Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: GvVI/Fd9WsP4KJvK3NOjqsHe7EYbBRhO9TfOAFi3jJo=
Subject key identifier: D4:23:E2:D3:C8:43:AC:D8:40:55:40:D3:EE:CB:94:1C:28:7D:88:B4
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 0194C50827C85BF91E59DA0998635E8A9AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 06
Signing time: Sun 02 Feb 2025 05:00:33 +0000
Manifest this update: Sun 02 Feb 2025 05:00:33 +0000
Manifest next update: Mon 03 Feb 2025 05:00:33 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: F4F/59oNad+JgU5QdsEOjh31dzff+DZESu1Bw7xEbd8=)
2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:27:c8:5b:f9:1e:59:da:09:98:63:5e:8a:9a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Feb 2 05:00:33 2025 GMT
Not After : Feb 3 05:00:33 2025 GMT
Subject: CN=d423e2d3c843acd8405540d3eecb941c287d88b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:db:eb:bc:e7:49:91:d8:a4:ba:b0:2d:72:
56:fa:79:71:13:6c:f2:9c:b6:19:6b:8c:61:9d:2e:
79:b2:01:14:3b:f6:23:e1:1a:9e:c7:7f:71:2c:6f:
4c:cd:c9:93:ab:e0:ff:1d:c6:71:13:3e:cb:0b:b0:
49:bc:88:cf:99:22:6e:23:20:e7:74:a9:72:81:e8:
e8:86:98:16:59:74:46:fe:75:30:2f:f8:c7:2e:28:
6f:30:20:ec:02:b9:3a:a2:e5:2e:df:63:17:32:7c:
d0:36:f3:9a:e4:2e:8c:35:76:55:dd:63:b8:39:8c:
c4:22:dc:aa:39:2e:a0:cd:db:84:9c:19:97:e0:e2:
50:84:b5:63:7e:f8:81:0b:44:58:1b:0c:5e:c8:4a:
da:f2:4c:f3:ef:da:be:e8:e7:4e:0c:ea:2b:bb:2e:
84:21:31:4a:5a:db:a6:f2:c4:28:c8:8b:d4:78:2e:
b0:ef:fe:4a:a2:23:56:af:4f:2b:e0:17:41:b2:b7:
be:a4:2c:b0:cf:a0:5a:37:c5:58:7f:cf:fe:84:7b:
c8:4f:31:88:4e:d4:37:b5:a4:4e:8c:4c:86:fe:9c:
2d:4c:2e:07:78:9a:ab:a4:b6:c3:6b:14:5c:3b:58:
b3:12:e7:89:ba:74:09:7a:2f:ca:8b:66:05:92:1f:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:23:E2:D3:C8:43:AC:D8:40:55:40:D3:EE:CB:94:1C:28:7D:88:B4
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8f:00:44:98:0e:b7:6f:7b:69:17:45:cb:9a:ac:e3:22:d9:
63:aa:9f:a6:27:5b:ce:1b:21:35:5a:7e:29:f9:d1:52:a2:56:
e2:36:11:ee:33:96:67:b2:a5:c4:f0:80:b0:fb:8f:8b:50:91:
b6:f2:23:9a:37:d6:ed:9a:9c:c8:7b:5b:0d:c3:b2:0f:3c:65:
ee:c4:ff:c5:80:fc:ee:2a:92:5f:22:62:b8:61:53:28:94:9a:
69:f8:33:5d:a8:07:09:79:77:49:bf:e9:34:77:b7:a6:07:f0:
0c:e0:3c:e4:75:f0:c1:7b:28:28:be:79:3f:cd:74:f6:42:ee:
10:61:ff:b7:84:8a:4c:cf:34:2c:e9:ae:6d:f1:ea:21:72:93:
cb:58:37:3e:04:25:6e:f8:db:ff:7f:81:af:d2:4a:6f:d9:90:
aa:e0:c7:c5:91:97:6c:68:91:b4:95:6f:c4:12:7b:1f:95:d7:
ab:6e:70:1e:72:e5:b7:18:b3:74:59:2a:6f:85:9f:77:c0:1e:
90:64:56:f7:ce:2b:f1:72:26:b8:28:d9:ba:5a:07:17:09:55:
96:13:80:bc:95:2d:ce:7d:d2:0d:57:5c:39:5c:88:7e:e0:a4:
05:80:2c:79:4a:2f:6e:9b:c6:01:9b:99:d3:8c:b0:11:f6:f9:
8e:e2:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:58 2025 by rpki-client