Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: m9FDwXg4Ibg7bX4XD6vAnuTHUzrXkuE78Hw3uUThogk=
Subject key identifier: 11:31:7D:E1:54:26:71:EE:7C:31:71:4E:4B:E6:1F:E7:76:83:1D:BC
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 0194BB2961B5D5A702E1A93151D54E251E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 04E9
Signing time: Fri 31 Jan 2025 07:00:38 +0000
Manifest this update: Fri 31 Jan 2025 07:00:38 +0000
Manifest next update: Sat 01 Feb 2025 07:00:38 +0000
Files and hashes: 1: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: /NukpaXaV8jGWsHwbpmGyk4DYKvW0OHM3CkN7MTEXLE=)
2: IoLDWpZjj6oD1gt6nT7kXI9BcpA.roa (hash: O3dblJBCfC0orY3rYiRzkRU6RkAUIy5FR+b3VhRRXis=)
3: eiwsx2FFwfE5TE_nY3h0_knWuU4.roa (hash: CVJTqVDV13ZF8iBRU7zgKf0ItAWnGVc70AQTYAE3fwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:61:b5:d5:a7:02:e1:a9:31:51:d5:4e:25:1e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Jan 31 07:00:38 2025 GMT
Not After : Feb 1 07:00:38 2025 GMT
Subject: CN=11317de1542671ee7c31714e4be61fe776831dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:0c:4d:f1:8c:a8:6b:0d:10:55:71:0b:cf:
5d:bd:b9:8f:43:11:ca:bc:07:e9:1a:12:6f:c2:79:
72:15:9b:a7:41:fa:cd:fb:e3:65:a7:38:0e:f2:a8:
8e:39:00:b3:50:d4:b3:70:79:c5:bd:14:72:d6:99:
42:a7:be:fc:f1:93:c1:50:9d:aa:a9:7c:af:df:af:
ad:cc:bf:fd:50:d4:f0:85:f9:51:ca:0a:93:e6:6c:
73:c9:9a:ef:a1:87:f2:67:c0:51:fd:a4:50:16:09:
03:c0:4f:54:64:74:2a:34:bc:19:0a:ba:45:de:cd:
2f:d2:a2:2c:33:65:96:66:f8:40:80:b6:42:60:23:
41:36:82:28:7e:48:6e:4f:45:3c:f6:e6:d1:55:cc:
e0:e8:b6:51:df:da:d4:9d:71:1d:d7:11:dd:04:77:
aa:a3:ea:cd:05:c7:48:e3:0b:6f:d9:ec:90:23:61:
1a:50:a0:14:24:7b:be:40:ff:bb:2d:93:d6:74:88:
b5:75:cb:99:55:51:eb:f5:80:92:f8:79:1b:d7:1f:
c8:c8:dc:5c:a0:8e:6b:cd:b8:84:ea:7f:5f:13:8b:
4b:c1:5f:34:d9:26:de:5c:7a:28:97:de:01:54:ee:
ce:c7:53:e5:ac:95:2e:f7:8b:2f:3b:48:49:b1:fa:
ab:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:31:7D:E1:54:26:71:EE:7C:31:71:4E:4B:E6:1F:E7:76:83:1D:BC
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:da:56:d2:08:d9:25:8c:e9:af:67:f8:7a:2d:3b:8b:77:90:
0c:0e:21:da:82:51:cf:a8:8c:5b:26:5d:94:c8:1d:f3:d5:a5:
ba:43:5c:80:77:42:30:92:d1:8e:94:fd:24:50:b5:0e:99:75:
e6:a6:62:08:63:f1:51:89:b0:02:67:1c:37:16:8a:35:eb:24:
fd:51:f6:32:81:a8:61:04:de:f0:1e:64:89:f1:b7:b3:53:28:
aa:5f:f5:15:d1:9a:57:fa:62:5d:c3:33:13:bc:48:09:e7:58:
c1:8d:a0:45:88:69:ea:a8:fc:09:a2:67:7b:dd:4a:86:f0:38:
d0:fb:8e:51:6e:43:9c:ed:d6:57:2f:72:61:71:af:4c:51:ac:
47:45:3c:ff:85:26:f3:c2:28:57:83:c8:b3:b9:d4:37:67:41:
83:43:b9:fd:1c:5f:14:82:15:86:fd:a4:67:51:df:52:8b:19:
f3:b1:68:1d:40:8d:92:f1:6c:b0:11:3b:3f:a6:e5:1f:73:f0:
a3:5c:a8:0d:dd:78:f1:e1:72:84:a0:77:d4:be:6e:06:8e:31:
61:0d:5b:6b:f4:4e:b7:68:e4:49:78:57:10:35:e5:6e:51:e4:
80:2a:e3:35:1c:d1:00:99:d4:80:07:8b:1a:4b:15:4d:be:45:
2d:b9:c2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:46 2025 by rpki-client on console-fra.rpki-client.org