Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
File: G_5rmg5omKei6dhNPb9jJ7RT5mI.mft (raw, json)
Hash identifier: mdrPewaajENC4FCIuOP/gjDGv+Yop5ao8Dq66mnQbwI=
Subject key identifier: 8D:A1:3B:7C:F8:A4:36:C6:82:32:22:71:12:FB:25:B7:2B:A8:2A:C9
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 019510C75430A6A03363F58775AAB969C7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:00:53 +0000
Manifest this update: Sun 16 Feb 2025 22:00:53 +0000
Manifest next update: Mon 17 Feb 2025 22:00:53 +0000
Files and hashes: 1: EWj-IKBdi-VQbg6FFbIiaaIj7UA.roa (hash: blruzwC9IPFb7cI8V12vzE/ugdCglrr9S2cLxCpCzJI=)
2: G_5rmg5omKei6dhNPb9jJ7RT5mI.crl (hash: GSOym/x7du7+rJ80zZnrN/L3xXJ1TBeZbsAeXCXifi4=)
3: l5yAXyPGwA9Y5lyLs2yb1MceJsY.roa (hash: AJ6lbq1xzcp35bTjVgiXhAuT5kBSyVNhwmMHHhgVeKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:54:30:a6:a0:33:63:f5:87:75:aa:b9:69:c7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Feb 16 22:00:53 2025 GMT
Not After : Feb 17 22:00:53 2025 GMT
Subject: CN=8da13b7cf8a436c68232227112fb25b72ba82ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:84:0c:32:a6:03:d0:bb:63:d9:e5:4c:28:
b8:19:52:78:12:04:70:45:16:b8:e9:cc:49:90:56:
5e:05:db:96:4c:49:d7:e1:c9:52:47:ee:97:3a:88:
6f:41:fa:59:7b:0b:e8:29:69:4b:26:b1:f8:21:4c:
c0:9b:55:ec:71:68:3d:44:95:f6:8a:e0:95:6b:7b:
bb:54:d3:6b:6f:fd:95:48:e5:80:23:69:e7:a6:52:
3e:d2:ec:a8:5d:1b:20:80:6d:a1:34:da:b7:2b:9b:
2a:c1:25:1f:3e:14:f6:27:fa:2b:ae:f1:05:8a:b0:
1b:1e:ab:ae:3b:7e:02:3a:fc:e8:1a:38:ca:11:19:
9c:93:b9:45:7e:88:c0:39:e9:54:a1:3b:3b:a9:36:
43:a3:46:83:50:ec:61:32:98:4c:60:12:32:7e:69:
45:f7:2e:67:5d:b2:b3:6e:d1:0f:5c:11:6d:43:e9:
b5:80:c0:16:bf:bb:e0:24:97:e5:a4:4f:73:67:a7:
5d:63:ea:cc:83:c4:a9:80:8b:78:90:44:5e:2f:e8:
fb:e6:53:60:cb:6a:09:ef:5e:76:36:2e:59:44:b1:
92:f4:12:31:33:a7:b8:47:06:f1:97:9f:e0:d3:a6:
ff:4e:79:b9:7b:fb:a2:14:69:67:f5:44:58:c6:0d:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A1:3B:7C:F8:A4:36:C6:82:32:22:71:12:FB:25:B7:2B:A8:2A:C9
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:da:cd:8b:0f:82:32:ea:c4:d5:e2:47:aa:59:05:2f:85:7d:
d8:a9:f5:dd:60:e0:b2:90:fa:a8:40:f5:63:e4:eb:1a:06:57:
a4:e1:20:5c:1f:60:3b:91:55:ce:60:82:97:49:b5:b8:d0:33:
06:12:b7:c7:2e:32:36:6f:85:27:92:4b:b8:ac:07:2b:59:83:
1d:95:5b:4e:cc:6e:df:61:ec:93:4f:fe:03:27:5e:0d:d2:40:
54:ed:c3:c0:2e:75:da:49:cb:a5:ec:79:d3:3c:da:0a:a8:2f:
c3:a6:1f:b3:cb:7c:e1:99:10:ce:14:91:38:f0:d9:1e:05:12:
1d:a4:5c:1c:94:76:88:34:fb:fe:d3:5b:23:ea:a0:b3:72:65:
74:5b:08:c8:cc:50:1f:65:37:d4:c8:cb:2e:51:64:52:63:4b:
e4:65:b1:b6:3d:a6:93:e6:28:49:0f:2f:66:27:6f:ed:7b:f9:
28:1d:af:ec:4e:98:e5:7f:81:de:e0:43:5f:92:40:83:e6:bb:
79:34:fd:c2:56:8e:d0:53:dd:00:b1:e0:7c:4c:76:7a:a0:2b:
3b:ea:ac:52:b1:45:9f:37:7d:d3:4b:4a:bd:1c:fc:c4:54:4d:
e0:ec:5a:b7:d3:6a:ae:90:7f:88:e5:0c:e3:02:43:ba:54:f7:
8e:a6:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:37 2025 by rpki-client