Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
File: gPPzEUyqjpJigXJfcn1gjZM5URg.mft (raw, json)
Hash identifier: p+Su2MaTiYLcwlvM3Eg96+763vtsVF7oTX0yovM0urY=
Subject key identifier: E4:F9:B3:8A:A8:1B:AF:C7:D8:18:52:62:F3:7A:17:2C:2B:BE:71:D0
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Certificate issuer: /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial: 0194C3BE6EF634A7949300F1209570CE9487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
Manifest number: 79
Signing time: Sat 01 Feb 2025 23:00:24 +0000
Manifest this update: Sat 01 Feb 2025 23:00:24 +0000
Manifest next update: Sun 02 Feb 2025 23:00:24 +0000
Files and hashes: 1: gPPzEUyqjpJigXJfcn1gjZM5URg.crl (hash: iQ/J3gSc9j7PuCaBbo1pa+QCTtK91IMiFe9JL7Lxdvc=)
2: qQBsyu_cVKZnC2YtWnBhQBpOfUQ.roa (hash: TjgATufRss8r1iBf8Y/PyScO/pIDEQWkrsAtyOXWrVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:6e:f6:34:a7:94:93:00:f1:20:95:70:ce:94:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
Validity
Not Before: Feb 1 23:00:24 2025 GMT
Not After : Feb 2 23:00:24 2025 GMT
Subject: CN=e4f9b38aa81bafc7d8185262f37a172c2bbe71d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:89:f2:32:89:74:26:5b:9c:75:8c:99:c8:
58:74:df:b4:7e:8d:b8:cc:53:b3:56:81:db:2f:c2:
40:6b:76:94:bf:0b:de:c5:cb:58:b0:c0:fc:58:84:
14:1d:08:4d:7d:b6:74:52:f2:cc:94:5f:c5:50:68:
c6:b7:7d:6c:27:f8:d3:b4:cb:9d:30:11:37:c2:09:
3d:83:c8:61:4f:11:2a:40:f9:42:f9:c2:a8:49:38:
55:14:48:89:ae:62:c2:b7:64:f3:6a:af:c9:72:4f:
dc:31:5e:fb:12:d3:4d:7d:bb:f9:82:80:60:3a:55:
64:b0:38:c3:4f:ba:2c:43:ed:3e:fd:80:34:a1:61:
0b:49:4b:ef:63:bf:00:5d:69:17:4b:6d:ad:d0:04:
c6:3e:e6:0c:d1:79:b3:91:62:2e:16:cf:d3:a4:99:
49:dd:1b:73:4f:e3:a9:34:1d:3b:c4:fa:05:41:bf:
09:58:a6:2d:fb:37:b1:59:40:0f:54:7c:e7:d1:02:
29:3b:4a:47:70:67:d1:c9:89:f8:01:7a:a2:0e:f3:
2f:a2:99:79:4e:25:f1:1d:b5:ad:e4:85:a3:b3:0c:
30:71:d0:e4:85:89:23:07:fa:71:3c:8a:68:dc:c5:
f2:14:f8:a5:ed:0a:f2:c8:ea:fd:a1:cd:ba:12:3d:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F9:B3:8A:A8:1B:AF:C7:D8:18:52:62:F3:7A:17:2C:2B:BE:71:D0
X509v3 Authority Key Identifier:
keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4a:dd:0d:16:5b:43:6d:21:7c:01:61:cd:ba:00:30:24:eb:
80:ad:8f:bb:ad:e5:f2:86:27:48:60:01:50:74:9a:16:50:f1:
24:94:34:59:79:4a:1f:2e:4a:44:90:45:17:4d:a3:61:3b:4c:
a0:99:47:ab:d3:41:9c:5e:33:1c:79:91:32:ff:ae:ce:e3:7d:
11:fd:65:63:fe:af:da:81:da:70:99:74:4d:80:44:b3:ff:42:
2b:15:7a:2e:7c:84:de:3b:51:b9:57:90:d8:b5:2c:d9:9c:9c:
ad:09:81:82:db:0c:6e:2e:8d:ad:c3:3c:5c:4f:ae:3a:50:60:
bc:d2:d9:e6:cb:69:98:83:26:f5:e9:b5:77:cd:5b:1d:76:69:
9d:de:62:4c:91:59:0b:73:61:e8:80:ff:9b:ff:d5:24:ef:de:
26:76:e2:d0:e5:63:d8:f1:58:f1:3c:b0:48:8a:ae:ac:c0:19:
32:10:65:1c:5a:2e:05:93:9d:80:76:ce:8c:f2:2a:61:6e:00:
0f:d3:22:3d:cf:80:14:03:e4:0c:52:2d:48:6a:c5:0a:60:61:
c6:70:3f:e9:00:e5:09:1b:00:52:cd:87:d9:18:9d:ac:6d:2f:
f5:89:ff:1b:09:2b:8c:34:2d:08:26:f7:22:d0:41:13:61:b6:
e8:db:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:23 2025 by rpki-client