Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
File: GzVUSY88jdU5wlqdhTSPq4F-2iM.mft (raw, json)
Hash identifier: LpE40oPKYCRHDFdWR9SCa4yTPEfnE9q6TpuALhOzXpc=
Subject key identifier: B6:AF:26:61:DB:33:F0:9A:4A:8E:B5:57:44:B5:9D:B9:A0:F2:6C:51
Authority key identifier: 1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
Certificate issuer: /CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Certificate serial: 0194BB974E1A5431BB623802E4B6BDED6890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
Manifest number: 091E
Signing time: Fri 31 Jan 2025 09:00:42 +0000
Manifest this update: Fri 31 Jan 2025 09:00:42 +0000
Manifest next update: Sat 01 Feb 2025 09:00:42 +0000
Files and hashes: 1: GzVUSY88jdU5wlqdhTSPq4F-2iM.crl (hash: 7hmaY532VkBREbtrwFM5Buk9YUHsMT4O8ZSnv+3b31o=)
2: TJqYJ8PgowX2_0fLvr-J92tN24Y.roa (hash: SyEDMYr3gmhjsEM3DpobXAPSbcOSlzfmvEvbnyrm1xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:4e:1a:54:31:bb:62:38:02:e4:b6:bd:ed:68:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Validity
Not Before: Jan 31 09:00:42 2025 GMT
Not After : Feb 1 09:00:42 2025 GMT
Subject: CN=b6af2661db33f09a4a8eb55744b59db9a0f26c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:0a:ee:8b:62:3f:2a:b5:f1:8f:4f:83:40:
17:83:53:72:55:ed:d8:54:98:56:38:61:91:5a:d6:
96:9c:48:5d:14:03:9e:81:a0:b4:6d:71:c7:c7:4d:
7c:e8:91:48:01:eb:d9:86:6c:7a:4b:df:ce:5c:c4:
b9:22:ed:87:29:b7:f9:eb:46:b2:cf:7a:8d:17:82:
16:78:e7:f7:5e:0d:a9:cc:f1:aa:8e:4a:9e:b0:92:
82:87:d6:a7:39:a1:05:aa:fe:38:7d:10:20:9b:0a:
ff:bb:19:7e:b7:ae:d2:81:8b:1e:f4:6e:e2:c3:6c:
82:fe:2c:17:b6:9c:2a:d9:83:08:c4:83:0e:11:6c:
af:83:2f:58:54:30:1e:26:0c:d5:83:95:4b:be:a3:
ab:04:99:60:79:cf:2c:78:d1:c5:84:36:47:bf:3e:
75:b0:b2:08:8b:99:4f:80:f6:13:76:5e:1b:67:3d:
b9:6f:18:f0:d2:f6:97:a6:75:47:8b:b6:c0:5b:fc:
83:8b:3c:9d:c5:7f:99:52:bb:d2:68:40:00:57:ee:
a7:b3:01:7a:cb:84:e4:12:2d:bc:a1:c9:85:95:c6:
11:33:4d:2a:7a:7c:83:b1:b1:b4:96:92:bc:37:50:
8a:a7:35:2e:2c:3f:17:fb:28:d0:62:98:08:70:79:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AF:26:61:DB:33:F0:9A:4A:8E:B5:57:44:B5:9D:B9:A0:F2:6C:51
X509v3 Authority Key Identifier:
keyid:1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:85:99:c6:89:3b:97:4a:ca:82:50:38:89:5c:28:03:f5:78:
45:84:34:f8:63:22:48:3c:81:e5:76:bc:c6:b3:be:5e:ee:13:
98:a2:42:6b:45:62:17:b3:eb:d9:c9:43:42:1d:67:94:7a:c8:
d9:53:00:21:bd:ce:85:09:8a:74:3b:d3:c9:87:52:30:ad:c7:
1f:3c:61:44:a9:95:9b:62:d4:ff:d5:e8:2d:f5:8d:71:23:94:
c9:c4:b2:44:2a:e7:21:48:3e:bb:90:b2:11:1d:6d:0f:53:7c:
f3:b1:8f:ea:69:20:ae:dc:98:1f:f9:49:4e:7b:03:ba:a3:c4:
3f:93:3e:b8:d5:81:1d:ab:d4:43:2d:52:82:f8:32:ea:50:d9:
06:3d:d2:12:91:97:99:b9:b8:ca:ae:7e:f4:e4:9e:86:6d:09:
40:26:db:22:6d:dd:f6:a2:90:32:45:7a:16:94:6d:dd:76:52:
51:b3:9d:83:d4:f1:ef:3f:e6:c5:99:cf:cb:c5:b4:0d:7f:f3:
5c:e5:42:33:19:59:37:53:ce:a0:62:0b:4d:b6:2b:d2:6f:30:
87:78:e7:48:c9:31:3e:3f:41:2a:d1:97:03:a0:3e:91:0d:41:
3a:54:6f:55:3d:a3:37:be:35:f2:bf:ab:a4:0b:20:b1:df:11:
64:2b:8e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:45 2025 by rpki-client on console-fra.rpki-client.org