Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
File: gHAu016O_uBMqrmZhCa8PUPK6yw.mft (raw, json)
Hash identifier: e38gvSAxtC6abh+910n+EiOcsfIEB01gCh80obUQK50=
Subject key identifier: 4B:A2:6F:1F:46:E2:E2:F3:40:87:1A:7A:CF:5C:34:EC:5C:12:FE:30
Authority key identifier: 80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
Certificate issuer: /CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Certificate serial: 0194BB28FAFABAEC3CD2B98FF9E090785902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
Manifest number: 0473
Signing time: Fri 31 Jan 2025 07:00:12 +0000
Manifest this update: Fri 31 Jan 2025 07:00:12 +0000
Manifest next update: Sat 01 Feb 2025 07:00:12 +0000
Files and hashes: 1: gHAu016O_uBMqrmZhCa8PUPK6yw.crl (hash: hptBoc1vzGHUmSX0qrnOu4RYcSwVUeShmbehNkOG3oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:fa:fa:ba:ec:3c:d2:b9:8f:f9:e0:90:78:59:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Validity
Not Before: Jan 31 07:00:12 2025 GMT
Not After : Feb 1 07:00:12 2025 GMT
Subject: CN=4ba26f1f46e2e2f340871a7acf5c34ec5c12fe30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:59:db:5e:76:7f:fe:9e:e7:77:d6:17:43:
7d:3a:57:02:f1:87:a8:df:5c:2d:e0:2a:06:90:46:
e4:7c:b4:0c:55:36:c6:08:79:cb:ea:8c:7f:26:16:
98:92:14:4f:d7:23:49:41:8c:4b:b2:19:65:97:21:
49:a9:9c:09:75:50:ef:57:33:64:fd:46:c5:05:d9:
42:00:db:cd:18:7a:7b:7a:61:69:1d:26:4d:fa:66:
ab:83:4b:34:ef:cf:0c:5a:c7:53:df:9d:ed:d7:e7:
a2:4f:f3:f8:7b:92:73:83:37:89:84:fb:49:66:19:
9a:aa:cd:24:03:27:e4:dd:43:fd:a2:82:fc:c5:8f:
ec:d6:ce:64:6a:4f:51:9c:e9:89:d9:c9:f4:f3:be:
be:a0:68:3d:0c:c9:52:ef:dd:4e:84:1e:67:ad:ce:
45:4b:7a:ef:96:bd:31:61:cc:ca:62:9f:a3:88:82:
63:ca:a9:da:47:c8:df:6f:9f:53:81:00:1c:e8:ac:
f9:bb:f1:95:24:c2:f9:27:8e:b6:b5:ca:23:27:4d:
0e:61:8d:11:e3:03:17:d4:55:25:1c:be:0c:ad:8a:
30:9a:be:df:26:9f:71:a1:0f:66:20:2b:3b:00:19:
7d:16:3e:5f:8f:d2:6b:e0:79:0b:11:07:4a:64:ee:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A2:6F:1F:46:E2:E2:F3:40:87:1A:7A:CF:5C:34:EC:5C:12:FE:30
X509v3 Authority Key Identifier:
keyid:80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:50:1a:46:48:cf:92:ca:cf:ca:4a:db:ea:fe:5a:d6:89:b6:
80:bc:5e:21:d5:7e:88:82:44:68:a2:79:36:73:a9:39:8e:b5:
af:35:bb:75:64:e0:9d:2f:1a:85:7f:48:8c:15:f0:16:47:0f:
f8:0e:9d:22:ab:c6:81:ea:50:c4:3e:02:12:c7:e1:5a:d4:2e:
91:73:08:6a:fd:fd:93:e9:04:a1:1f:eb:a2:d4:73:81:ae:60:
65:07:dd:ed:c6:d5:ed:f6:4f:e8:8e:4e:a7:9e:c5:11:88:6f:
ad:8e:92:83:f8:f0:fc:29:be:cd:e0:30:90:d0:de:bd:12:9d:
86:a6:c2:64:87:02:c9:c7:bb:19:c5:53:54:60:2d:10:77:15:
c0:3c:26:d1:b4:a0:5b:ce:f7:86:ae:6d:e7:dc:85:7c:a1:a2:
0c:ca:09:8c:a2:6c:96:28:c2:fd:e2:93:3c:bf:9e:8a:d0:15:
af:b0:14:5f:7a:cf:29:23:6b:ac:0d:9a:76:d8:15:4a:a8:db:
77:65:4b:7a:94:d8:27:0b:aa:f4:28:63:51:df:d0:01:dc:0a:
49:8b:e9:4c:84:86:9d:01:6c:fb:c0:fc:86:27:66:54:54:9e:
57:ee:60:ed:6e:78:c4:be:e7:4e:13:6d:97:98:64:dd:c1:95:
b4:92:8d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:41 2025 by rpki-client on console-fra.rpki-client.org