Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
File: gynJE4dY3-i6EjXuDsfZtlifSyc.mft (raw, json)
Hash identifier: SA+T5mVuW7czQEpRtUYW8bPScFPkP4pemsz4EBomzz0=
Subject key identifier: 2F:62:36:D2:C1:09:25:7A:38:FA:CB:E5:25:0F:80:2D:33:5A:E3:42
Authority key identifier: 83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27
Certificate issuer: /CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
Certificate serial: 0194BB5FF03C49A4A0813CDA68A9FD16F1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
Manifest number: 0414
Signing time: Fri 31 Jan 2025 08:00:14 +0000
Manifest this update: Fri 31 Jan 2025 08:00:14 +0000
Manifest next update: Sat 01 Feb 2025 08:00:14 +0000
Files and hashes: 1: NEtfj8eymwkFpDG7BP2gOv3cbAs.roa (hash: J8/tby/ZFT8OsdOz/hNiW3bEdXZu2ngXmdS3bjVWlAA=)
2: gynJE4dY3-i6EjXuDsfZtlifSyc.crl (hash: yIw3ghOGj/qCl2NQXqtqQXkVCGxYAEzFfbCMafe0Gqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:f0:3c:49:a4:a0:81:3c:da:68:a9:fd:16:f1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
Validity
Not Before: Jan 31 08:00:14 2025 GMT
Not After : Feb 1 08:00:14 2025 GMT
Subject: CN=2f6236d2c109257a38facbe5250f802d335ae342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:fa:f9:61:d2:2e:99:54:c7:98:1c:a7:51:
66:17:04:80:09:8c:de:06:00:a4:20:89:f2:a7:76:
d3:e8:ab:b1:0b:e1:91:a7:8f:75:fb:33:e8:d3:54:
cd:8d:c8:75:49:f1:fc:19:c5:d6:67:f9:c5:69:b6:
9c:28:a1:95:eb:23:21:05:96:f4:95:c0:00:1a:d5:
e2:36:f5:78:98:57:ec:72:46:3b:2b:02:59:e5:fd:
3e:b7:53:b6:b2:8a:21:75:8b:c9:5a:cf:4b:24:9e:
67:8f:25:cc:2d:41:be:a2:12:ff:6e:6a:85:fd:5c:
b9:5c:82:15:d3:db:ae:bd:72:9e:35:21:ba:c7:15:
b0:26:95:65:3a:94:1c:13:69:74:f7:a8:df:3a:a0:
23:d5:b9:8f:01:83:ad:9c:95:f5:2f:65:b0:f9:68:
17:c0:70:ab:48:fe:3c:3b:3c:e3:b6:29:7f:90:b2:
3d:65:ea:ae:a4:fa:75:c8:aa:f2:e3:bc:34:29:21:
14:48:df:d3:ff:44:53:b5:0a:22:d2:4c:aa:00:de:
28:65:77:8f:50:d3:d7:f8:f7:d4:9c:cb:d1:5d:51:
bc:a4:3d:b2:bf:8a:66:38:16:13:7c:ac:31:66:10:
3a:2e:76:62:d5:7c:e9:fe:cb:7f:52:8b:ce:31:03:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:62:36:D2:C1:09:25:7A:38:FA:CB:E5:25:0F:80:2D:33:5A:E3:42
X509v3 Authority Key Identifier:
keyid:83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8f:a2:27:03:6d:15:d4:37:9e:34:34:f3:d5:8b:04:96:9e:
87:4d:87:7d:ce:b7:cb:24:ba:7e:aa:3f:24:d7:91:a3:42:ae:
33:58:29:09:28:f7:82:2a:86:97:06:1b:da:3f:76:ac:b3:06:
69:05:a6:19:2f:1b:08:90:ab:63:1a:fd:88:a1:dc:09:59:65:
f2:c0:d7:95:b5:3f:f5:b2:7d:a6:6e:17:60:b5:78:56:a4:dc:
b0:da:b4:fc:ed:4f:9f:19:81:21:91:19:d1:08:02:de:c8:a9:
64:b1:32:ab:fb:e0:ca:0f:62:6d:1b:ce:39:8d:67:73:2b:73:
bb:45:88:28:dd:58:ce:f2:12:19:96:21:0f:c7:3f:d9:26:ee:
ca:10:5b:04:e1:2e:39:e6:29:56:8b:6b:a6:ac:55:2e:ea:04:
2e:e1:97:29:5f:84:31:b4:15:4f:68:d1:e1:eb:82:f1:53:d9:
61:35:ef:c6:5c:51:f8:dc:a0:86:71:19:03:57:6e:0c:8d:25:
88:24:0a:e6:cb:7d:83:8a:24:20:66:e0:2a:bf:f7:19:14:79:
47:d2:06:69:b7:0d:80:d6:23:f1:63:b4:72:96:84:cc:ac:a1:
9e:5f:4c:6a:f6:77:9d:71:ce:11:56:ee:d5:ee:45:52:27:e4:
fa:fa:37:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:40 2025 by rpki-client on console-fra.rpki-client.org