Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier: 6Bj5KSX/egOY3pOsaW0uuZ6SJtbKhIIqDFHDVyVJ3Sc=
Subject key identifier: B7:D4:A3:D6:78:47:03:2C:A9:66:9A:D0:E6:25:5A:9B:F1:5F:61:25
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial: 0194BAF2173EBBECF4BA376FDAF6BDE524B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 06:00:15 +0000
Manifest this update: Fri 31 Jan 2025 06:00:15 +0000
Manifest next update: Sat 01 Feb 2025 06:00:15 +0000
Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: hEDrnun9B5VQWRB6j4XUtHwD04M4JCE6BIcFEEQnzzw=)
2: hI5edSKk9SDqGgkmF4OcRVaTqCk.roa (hash: l/blfIEQUSaiKWBLl4Zw+Q08icOowG6w3h/+ddEop3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:17:3e:bb:ec:f4:ba:37:6f:da:f6:bd:e5:24:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Validity
Not Before: Jan 31 06:00:15 2025 GMT
Not After : Feb 1 06:00:15 2025 GMT
Subject: CN=b7d4a3d67847032ca9669ad0e6255a9bf15f6125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:26:3b:02:e1:bb:1a:88:2d:be:db:b6:c0:
f6:f3:34:84:30:95:44:0f:50:85:5c:ed:f4:a6:7e:
a0:f7:db:54:6d:2c:54:c8:e3:4a:4a:81:75:6a:ee:
c9:4a:b5:5a:16:09:9c:5b:b4:d4:b8:61:64:8b:98:
52:6b:2e:10:10:79:53:73:79:a1:98:37:01:5c:50:
04:7a:8c:3d:dc:0c:fe:88:ce:f9:51:21:84:3a:ab:
a3:87:58:6c:88:52:45:30:5c:c6:0a:61:72:fc:98:
52:d7:57:50:25:34:fa:58:4b:a8:52:25:8d:fb:b4:
7b:1f:b5:78:8b:29:40:45:38:b7:56:66:13:31:d9:
b1:f3:41:29:8b:fe:0a:1f:36:be:0a:5f:e5:ba:b2:
ef:a6:84:2d:40:de:d2:9c:0e:99:5e:d3:42:4e:72:
06:8c:d7:e6:0e:f2:f6:1c:c5:6b:7e:18:ce:53:a6:
9f:2a:53:91:4d:c7:db:33:46:18:b0:d1:f6:0a:a8:
bf:0b:34:f7:6d:3f:7e:40:fc:35:f7:ad:fa:03:fa:
12:20:7b:04:d0:3f:d9:a2:7d:33:b6:1d:c9:f4:d8:
c9:6c:0e:4f:03:9a:a0:0f:69:15:45:b4:4e:4c:20:
8d:68:9c:1c:69:4d:52:0a:99:f2:ad:65:cf:99:a3:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D4:A3:D6:78:47:03:2C:A9:66:9A:D0:E6:25:5A:9B:F1:5F:61:25
X509v3 Authority Key Identifier:
keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f7:48:31:0f:f6:b3:70:fc:eb:fb:ac:ca:4a:f3:5e:3d:63:
e2:30:4f:bc:5e:12:45:02:78:f5:6f:f2:8f:89:00:a0:f0:0e:
cc:14:c1:18:ca:18:11:23:5f:ce:22:25:08:a8:6a:e7:34:84:
9a:b5:73:d5:de:b6:d3:56:9c:7c:a3:48:37:d1:5f:7c:b2:53:
25:4e:a5:fc:31:8e:e8:54:9f:4b:5c:8a:cc:24:2f:64:96:7f:
e1:24:dd:c4:2d:99:d8:d7:9d:d4:c1:c8:23:a3:50:c9:37:47:
12:9f:7a:64:17:1c:6c:f3:b1:4f:48:ca:b3:9c:33:e4:96:af:
bf:9b:32:32:f7:e0:c0:5f:87:74:bf:9a:1b:3d:1b:74:e3:65:
ec:7b:e6:3f:2d:40:28:a9:e8:aa:c0:8e:47:22:b2:e2:ac:fe:
bb:c0:92:4d:d4:26:e7:7f:1b:f8:84:60:eb:69:4f:22:1f:f9:
4d:17:5d:28:89:43:be:b4:f3:28:3a:38:6b:99:8e:08:ed:ae:
36:5e:da:80:5f:3f:24:9f:1c:e3:de:14:ee:14:6c:92:0f:01:
07:0d:98:b4:44:bc:c2:01:06:36:31:26:d0:ac:da:cd:5c:43:
36:4f:34:45:69:fc:4c:31:28:fe:2d:04:53:88:dd:a3:c1:a4:
b2:c6:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:31 2025 by rpki-client on console-fra.rpki-client.org