Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
File: gvjR2XuYaTmDMZTuI04MTZW1KJM.mft (raw, json)
Hash identifier: ZAGYr96L12TmS7+kjxy2b1nD45cJbrDTHZhwI5P2Zr8=
Subject key identifier: AB:1E:49:21:38:60:87:F3:29:DE:DF:BC:73:98:56:03:E9:96:13:51
Authority key identifier: 82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
Certificate issuer: /CN=82f8d1d97b986939833194ee234e0c4d95b52893
Certificate serial: 0194C4D12ECF13F4DC11D148D035DCB3FDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
Manifest number: B2
Signing time: Sun 02 Feb 2025 04:00:30 +0000
Manifest this update: Sun 02 Feb 2025 04:00:30 +0000
Manifest next update: Mon 03 Feb 2025 04:00:30 +0000
Files and hashes: 1: MxQNfpi-fhkY4RJBYH0rmNMo89A.roa (hash: LDqZG0CpfjjbhzqTlBUwL76WIHLWIHUvF2f/c9xQewQ=)
2: gvjR2XuYaTmDMZTuI04MTZW1KJM.crl (hash: g5Mt/Bn584iFJN8m8ljSQ/aB58I6bnrW4bLDF0jqbeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:2e:cf:13:f4:dc:11:d1:48:d0:35:dc:b3:fd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f8d1d97b986939833194ee234e0c4d95b52893
Validity
Not Before: Feb 2 04:00:30 2025 GMT
Not After : Feb 3 04:00:30 2025 GMT
Subject: CN=ab1e4921386087f329dedfbc73985603e9961351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:92:dd:1f:23:49:4b:4a:7c:6a:18:4e:27:
b2:a0:78:91:d1:a1:2e:ae:bc:59:fd:05:06:c5:62:
40:c3:4d:de:af:99:7d:71:d7:46:ef:60:c6:9e:f9:
be:1b:a7:1c:33:ff:6b:95:88:48:84:f7:9e:62:4a:
d2:d0:6b:68:f7:63:b5:c5:df:ae:fd:b2:50:4e:ea:
b4:7c:0f:f0:88:f0:30:45:f8:d5:72:fc:71:18:fa:
ac:ef:f3:9c:5a:88:e1:47:3c:53:76:08:2f:c5:61:
24:ce:8a:6e:fd:de:b8:c4:20:be:a3:5d:1a:f6:63:
66:25:78:99:af:20:8c:68:0c:25:08:ea:03:f7:65:
42:db:a8:a6:e7:ff:bd:06:fb:b8:68:31:0e:17:65:
d4:8a:61:4f:51:e3:20:79:9c:53:fa:e0:2c:2d:50:
61:ad:f4:64:c9:47:77:ed:46:98:cd:8a:98:2c:d4:
2d:ef:be:27:1b:89:d8:b7:3a:d0:fc:2d:73:d4:e0:
a3:f2:18:a0:d6:cd:27:f4:d5:0b:7e:7a:4e:79:2b:
92:b9:17:98:e5:00:5a:f7:23:a6:df:0a:2a:83:ba:
0c:31:0a:27:8e:4c:54:50:4c:67:a2:d0:5c:c8:6d:
48:ee:cc:e8:be:4f:02:f3:ee:87:9c:89:21:f7:08:
bf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1E:49:21:38:60:87:F3:29:DE:DF:BC:73:98:56:03:E9:96:13:51
X509v3 Authority Key Identifier:
keyid:82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:01:99:1e:12:d8:e2:32:3f:2e:f6:47:22:7b:43:c9:88:b2:
80:27:64:bb:2e:ea:e8:d9:02:a8:a0:ec:3c:58:67:f2:52:9c:
fa:0c:73:c9:19:51:20:33:02:a0:41:2c:6f:7b:7b:36:f2:ac:
1c:23:85:15:38:6b:21:41:e4:09:e5:13:2e:76:6a:02:8a:f4:
d8:82:3f:0c:8e:89:5a:ee:87:40:8f:ac:a0:63:2e:ee:77:d0:
6c:b0:54:18:c6:3f:e1:53:4a:fe:a1:f8:64:f2:2a:57:c0:f4:
61:72:2b:97:c7:05:51:8d:19:90:df:2e:f9:da:29:9e:2b:0c:
f5:d2:d5:9b:a9:4b:3d:05:46:cc:5c:2b:49:f8:1f:b7:ae:75:
76:f2:8e:17:a1:82:fe:74:57:a4:61:ca:fa:c9:f6:58:d7:c3:
29:28:f2:3f:23:a6:f1:86:ed:a7:5d:bd:35:e6:93:93:5b:a2:
44:c1:f7:3e:f4:cd:40:a1:55:5a:04:2e:3d:43:a5:8a:77:a6:
4f:22:31:86:c8:5a:81:6c:0b:a0:ea:74:d7:ce:39:e7:68:c5:
2e:94:68:9d:09:cc:09:6f:6c:a6:21:e4:ce:b4:a1:dc:5b:71:
d3:b1:9d:fc:0e:1e:69:b7:09:fd:98:34:a4:87:a5:23:dc:f8:
90:13:63:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:34 2025 by rpki-client