Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
File: GxUEuvgu-OsK5QivQLY442YKVIg.mft (raw, json)
Hash identifier: HzwId1mdg2jeNGAbpcmtNiVqi4f6Ext3d/BAwLzZLpo=
Subject key identifier: 68:73:84:9B:A9:1C:C0:BF:97:11:DF:52:1A:24:B6:6D:3A:5B:61:B7
Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Certificate serial: 0194BB96E523679FD8D47D7DFBA70503935E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
Manifest number: 0C71
Signing time: Fri 31 Jan 2025 09:00:15 +0000
Manifest this update: Fri 31 Jan 2025 09:00:15 +0000
Manifest next update: Sat 01 Feb 2025 09:00:15 +0000
Files and hashes: 1: GxUEuvgu-OsK5QivQLY442YKVIg.crl (hash: TmvwVnZ6LKuCRhfmenzIY3aGoqAMF9kbhLdKpIFchIg=)
2: tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa (hash: he0mpoKaeU1kDKUR39rmBxQcGyL1D1fjhdkpr9BtuYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:e5:23:67:9f:d8:d4:7d:7d:fb:a7:05:03:93:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Validity
Not Before: Jan 31 09:00:15 2025 GMT
Not After : Feb 1 09:00:15 2025 GMT
Subject: CN=6873849ba91cc0bf9711df521a24b66d3a5b61b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:af:ed:b5:67:c0:7e:32:b2:81:d2:0b:2e:
3b:aa:73:b1:87:55:1f:86:95:ae:69:2f:bd:48:a8:
82:7a:2b:d7:ad:d2:6f:44:7b:e0:a1:12:33:c7:c4:
31:46:26:1c:64:09:31:f2:3b:85:cc:f1:a5:b6:db:
29:3c:ab:64:64:54:6c:ec:8e:ac:98:bf:36:ec:62:
6a:ba:dc:6b:3b:a1:c8:a5:73:fe:c8:83:26:86:0a:
b6:35:73:85:38:bb:ec:04:5b:80:9f:b5:ee:51:13:
17:48:b1:b7:57:61:25:d5:b8:f2:59:4f:8b:5e:6b:
36:4b:1c:9c:4e:b2:0d:0e:7a:8a:9b:2c:76:8c:c8:
92:36:aa:77:19:af:70:2c:ec:8e:4d:90:95:76:fb:
10:b4:81:18:eb:35:21:26:a1:86:f9:72:0a:33:a5:
98:ee:94:bb:79:b2:8b:2d:66:22:e2:07:54:37:6f:
d9:d4:bc:72:34:16:31:e6:25:a2:27:c5:de:34:28:
3b:9e:37:12:06:e7:d6:c9:db:1b:2a:7a:2b:8e:2a:
f7:df:4b:6d:4c:fe:27:f3:0d:24:27:99:ef:fe:ac:
64:90:8b:ba:31:59:6f:2b:34:cb:e1:ed:77:67:79:
09:d3:ff:f3:22:99:a7:f0:32:04:b1:b7:0a:bf:a5:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:73:84:9B:A9:1C:C0:BF:97:11:DF:52:1A:24:B6:6D:3A:5B:61:B7
X509v3 Authority Key Identifier:
keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:68:67:a5:53:ef:74:f2:b1:5c:f7:45:82:54:b8:d5:c1:3a:
83:8c:ee:9e:d1:ad:71:36:e2:d7:44:29:9f:ef:23:75:f0:4e:
03:54:ff:6b:8c:e7:44:42:18:f6:c8:20:ad:50:35:ec:3f:94:
62:92:4f:df:7f:c6:d1:10:ae:2a:6e:01:db:16:b8:6b:87:6f:
59:69:55:98:6d:82:79:bc:ba:1b:f0:7b:79:5b:24:6d:aa:f9:
0d:ea:e4:9e:aa:65:31:31:9a:27:4c:0e:2d:90:25:11:4c:f9:
f4:fb:7d:3a:d7:2f:a6:74:4d:62:ff:fe:3d:40:c7:25:d7:48:
87:09:34:36:99:d3:1e:33:69:ba:df:73:a7:c1:80:1f:16:2f:
db:c1:d1:4c:61:e0:cf:fa:2c:31:25:c7:a7:b1:dc:73:c0:1e:
73:03:66:d7:7c:d1:e2:4f:62:50:2b:67:a6:6b:81:89:72:bc:
0b:65:33:06:3a:d1:95:25:2d:fb:6d:27:e8:b9:b6:46:08:5d:
8d:aa:42:94:65:70:0f:51:f5:3e:42:03:93:a4:48:67:26:2a:
49:a5:53:c4:c6:c5:7a:66:54:69:f3:f6:da:cb:88:10:8b:93:
80:94:cb:41:d6:6e:59:fc:7e:7b:6f:11:95:70:d5:95:19:d4:
99:de:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:41 2025 by rpki-client on console-fra.rpki-client.org