cd:19:2d:c8:8f:48:74:57:e6:34:
44:c5:32:ed:cf:29:bd:da:0e:42:e2:ad:a5:22:f5:68:22:0a:
15:1b:5c:aa:fc:b5:49:57:d2:8b:4c:7b:d7:a8:10:80:9a:fb:
a4:bf:56:54:09:5c:36:ca:fd:bb:73:b5:a7:96:24:27:34:05:
ba:8e:41:ff:eb:7e:d5:b0:04:2b:fe:40:cb:5d:14:8f:63:c9:
96:0c:69:c3:c8:1b:71:33:ad:da:93:5e:a4:2b:47:8b:91:9b:
06:3d:90:f9:d3:75:99:9e:08:53:32:6c:75:16:55:5c:f4:3f:
30:cd:40:b6:0b:3e:d8:ee:46:8a:da:58:b2:22:19:ab:c6:be:
33:10:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:19 2025 by rpki-client on console-fra.rpki-client.org