Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
File: G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft (raw, json)
Hash identifier: 2gO62oHpjmUIZ4/UkGP4OiNN29yne8g/wpcLawYT0DQ=
Subject key identifier: 1A:C4:F4:E7:91:B8:BF:AE:3D:FC:C9:BE:47:BE:1A:06:36:62:D2:3C
Authority key identifier: 1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
Certificate issuer: /CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Certificate serial: 0194BB2967C237F5905A2DD73639946870B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
Manifest number: 0D60
Signing time: Fri 31 Jan 2025 07:00:40 +0000
Manifest this update: Fri 31 Jan 2025 07:00:40 +0000
Manifest next update: Sat 01 Feb 2025 07:00:40 +0000
Files and hashes: 1: G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl (hash: ssFOiCMljB0aiOY9k4ZHNSs/hODBvaCCcuDcCcrZjSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:67:c2:37:f5:90:5a:2d:d7:36:39:94:68:70:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Validity
Not Before: Jan 31 07:00:40 2025 GMT
Not After : Feb 1 07:00:40 2025 GMT
Subject: CN=1ac4f4e791b8bfae3dfcc9be47be1a063662d23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:ff:f0:6e:b0:bc:90:b6:30:4c:a6:ec:b8:
c8:f8:a9:d2:54:59:3a:be:4a:ff:e4:e5:6a:1d:52:
1a:dc:95:c4:60:6b:0b:75:44:0c:ec:03:ef:aa:ef:
d2:1c:e6:4b:15:28:4d:83:c9:13:56:21:c3:81:22:
af:e0:d8:1d:f6:3c:c2:eb:28:35:51:80:85:e5:9f:
64:71:f1:2a:f1:d8:05:03:f1:28:c9:30:11:65:05:
d3:18:c8:a6:4b:14:6f:26:dd:f4:cd:64:0d:78:b1:
d9:e1:1b:03:c9:e5:52:9b:e2:1b:e2:d9:19:86:e2:
bf:b8:48:84:53:a6:52:9b:3c:e0:6f:51:f1:51:fc:
af:f9:28:9f:73:c7:db:a4:1a:f6:35:7c:f0:48:79:
3a:f6:a2:e5:08:c0:d9:be:d6:b6:e3:bf:b4:d5:4f:
4b:5f:6e:1c:92:95:e9:8b:cd:30:8d:e0:6f:28:c6:
45:a3:9f:16:52:c9:b3:dc:d1:2b:48:10:b7:cf:95:
63:db:ba:f7:1f:f8:a0:d6:b7:2a:2c:d3:7e:8f:a8:
2a:4b:2c:29:73:63:57:77:13:e6:f9:7e:af:ef:06:
04:45:2e:1a:2b:3a:75:01:da:ab:8a:a1:a7:29:5e:
22:66:06:e4:7a:3e:04:d8:52:04:17:8a:c0:0d:48:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C4:F4:E7:91:B8:BF:AE:3D:FC:C9:BE:47:BE:1A:06:36:62:D2:3C
X509v3 Authority Key Identifier:
keyid:1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ed:a0:d7:d3:46:a7:06:b8:75:03:e4:c0:9f:1f:0c:35:91:
fc:4d:a1:2e:1f:b2:26:a3:44:27:48:a4:15:1e:d1:21:f8:2f:
fe:cb:b8:be:e4:38:71:a3:20:bb:9d:db:58:c6:fa:03:e7:20:
d2:5b:95:5d:7f:c5:a7:60:73:e6:f5:cf:39:9b:5e:0c:a1:c3:
02:d2:ec:31:51:d3:2c:37:e0:69:1f:f1:1e:31:ec:5a:34:bc:
16:fc:e4:b3:59:35:95:e5:f5:04:d1:f4:aa:23:5c:77:2c:14:
0b:bc:05:77:d3:35:25:67:00:b7:72:5c:37:28:8b:77:d0:33:
e1:7b:71:3c:71:32:1c:e8:97:ab:16:90:11:e8:b5:cc:da:6e:
45:a3:8b:5b:34:05:71:4f:4a:36:0c:6e:6e:93:fd:a4:7c:0a:
31:cc:47:85:ba:8c:8e:44:19:cf:aa:5d:dc:66:c0:4d:3d:9b:
6a:3d:22:e8:fa:9a:0a:7e:01:93:b1:c5:32:1c:9a:67:23:4a:
77:b4:18:bd:0a:d5:2c:fa:99:b8:88:6b:e6:9c:9b:4e:35:4a:
0b:f8:c4:8a:38:68:e3:f9:90:cb:cf:65:c3:a7:ac:53:51:27:
dd:2b:66:d0:69:53:f2:6a:29:86:dc:f2:2a:58:7c:a3:3b:18:
52:9f:b7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:29 2025 by rpki-client on console-fra.rpki-client.org