Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
File: G5gPIqWVKk75pOxKng0MNR_slFQ.mft (raw, json)
Hash identifier: udCvSP106zCeUFCFDGlsweiDYE201dCenhuXvxX/Gwo=
Subject key identifier: 38:E5:7C:46:08:B8:3B:20:B1:3B:10:AD:33:17:9B:FA:B4:4A:05:B7
Authority key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
Certificate issuer: /CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Certificate serial: 0194BB28ECF4117B49EB943BAD933CD2F79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 07:00:08 +0000
Manifest this update: Fri 31 Jan 2025 07:00:08 +0000
Manifest next update: Sat 01 Feb 2025 07:00:08 +0000
Files and hashes: 1: G5gPIqWVKk75pOxKng0MNR_slFQ.crl (hash: jypVg1FTkj0gcQ2VGo9GpFZXv6FszNEiKrFWF81pPb8=)
2: jFeXSLOcmKjdy19dvekbxvl1dmc.roa (hash: 52Ov8zQceO7HlblWWc/Kf8ebS6bj291XEV6Vi2okLGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:ec:f4:11:7b:49:eb:94:3b:ad:93:3c:d2:f7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Validity
Not Before: Jan 31 07:00:08 2025 GMT
Not After : Feb 1 07:00:08 2025 GMT
Subject: CN=38e57c4608b83b20b13b10ad33179bfab44a05b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:6d:5d:37:7c:b3:ee:6a:c1:82:79:88:7a:
91:3f:10:5f:24:23:c8:36:3b:de:3f:83:a0:b6:9d:
fd:81:29:c7:75:52:28:bb:3e:9a:10:af:2f:c0:f2:
2f:00:3c:b9:1b:b7:bd:ac:af:75:47:9b:a7:df:14:
ba:df:b3:85:94:ac:98:9d:ae:14:ad:6a:d5:b2:45:
48:d1:65:e9:0b:39:3d:19:1b:94:51:19:8e:bd:98:
f8:31:7c:05:4e:08:39:28:9d:a8:43:1d:ec:ff:4c:
ee:6d:8d:15:e6:62:3e:61:71:92:f8:22:c9:fa:0b:
ce:70:f3:46:d6:f4:42:c8:34:ee:08:3f:1d:9d:5a:
4e:65:8f:2a:bd:eb:ac:a6:ec:ac:23:1b:2a:d2:70:
56:91:78:ca:dd:ee:b5:d2:b3:fe:5a:19:c0:cd:b3:
40:9d:34:59:a2:86:b6:78:fb:13:f1:63:f0:08:99:
df:03:56:69:af:aa:cc:eb:61:06:f2:e4:35:3a:3e:
bd:1a:e4:67:6f:60:cb:6f:77:00:a1:73:1b:d1:0a:
ef:0f:81:d3:d6:a5:45:9d:e4:a9:c8:33:c6:8a:2d:
aa:d7:bd:4d:bb:50:33:16:9f:f5:34:70:41:21:04:
6c:83:99:93:ae:ba:bd:e0:a3:4c:cc:94:8d:27:88:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E5:7C:46:08:B8:3B:20:B1:3B:10:AD:33:17:9B:FA:B4:4A:05:B7
X509v3 Authority Key Identifier:
keyid:1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:47:0a:28:a6:75:26:3e:d7:67:b9:99:c0:34:30:b2:fa:d7:
0a:9c:a0:50:a8:20:cb:d2:38:07:71:94:27:4e:f6:80:bc:c4:
cc:fb:ce:38:fd:29:0b:0c:2f:3e:28:ea:ad:55:e5:d3:a7:c7:
cd:e8:dc:d6:0d:7f:09:ba:04:30:5c:6c:ac:b8:d2:8b:27:db:
a6:44:cf:69:8e:ae:0a:2c:42:14:d9:e4:f0:9a:d8:1c:be:7c:
08:f6:e4:9f:dd:11:79:7a:8b:04:a3:40:e8:00:ce:53:33:8b:
5e:ff:1e:b3:cf:5c:70:42:fb:28:66:0b:c3:27:f3:e0:2b:5b:
0f:1e:10:e9:5e:fd:de:71:66:83:24:bb:da:f4:d3:f0:9e:1d:
86:5e:e5:42:e8:27:3a:2c:45:71:70:8c:03:09:18:69:12:61:
aa:0f:54:83:41:92:00:e8:bf:66:9e:e6:d8:b5:f1:ac:57:69:
6f:1c:42:36:0b:42:47:f7:96:a3:71:99:2c:b9:81:ab:14:26:
d9:98:8a:0a:7c:28:e2:fa:74:c8:b2:20:97:b0:ae:21:aa:9a:
10:55:12:f8:a7:c9:82:d6:3d:a8:a1:0c:57:6b:99:60:f9:cc:
aa:16:0e:12:1d:e9:46:0e:99:75:f2:3f:f5:5d:7b:2e:0f:c3:
7e:f1:30:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:03 2025 by rpki-client on console-fra.rpki-client.org