Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
File: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json)
Hash identifier: UMY20jleM1ZqJcLe4Bse4k5X2cgXe5dTAewJG9mhlHk=
Subject key identifier: AA:72:80:BD:2F:5E:1A:F6:60:24:C6:48:6E:57:42:19:C7:11:B4:AC
Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
Certificate issuer: /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Certificate serial: 0195116C400B89CFEDAF734F912CDA92097C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
Manifest number: 016F
Signing time: Mon 17 Feb 2025 01:01:01 +0000
Manifest this update: Mon 17 Feb 2025 01:01:01 +0000
Manifest next update: Tue 18 Feb 2025 01:01:01 +0000
Files and hashes: 1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: QDrBes3C5+V/bX9Vrh3gOUfKRoYpHRQBYvH/M+67NM8=)
2: REh2fJFOUQT0aTDY9FX0qElIo2A.roa (hash: v403zz3pfGBhC2EeF1+1/Ixjaub1EklsKy+XOu6apXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:40:0b:89:cf:ed:af:73:4f:91:2c:da:92:09:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Validity
Not Before: Feb 17 01:01:01 2025 GMT
Not After : Feb 18 01:01:01 2025 GMT
Subject: CN=aa7280bd2f5e1af66024c6486e574219c711b4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:f6:a6:5e:8c:ff:8c:8e:cb:1f:c5:76:1b:
03:b0:11:90:b0:f9:98:3a:a1:74:53:0d:b1:ff:fd:
44:c0:8d:ae:1a:6b:91:20:6e:cb:cb:91:b6:4e:a8:
df:8a:9d:b8:44:58:4e:3e:1d:e5:27:6f:be:ee:d6:
e2:f6:d9:34:5e:7a:d7:e9:bd:54:93:5e:5e:37:76:
93:a6:97:40:be:38:58:db:74:ea:c6:a8:7f:3d:65:
98:33:94:ab:a2:fa:99:79:94:93:e4:57:25:65:c4:
9a:81:f5:ef:c8:85:cb:17:fc:42:5e:91:ba:44:64:
20:1b:b6:a5:b1:e2:08:c6:d1:9d:bb:d5:60:7f:31:
c7:95:a9:9d:d5:87:a7:d0:79:36:fc:49:8c:6f:43:
17:c1:a9:19:f2:4f:1b:4b:85:cc:0f:66:32:a6:83:
63:e0:72:0d:41:4c:4d:d3:74:16:7e:50:db:97:66:
5d:76:5b:66:a2:82:76:6e:4b:6e:07:60:7a:e2:f4:
00:ee:6a:2c:49:74:61:6f:45:f0:f4:cc:cd:39:56:
59:74:46:60:28:be:d2:76:1e:41:e9:49:94:79:47:
f0:f6:d5:af:27:31:2e:22:a9:5b:30:ef:2f:f9:33:
1c:26:e5:d9:31:82:90:1b:fc:39:ca:27:94:c8:8e:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:72:80:BD:2F:5E:1A:F6:60:24:C6:48:6E:57:42:19:C7:11:B4:AC
X509v3 Authority Key Identifier:
keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4d:4c:30:f5:ec:c5:d3:cc:cb:6b:70:9f:a1:cb:70:46:ea:
6d:5d:5d:32:e1:4e:e4:89:00:8e:71:2f:ab:ec:86:34:35:f6:
df:73:db:38:9c:0c:78:5f:1f:e7:04:bb:a1:f7:97:34:81:21:
72:32:86:f8:33:ca:a0:02:56:b2:20:16:a9:68:e1:dd:99:73:
cc:d8:5e:06:6a:4c:80:ab:56:2f:4e:2c:5e:59:85:38:be:16:
c6:d3:84:5b:33:e8:0d:72:1e:30:59:01:98:d4:f0:08:0b:4e:
0a:65:78:ca:45:7a:34:39:f7:04:ef:25:2e:b9:20:87:f3:63:
cb:3e:c2:54:eb:7b:5e:69:a5:f4:88:8e:b9:c2:f1:58:26:2b:
6e:25:4e:94:dc:67:eb:05:75:eb:83:07:da:cb:73:0b:35:6c:
7e:00:05:f9:9e:4d:91:63:55:87:3c:b6:86:ac:86:f9:90:22:
5d:80:fa:ff:5f:08:f4:37:82:db:f9:e0:2c:0e:47:0c:39:2c:
fc:12:e3:c0:b4:8a:33:c4:f7:86:a2:ea:a6:e8:5c:56:cf:3f:
bd:aa:51:df:d6:85:e9:26:a4:34:2f:02:50:3e:64:17:8b:8e:
15:3f:a4:07:51:3d:16:d1:70:71:e5:c9:f2:bf:cd:ad:a1:9b:
ab:d9:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:14 2025 by rpki-client