Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
File: G82c0xYDmcHjyAzwdIZ6cp991Pk.mft (raw, json)
Hash identifier: sBNoyqNdI1GY7MQnmtpXPdFNJ8PD9DAa31tKALU29Dc=
Subject key identifier: E6:98:AF:66:B8:65:63:5D:D6:66:5C:23:C6:71:6C:2A:F5:2F:FD:91
Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Certificate serial: 0194BABBA45FF9110534C8B33686F1B8FED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 05:00:46 +0000
Manifest this update: Fri 31 Jan 2025 05:00:46 +0000
Manifest next update: Sat 01 Feb 2025 05:00:46 +0000
Files and hashes: 1: 65jp3a6f2gh4Tkpte2rBeESresA.roa (hash: 07jq7hxGRgJkHsgPxiO4p+naJnzzp9QCQTCf5Ueq5Sc=)
2: G82c0xYDmcHjyAzwdIZ6cp991Pk.crl (hash: QHFxb0nLSGFp1zhouVvoTU/dU2/4sYInCb25JhasdcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:a4:5f:f9:11:05:34:c8:b3:36:86:f1:b8:fe:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Validity
Not Before: Jan 31 05:00:46 2025 GMT
Not After : Feb 1 05:00:46 2025 GMT
Subject: CN=e698af66b865635dd6665c23c6716c2af52ffd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:e9:5f:9a:fd:eb:40:90:f4:05:1b:68:32:
0e:c2:84:37:b7:89:8d:55:d4:9a:44:2a:33:1f:78:
91:e0:97:10:fa:df:fb:66:1d:b4:9a:9a:eb:57:c0:
53:b4:9e:15:00:59:69:c9:df:3a:a0:02:86:65:04:
05:a2:d9:4c:3f:af:74:5c:0c:58:80:8c:8d:dc:d1:
86:69:ae:92:3e:d9:38:b0:0e:a1:87:ac:78:fd:10:
3f:54:56:b6:7a:3d:78:3b:76:9c:ab:99:0c:78:3f:
53:35:61:c8:1f:8b:c0:35:c3:03:bb:f2:d6:a8:0a:
b9:18:1a:3c:ff:7a:c4:ba:9f:d2:e5:18:15:3b:44:
12:81:5f:82:a7:c6:91:40:84:b1:cd:a3:73:de:9e:
8c:d5:7c:35:6b:f7:c4:36:7c:a4:6b:90:c1:82:20:
02:34:69:a0:5d:74:a7:c2:22:67:c6:97:7c:aa:54:
58:a1:cd:49:ce:3d:db:c6:6d:26:2e:5f:f8:4b:db:
8a:e5:e1:ce:1f:82:cf:75:30:c4:f7:8a:28:42:f6:
1d:4d:53:77:b3:40:3d:0c:56:70:bd:43:63:2a:23:
18:79:12:34:99:dd:85:4e:17:df:47:c8:3d:ed:0e:
d3:a9:91:5e:ea:3d:68:8b:58:e2:c2:fd:7e:d9:eb:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:98:AF:66:B8:65:63:5D:D6:66:5C:23:C6:71:6C:2A:F5:2F:FD:91
X509v3 Authority Key Identifier:
keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1c:25:ea:59:55:ca:c1:e3:07:bb:f9:19:d1:95:03:81:21:
53:0a:c7:71:1d:13:e5:9d:8c:24:d9:a7:8e:d8:22:db:3e:8a:
43:e3:8e:eb:c4:7b:0d:cf:ff:88:8a:35:c9:33:f5:a6:21:81:
2d:69:30:5f:1a:9d:11:1d:5e:30:db:ce:ff:40:5e:c9:9e:db:
d2:d9:24:ca:71:d5:7e:b1:8b:85:36:6f:8b:90:7d:95:75:99:
73:b4:0c:0a:b3:19:6c:90:f2:56:9e:1b:52:fc:d6:08:02:a7:
f7:e2:f5:1e:31:7b:4b:09:90:27:27:51:ba:2a:4c:32:aa:78:
12:09:ca:21:e6:8a:fb:6f:00:a2:53:1b:01:07:6b:a1:95:e0:
0a:7f:46:6b:19:a2:28:fe:14:76:4f:ae:1d:50:36:34:69:37:
1e:6b:cf:6c:2b:e3:9a:03:2f:52:05:93:bb:1a:43:89:4a:95:
90:ee:96:66:2d:ac:33:52:23:09:2a:04:36:2f:82:37:1f:16:
cb:44:08:15:63:bd:30:8c:bc:9e:aa:55:4b:9f:20:91:49:55:
83:85:51:7f:f2:e0:45:1c:c8:1a:46:00:70:fd:06:4f:59:fb:
d2:65:67:f3:a6:61:97:8c:9e:d1:d7:21:20:d0:ba:d3:88:d2:
66:f1:ae:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:26 2025 by rpki-client on console-fra.rpki-client.org