Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
File: gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json)
Hash identifier: vfkLy8lxG/aEAEjTB/nw/Ha1LDFxUduzZ/1vilkkZqM=
Subject key identifier: 4A:1D:28:E5:E0:DB:E0:BE:07:FB:67:0C:AF:DE:53:05:39:8F:3B:9E
Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
Certificate issuer: /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Certificate serial: 0194BB971421C78C986106F0DD513E819144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
Manifest number: 0398
Signing time: Fri 31 Jan 2025 09:00:27 +0000
Manifest this update: Fri 31 Jan 2025 09:00:27 +0000
Manifest next update: Sat 01 Feb 2025 09:00:27 +0000
Files and hashes: 1: cv2xTszOP7j1k8VH8Xq8b77acso.roa (hash: gJcKaSX3/S1aDVSD+NWUNHhQVwYYx7ZgiUJVulKjqVg=)
2: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: Fq32BLmaJKKLwsHsaCxoZDAh9X6j3sYNDX+GnvGyjVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:14:21:c7:8c:98:61:06:f0:dd:51:3e:81:91:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Validity
Not Before: Jan 31 09:00:27 2025 GMT
Not After : Feb 1 09:00:27 2025 GMT
Subject: CN=4a1d28e5e0dbe0be07fb670cafde5305398f3b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:8a:07:1c:8e:65:ec:7f:5b:2d:5c:4c:12:
fb:77:54:cc:c4:f2:05:3b:01:6f:f1:e7:25:7d:fa:
d2:97:ba:43:5f:e0:06:f4:de:26:d5:e1:13:6a:3a:
92:e4:97:18:20:bb:bc:3e:d0:e5:03:68:c6:df:bf:
61:3a:63:d4:85:14:28:04:0a:32:f5:6e:9c:71:91:
18:62:39:67:e5:e6:1c:38:a2:ec:04:4f:31:fb:3c:
bb:eb:a4:90:fd:51:81:0d:c6:a9:fd:c9:73:35:da:
92:63:8e:18:d4:62:ba:de:6f:63:3e:ff:3e:57:d2:
c0:91:95:6f:ea:fd:db:2c:06:c2:1a:5f:e9:3f:9d:
24:3a:c3:08:76:fa:d9:a1:49:c0:d2:69:64:17:5d:
ce:c1:e7:fd:1a:ba:d4:26:ee:a9:74:dc:6e:5e:a2:
08:e0:03:d1:c0:57:56:66:e5:7f:e7:f4:9b:85:94:
a1:7e:82:75:ea:ac:52:2a:a2:aa:eb:ac:b9:98:08:
7f:f6:8b:93:e8:ec:d4:aa:04:cf:9f:20:00:92:7a:
8b:1d:cb:8e:12:ac:76:44:96:de:7a:59:b8:56:37:
fc:08:ec:b0:d9:74:db:27:bc:ed:5a:3b:54:67:81:
7f:c0:2d:1f:f1:3b:83:67:a9:27:16:cc:c5:4e:c8:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1D:28:E5:E0:DB:E0:BE:07:FB:67:0C:AF:DE:53:05:39:8F:3B:9E
X509v3 Authority Key Identifier:
keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:53:83:1d:1f:85:da:ad:c9:09:3e:87:bb:1c:c4:76:0c:11:
55:c8:29:32:0f:9a:a5:21:81:71:10:21:97:a4:5d:16:d2:c2:
39:c9:fb:23:b5:25:7d:96:e4:55:87:f7:71:d6:5e:1c:08:3b:
e1:27:fc:23:e6:06:71:2f:17:fa:83:39:40:2c:77:d1:14:30:
f2:b3:10:51:4a:1c:36:17:aa:b0:f3:7c:cf:54:d7:e7:d3:70:
8f:e4:80:57:42:66:1a:3d:27:9b:18:6c:94:7b:bc:75:4c:ae:
c7:d7:a3:92:23:c8:a9:2c:f4:95:ae:9d:20:02:7b:30:c6:91:
38:37:f3:b9:4b:41:7e:a3:a2:51:72:bc:e4:0e:db:eb:f0:b7:
9d:3c:aa:ff:57:e9:da:a7:02:ee:52:54:f7:67:24:1e:6e:81:
7a:63:aa:9c:db:15:17:8f:c1:36:9a:fb:09:d5:30:31:01:6c:
13:40:eb:d2:ee:5c:0d:79:21:7b:d4:60:64:ca:c4:8d:10:15:
7e:14:b7:0f:10:17:19:2c:ec:51:3a:92:2f:5f:15:73:87:fb:
ff:91:74:17:6a:66:b7:87:64:e3:de:76:f1:8c:d0:a8:a3:ae:
c6:ab:7b:1b:cc:3b:6a:05:d5:01:43:a3:e6:be:ee:53:3f:3a:
75:d7:8c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:14 2025 by rpki-client on console-fra.rpki-client.org