Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
File: GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json)
Hash identifier: V4yXkJBTVPLEjmVkBcQnpbbctYEte1D6uTuz6RQSU5Q=
Subject key identifier: 74:A2:E3:6E:82:B6:F9:88:66:31:1C:24:81:B4:DC:B8:34:01:0B:F9
Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
Certificate issuer: /CN=1950f74530243a64b11bb232c038d574e7fc4d20
Certificate serial: 01951135323A68009F9F070699835CD7DCC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
Manifest number: 073D
Signing time: Mon 17 Feb 2025 00:00:53 +0000
Manifest this update: Mon 17 Feb 2025 00:00:53 +0000
Manifest next update: Tue 18 Feb 2025 00:00:53 +0000
Files and hashes: 1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: l1mmCiymaKl+wYovhTITH+8pCI4WiJ76ebrZs00uTJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:32:3a:68:00:9f:9f:07:06:99:83:5c:d7:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20
Validity
Not Before: Feb 17 00:00:53 2025 GMT
Not After : Feb 18 00:00:53 2025 GMT
Subject: CN=74a2e36e82b6f98866311c2481b4dcb834010bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:62:74:b3:73:09:b0:dc:78:c0:15:4f:93:
b8:68:b6:76:d4:ae:0e:36:70:af:ee:be:e3:5e:97:
9c:b2:c5:b1:44:6a:a3:c3:2e:e0:81:82:d2:7f:ff:
79:be:de:59:4e:13:ba:78:6e:4b:3a:43:eb:28:d5:
6c:43:46:a2:2d:23:21:d5:af:f3:5d:45:60:29:7a:
1a:d1:ca:ed:4d:93:21:ca:2b:60:d1:05:32:66:16:
51:e9:c6:c8:9a:07:04:67:7b:88:8c:f1:1d:43:35:
d0:60:ee:d6:f8:dd:a4:fa:a1:51:c0:d1:8b:77:4f:
03:75:57:3d:af:1a:90:e3:32:dd:29:ec:3c:e3:b4:
ad:91:62:07:c0:21:0e:00:93:f5:86:35:4d:13:7a:
1b:35:cd:01:2a:9b:2b:3c:42:1e:0b:00:4d:fc:05:
4c:cf:b4:f6:62:be:73:c8:ac:8e:57:a9:e3:28:b6:
85:e5:14:64:9f:06:a4:c9:30:33:e1:58:d1:19:36:
d6:92:42:b0:4e:dd:dd:51:34:f3:b7:9f:1c:40:61:
10:52:29:4c:91:80:52:e7:95:14:ce:37:96:c5:5c:
cc:8b:43:b9:fe:f8:25:db:5e:6a:04:ef:7b:c2:d6:
06:bd:c8:fb:f1:df:51:2e:08:99:fd:e2:98:00:a5:
32:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A2:E3:6E:82:B6:F9:88:66:31:1C:24:81:B4:DC:B8:34:01:0B:F9
X509v3 Authority Key Identifier:
keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5b:98:12:21:ff:d9:cc:d7:52:39:97:c9:50:1a:32:3c:4f:
10:b2:15:6d:9e:fd:12:0e:e1:0e:37:79:03:6d:ef:9f:d9:ec:
e7:6c:58:4d:dd:b7:55:0c:af:65:6e:31:bd:a9:b6:49:8f:65:
00:d7:a1:b4:bd:51:58:23:54:a1:36:2c:54:9a:b7:d3:fe:1d:
81:8a:30:77:41:8a:93:81:c7:09:69:75:9b:10:b4:77:74:9f:
59:ba:f0:02:7f:b5:a1:e1:78:36:b8:12:27:8d:ad:64:d2:a6:
a3:20:34:56:92:82:09:fd:7c:26:e6:5e:a8:37:75:26:71:4b:
a1:1f:a2:a4:fa:b0:ce:9a:97:3a:26:5d:fa:81:fc:2c:16:c1:
ce:57:88:f8:59:53:f8:b3:e6:2b:7d:5c:1f:7e:49:e3:76:d2:
b6:f7:69:45:77:ed:21:00:47:ce:d3:0b:5d:20:a2:8c:71:d7:
58:2e:e4:e8:67:91:08:55:76:e1:f4:80:bc:3c:0e:be:ab:b6:
27:a4:78:aa:68:cf:0e:5b:3b:2a:d1:fb:84:02:1e:d1:b3:3a:
38:8a:ea:df:ef:02:85:5b:e9:5f:b8:7f:43:cb:d6:f3:29:b3:
da:cc:3e:6c:60:26:e5:2e:60:42:e3:7d:a6:06:5a:f0:2c:7b:
a6:71:7c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:05 2025 by rpki-client