Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier: dC37SZHwNrv4dcytYFDlUi2wgq5ffiJKgMTM0dOAr9g=
Subject key identifier: EB:0C:59:2D:16:9A:B3:ED:D9:55:0E:89:99:13:23:FA:DF:23:A1:E7
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 0194BB96C26B11C567C738F830C49DEFA348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 09:00:06 +0000
Manifest this update: Fri 31 Jan 2025 09:00:06 +0000
Manifest next update: Sat 01 Feb 2025 09:00:06 +0000
Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: f4Aj8BZzIAlTPmBJCoaVf92H33hnL6BM9j3L78L5KXs=)
2: qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa (hash: /cIFZv0Z52Y5+S3hgVxJBf+tIN9m9T+pJ4ZgMnUSMa0=)
3: uVBTeEzfoyB7JY96y5uQlYBoA00.roa (hash: 1QuqtDmpz5L96A5DhcdUsvLbu6XhjJTyVS+t4jv+5BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:c2:6b:11:c5:67:c7:38:f8:30:c4:9d:ef:a3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Jan 31 09:00:06 2025 GMT
Not After : Feb 1 09:00:06 2025 GMT
Subject: CN=eb0c592d169ab3edd9550e89991323fadf23a1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:77:ca:94:de:05:2e:e7:37:0c:5d:a0:29:
96:32:63:20:47:31:03:d4:1b:0d:79:46:79:81:07:
cf:1c:f3:31:af:e0:70:f0:8e:53:39:d2:17:73:a6:
31:7c:5c:2f:0d:04:37:ca:86:cf:ea:39:f8:e4:66:
71:26:ab:ed:60:63:24:5c:b0:45:19:73:7a:f9:3a:
fa:ae:df:9c:61:eb:53:6f:c5:80:3a:ea:89:24:2d:
df:91:4a:f9:1d:03:7f:91:1e:9a:b3:a2:c9:90:e5:
10:e4:a4:b2:d5:64:91:46:ae:47:e6:9d:d8:43:13:
23:94:f1:b4:97:db:9e:a1:fd:c9:1a:1a:38:68:00:
6a:b6:26:f9:bb:f7:ae:06:7c:38:10:22:88:93:51:
3c:51:1a:bf:84:0d:44:fd:1e:cc:88:c9:74:1a:76:
eb:8a:36:00:72:5d:36:c8:88:2d:16:d0:c0:b6:43:
9e:a1:01:24:28:29:d4:7a:59:fc:44:b0:72:a5:22:
7e:11:d6:8e:dd:af:54:a4:6d:73:62:0a:08:ca:6a:
10:7a:57:bb:94:1c:06:67:ed:37:7c:d0:67:99:aa:
65:51:07:e7:56:11:3c:1a:cf:63:52:09:ff:7e:f2:
0d:2d:e9:15:25:ec:0b:ad:b5:02:b4:0c:45:77:85:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0C:59:2D:16:9A:B3:ED:D9:55:0E:89:99:13:23:FA:DF:23:A1:E7
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:77:a9:49:f3:0b:46:ec:d9:aa:1e:8e:ec:a5:57:ae:b1:cf:
24:94:a0:e8:71:6e:c3:da:f6:bd:4c:7c:99:5d:84:e6:ee:67:
64:04:27:0e:d3:f9:71:e6:12:70:7e:e6:01:16:a7:ca:88:4d:
f3:f5:a4:58:29:6e:59:8a:e5:29:ce:75:d6:b4:c0:f8:0b:b8:
70:c0:92:fb:91:d1:36:c1:4f:ba:53:cf:91:a2:fe:b7:d9:3f:
f4:37:f3:52:91:02:60:ec:7f:9c:b8:84:e9:55:95:e6:7e:e9:
8b:7b:cc:2c:3e:1d:53:9e:58:b7:67:7a:fc:40:c6:b4:0f:62:
b5:fb:5a:c0:14:bf:7b:db:bf:bb:b9:97:94:3b:34:61:65:4e:
a2:01:ec:ae:39:cb:1e:b1:f9:67:28:42:ad:9e:36:dc:09:f2:
98:7e:2b:72:f4:72:75:97:2d:ef:6c:e0:d5:ae:6c:d4:f6:bd:
d2:30:a4:3f:5f:b4:45:b5:0a:cc:59:f2:eb:ca:c5:38:bd:c7:
a8:7d:9f:a2:39:f9:77:8a:ed:36:da:e0:41:13:2e:7c:69:4e:
d5:66:3a:dd:6a:89:a8:15:38:37:79:11:0d:f2:15:da:57:99:
67:13:48:4f:b3:8f:81:b1:16:d6:92:23:c2:16:f7:4f:ed:e1:
af:a6:0e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:57 2025 by rpki-client on console-fra.rpki-client.org