Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: 3GxsMNS3yOyD32QeIeK/O7T/iQ/3yr9QfRAlvBv3i3E=
Subject key identifier: 76:02:A3:B6:4F:64:46:FF:39:26:56:72:AA:94:47:E7:B6:6C:F1:B9
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 0194C3880EB7165648DD41F0D020FA6E01C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 65
Signing time: Sat 01 Feb 2025 22:01:01 +0000
Manifest this update: Sat 01 Feb 2025 22:01:01 +0000
Manifest next update: Sun 02 Feb 2025 22:01:01 +0000
Files and hashes: 1: Bmmw5vXixRsY3kANpQuOK4eIA78.roa (hash: rzJ9hjFHlMOHuxRaa+oQvNHPU2YWN8Uaq97BKxyXzCg=)
2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: ZwuStRdyR22yYQs4rdnVbXpfHM68eA/uB+YVCLPjXGk=)
3: kRTK8deNmwdVUHDay7LLnI-Srew.roa (hash: OivrfB23rD0qMRXfARzBjENtqmmocXUha7CncOlWhdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:0e:b7:16:56:48:dd:41:f0:d0:20:fa:6e:01:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Feb 1 22:01:01 2025 GMT
Not After : Feb 2 22:01:01 2025 GMT
Subject: CN=7602a3b64f6446ff39265672aa9447e7b66cf1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:48:9d:56:4a:48:aa:13:d6:ad:47:54:0c:
2f:e2:29:86:b9:d4:06:45:79:83:bf:85:84:86:e1:
7b:42:f2:68:43:d6:9e:59:d8:70:e3:d4:08:d6:f4:
c4:1c:fd:cc:b1:2f:35:60:0d:82:28:04:f1:15:22:
fb:73:0c:00:fe:6f:26:08:06:59:0b:f9:78:d5:fe:
2a:26:d0:a9:65:ca:19:cf:ce:8c:53:56:5c:60:6f:
fd:fe:50:b2:3b:03:5f:4e:0e:bb:e1:03:e7:11:eb:
c6:72:ce:a3:31:33:2b:d2:ee:49:c4:6c:a0:97:0a:
03:6d:d1:61:76:a1:60:3d:27:5f:3b:b5:fa:b7:d5:
9b:de:9b:d0:54:e4:04:22:81:07:3a:05:21:54:fa:
94:60:cf:79:cb:78:de:4a:f1:82:43:bb:72:84:3e:
17:16:04:39:87:b3:71:e1:9c:18:95:52:64:26:53:
47:31:5f:ca:cb:1f:b4:61:d9:0d:23:6a:ab:f1:04:
fd:79:f3:1f:07:ef:94:1b:4a:7c:c5:50:35:23:65:
50:11:15:0f:d6:20:df:55:b2:69:3d:f5:f5:15:27:
12:27:d9:c2:62:a5:9c:dd:eb:be:b0:68:9c:24:4b:
2f:e3:19:c8:b7:8b:5c:d3:2d:8f:42:37:fc:0a:11:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:02:A3:B6:4F:64:46:FF:39:26:56:72:AA:94:47:E7:B6:6C:F1:B9
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5d:85:a5:2f:6d:5c:21:1e:db:c2:e5:53:b1:fb:fb:e1:03:
3e:6e:bb:24:81:7b:2e:1e:8f:38:d2:47:3e:4b:71:ea:84:5b:
1f:69:92:a6:92:b2:5f:5b:85:5e:e9:bc:06:70:0c:fd:be:af:
0b:47:25:25:f7:06:33:25:d3:6c:9c:2c:16:73:1d:12:2a:02:
f2:5b:a7:b2:ff:10:7b:4a:c5:e8:ad:15:33:8c:ab:90:4d:96:
35:01:c6:e9:f0:75:25:5d:8b:5f:ea:f1:2b:00:34:17:fe:40:
0d:10:a8:6a:89:00:e7:b0:9d:11:19:dd:37:53:c0:ef:7f:c7:
87:b0:2e:83:04:3f:ca:ee:28:ab:b2:75:70:b0:68:d0:8b:26:
59:2b:08:87:00:03:d5:ca:1d:1e:00:96:fc:69:eb:da:5e:a3:
a6:98:9c:cc:bd:18:83:f1:01:34:29:f5:4a:4a:1b:92:a8:f0:
3b:eb:ba:2e:3b:7e:50:3d:c9:c2:e1:35:45:23:c2:c7:ce:d6:
6e:ef:5d:de:f3:24:8d:a1:2a:e1:4d:75:61:43:08:71:03:43:
58:f2:db:3f:b9:d2:37:d6:d5:1b:e5:0d:f6:80:70:86:46:2f:
be:7e:16:66:00:3b:29:49:0c:fb:be:41:73:92:d5:79:d2:9b:
44:60:ab:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:28 2025 by rpki-client