Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File: GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier: 3kEw+WgLMDdf9FE9QUe/PYOQbDUBTxvLaW3qgsf33cg=
Subject key identifier: 40:ED:6D:5E:F2:A8:8A:74:65:4A:C9:26:F9:62:5A:87:60:75:0F:9A
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer: /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial: 0195127E8B3D091BCB547051EF48C1C3FF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number: 034B
Signing time: Mon 17 Feb 2025 06:00:37 +0000
Manifest this update: Mon 17 Feb 2025 06:00:37 +0000
Manifest next update: Tue 18 Feb 2025 06:00:37 +0000
Files and hashes: 1: Ad6-aAH05MI6kkdiGCD95ctRfFo.roa (hash: fVAs8Cty7zb84H/EMD3Y1sNjkv+r8koDIXGOWy5iQEM=)
2: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: iamdF+ASy0LOAKjOf1Qb7ClrCWdmZBRBUwCrpMKL3zA=)
3: MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa (hash: gK5APSFH+TPMOKicKkMlgu3wLez9QxNVfPdLmJNKB6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:8b:3d:09:1b:cb:54:70:51:ef:48:c1:c3:ff:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Validity
Not Before: Feb 17 06:00:37 2025 GMT
Not After : Feb 18 06:00:37 2025 GMT
Subject: CN=40ed6d5ef2a88a74654ac926f9625a8760750f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:97:06:46:58:fb:69:f8:f2:8a:02:c9:94:
eb:3d:7d:82:ea:68:7d:0d:b8:da:88:20:ce:50:e3:
81:79:31:01:17:b3:e7:bf:a5:be:13:4c:f9:4a:e4:
c2:b8:ad:3a:a8:33:40:43:a9:eb:59:6c:6f:0f:f8:
56:64:89:91:12:27:28:45:c4:a4:dd:63:18:44:ac:
e0:36:be:f6:56:fa:e0:d9:cc:ee:60:91:74:1a:9a:
f7:b4:70:b8:b9:50:7d:10:d9:09:4e:33:93:cd:bb:
d0:c3:41:44:d1:e5:3e:79:a2:28:6e:46:0a:47:ff:
d6:2c:87:d1:98:0b:05:6c:4c:cd:68:6a:6e:ee:70:
0b:31:95:64:dd:5e:8b:bb:ad:d9:47:28:49:4d:a1:
fa:3d:c3:62:0f:a9:52:3e:11:a0:71:57:05:85:f1:
0e:54:a7:d6:11:c7:8b:71:58:75:34:03:0e:27:dc:
c3:48:8e:c6:46:e4:94:3d:2a:9a:6d:8f:a9:89:86:
ac:29:c2:1d:21:4d:4d:46:70:7f:c9:9c:c3:71:33:
ec:e5:a2:b6:38:c6:ba:0c:ee:19:56:a9:36:64:fe:
7c:85:71:c0:2c:9f:bd:5d:1f:49:7a:09:4a:be:c1:
89:02:38:ed:be:f2:a0:05:c9:b0:d8:19:5a:0a:a3:
d7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:ED:6D:5E:F2:A8:8A:74:65:4A:C9:26:F9:62:5A:87:60:75:0F:9A
X509v3 Authority Key Identifier:
keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6a:af:e5:a4:b2:cd:a0:4e:82:04:00:8f:a9:ea:bf:71:c8:
74:5b:36:a9:7b:4c:71:a6:76:68:51:35:10:71:93:3c:b6:35:
b0:a4:10:f3:12:d2:d0:ab:4b:e2:fe:06:c4:34:dc:a1:33:99:
a4:65:0f:67:3f:c6:b5:29:5d:c6:58:ca:1d:f2:aa:07:fe:ee:
c2:97:66:c6:57:e6:5e:e2:9b:f2:b4:2b:04:73:80:03:06:07:
2f:7d:a5:a1:80:7c:48:af:e1:40:08:62:6d:ce:5f:6b:0a:e8:
e7:5c:33:d6:e3:ea:08:6f:82:47:98:b0:0f:07:3a:bc:cd:2e:
6d:55:d6:93:68:08:4f:e1:9f:6e:69:63:d3:84:3b:85:25:bb:
08:38:31:6c:b5:4a:6c:dc:7c:11:e1:9f:fd:f9:8c:1e:81:13:
23:1c:38:14:07:74:ad:ba:44:d0:6b:74:85:2e:4c:46:f9:18:
04:3e:82:54:6c:98:44:80:12:9a:31:da:c6:3f:55:bc:f8:f0:
3c:52:05:ae:d7:73:cb:e3:35:a5:66:89:61:05:b9:2a:f9:a4:
6f:7c:98:18:c0:68:23:0c:37:48:ab:ba:9a:97:d0:d6:e7:80:
f4:e2:90:0e:d8:d1:b7:4b:23:f5:ed:96:89:13:b9:d5:f2:0c:
93:02:8e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:54 2025 by rpki-client