Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
File: g9gpJjs8X2OWgDf56GP9D9AeeGk.mft (raw, json)
Hash identifier: KNyULDJmGnHJ7OaEJqxHtZpc9wcgDA0pzCfIKUBQDN0=
Subject key identifier: B3:45:BD:F1:4A:CB:BA:E6:C4:EF:64:62:F1:F5:FB:0A:E9:EA:47:86
Authority key identifier: 83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
Certificate issuer: /CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Certificate serial: 0194BC3BF3E50DC0F99EDA6A6DE674AD92F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
Manifest number: 0FEB
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: KyWdAlshbj0x1AA1uUx-ZQPp9Zk.roa (hash: WDABDJxxu4elmiEAWMv89c2ma+ic8Jsi7E3Q6vmgEYc=)
2: g9gpJjs8X2OWgDf56GP9D9AeeGk.crl (hash: N2SwhatcX2qiHSbKXwRK3/k9IQH6HwQBnLzFq9uGmAQ=)
3: hkjDx-2GOhGp7IPuQmrLBkkB_0U.roa (hash: 4gfS7chtfvvAEHSEdJQzQiuhcE63Qr3QGw7uAtNLDMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f3:e5:0d:c0:f9:9e:da:6a:6d:e6:74:ad:92:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=b345bdf14acbbae6c4ef6462f1f5fb0ae9ea4786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:34:d8:08:93:82:13:e0:4f:56:93:d1:31:
4a:58:14:4f:d2:f1:2e:5d:34:5f:96:18:4c:76:d7:
86:25:78:bc:2a:64:86:9d:32:09:e6:98:0a:7d:00:
a0:27:b7:ff:24:f0:0e:3e:81:b7:91:c6:d6:0f:44:
82:4a:e4:44:29:9b:29:c2:1f:56:a3:6e:db:db:2d:
64:97:4e:22:7e:0c:2d:28:18:eb:72:bb:eb:a9:b5:
25:43:06:43:42:c6:ac:a8:2a:95:a4:aa:b1:ad:2e:
63:f0:27:ab:0d:fc:d0:6a:e5:16:1a:b8:cb:db:1b:
8f:73:31:f2:88:69:50:f4:6f:09:b1:9c:53:e5:a2:
3b:0f:4e:3c:e1:67:3e:72:f4:1c:75:71:cd:35:a3:
e6:8f:1c:47:6c:fe:e3:50:ca:3d:f0:76:10:e6:6b:
4c:1e:64:d7:e9:2d:aa:f5:80:1d:27:42:a5:2b:a2:
c5:0c:ef:00:24:10:80:72:be:66:7f:ce:15:1a:17:
7d:a1:cc:9e:26:7a:e6:5d:98:16:1f:da:41:02:02:
c0:31:bf:2e:0d:d9:a7:2b:3f:a2:9c:e1:9a:54:21:
89:55:2e:59:c1:74:41:0c:a3:89:45:70:7f:78:f3:
a4:76:36:62:d3:8e:ca:70:09:99:c5:db:3a:15:8b:
f3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:45:BD:F1:4A:CB:BA:E6:C4:EF:64:62:F1:F5:FB:0A:E9:EA:47:86
X509v3 Authority Key Identifier:
keyid:83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1c:13:fd:3f:36:8d:1e:b9:40:91:9b:c1:0c:58:fc:8c:63:
9e:82:7a:65:a8:fd:0e:41:ae:6e:f1:a3:ac:03:6a:31:e9:cc:
f1:ed:c2:14:a4:89:f3:e6:52:9f:a0:c3:76:9a:50:5b:a0:4f:
c9:9b:a8:bc:67:ef:d3:a6:be:b1:92:58:84:df:93:de:a1:0a:
14:36:d9:99:00:16:33:9d:7f:a4:33:00:05:67:08:09:bf:8b:
ba:77:66:eb:d2:8b:ef:24:a0:27:36:e9:7a:d3:0d:88:5e:48:
1a:fb:df:6a:21:d5:e1:f9:60:b4:48:56:d8:e7:99:8b:ee:63:
fe:e3:19:b1:be:e5:63:50:4c:48:93:67:f9:c2:f8:2f:1e:0a:
e0:24:c2:88:f5:be:33:21:b8:65:47:0f:e0:d0:4d:d9:05:d7:
73:f6:ce:01:1b:68:70:4c:5d:85:f2:6d:9c:e8:b2:d2:1e:2c:
8a:64:c5:a0:c4:0f:93:74:c0:a9:84:83:de:df:3d:9b:b2:93:
64:06:13:9f:9f:19:23:56:fa:35:39:c6:a7:1e:be:d3:f8:65:
cc:c5:77:5e:0b:59:14:50:b2:dc:ed:b8:5e:5a:e7:4b:75:32:
53:22:ee:5b:2b:98:60:65:2f:72:b7:5b:f7:94:04:04:bf:7c:
9f:16:c9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:43 2025 by rpki-client on console-fra.rpki-client.org