Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File: GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier: FGPSj+jWiKN1QBDBgl7F98bsYZxR2itVGegIh8TNz9s=
Subject key identifier: 2F:F8:5C:A3:82:DB:08:CC:DC:4E:8A:C3:A5:6C:75:5B:9E:6E:86:D0
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer: /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial: 019511357FF06E0B3DF579A81A5199E75266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 00:01:13 +0000
Manifest this update: Mon 17 Feb 2025 00:01:13 +0000
Manifest next update: Tue 18 Feb 2025 00:01:13 +0000
Files and hashes: 1: 7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa (hash: q+lzjmvfQiLwsG4m5ztsli480LBdARkn+qQlJRAHsqg=)
2: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: QR/00cEQVM/7W4c9cM3PrnNbPIecZhO/oSR+5g5of78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:7f:f0:6e:0b:3d:f5:79:a8:1a:51:99:e7:52:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Validity
Not Before: Feb 17 00:01:13 2025 GMT
Not After : Feb 18 00:01:13 2025 GMT
Subject: CN=2ff85ca382db08ccdc4e8ac3a56c755b9e6e86d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:61:e1:a6:1e:ff:6a:bb:01:85:9f:47:1d:
bf:93:6e:5a:bd:d0:87:5b:c3:ba:20:1c:8c:de:e6:
84:4e:9e:16:5d:98:27:5d:a3:67:7b:85:52:62:2b:
15:a6:9a:6e:b0:e6:88:43:53:7a:86:49:ab:9c:f0:
9c:b6:bd:85:3b:ca:a9:94:0d:26:f3:1d:e8:a5:68:
b6:cf:3a:94:46:a2:32:d6:ab:8b:5b:39:3a:c2:6c:
32:2b:30:fb:72:57:2e:ff:aa:42:d3:8c:61:e3:ec:
89:0f:b6:1d:c6:b8:a2:c3:88:78:77:70:54:26:7d:
72:b4:d3:82:3b:91:ff:9e:31:6d:b1:b9:e0:d7:a2:
da:47:ae:51:d5:1c:b0:70:27:b3:12:5d:2b:eb:52:
b0:63:8e:fa:76:05:b6:d5:d8:25:5d:70:ef:65:61:
84:7a:38:37:da:59:d6:51:c3:f6:02:91:b9:de:9d:
50:78:4c:f3:f0:3a:b2:0f:b4:73:e5:d5:64:7c:0f:
37:f9:11:12:40:48:72:3e:01:59:31:64:a5:5c:90:
bd:da:4d:94:f2:ad:de:42:c4:d6:a0:c3:76:ca:0c:
00:da:53:f8:15:0c:9e:42:6b:20:9b:b3:81:b6:44:
9f:31:a6:84:04:ad:cc:f4:0a:69:04:e7:be:99:76:
c2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:5C:A3:82:DB:08:CC:DC:4E:8A:C3:A5:6C:75:5B:9E:6E:86:D0
X509v3 Authority Key Identifier:
keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b9:a9:1c:f4:1c:83:2a:52:92:34:28:21:ad:ce:fb:56:eb:
54:46:89:10:e4:64:c5:a4:e5:8b:2f:a4:40:c2:fe:74:dc:ee:
f5:51:6d:3f:fe:8a:25:35:e9:9c:8a:41:4a:05:ae:50:4f:99:
48:f1:57:db:20:d2:51:4b:eb:23:68:73:a9:62:87:93:42:a0:
a7:38:e5:2e:2d:d6:fe:49:4e:32:50:d0:82:e5:46:74:b5:fe:
b0:90:08:68:82:31:99:bf:6e:0c:51:3b:fa:81:94:35:b6:c3:
05:8f:30:dc:39:5d:74:e7:02:77:cd:1a:61:60:84:8a:18:3e:
e0:f5:d7:40:08:97:ba:e8:d0:66:c3:a5:7f:3a:b1:58:d9:81:
81:72:01:54:67:73:2a:e6:e4:29:d3:32:a4:4c:82:9c:21:81:
b6:8b:37:61:15:4e:0a:2b:e7:ae:62:46:b8:53:49:3b:fb:5a:
da:1e:96:91:83:f0:eb:2f:d2:03:75:62:50:f4:c6:50:a2:c2:
b9:2d:cf:8a:df:c6:9f:94:91:95:63:52:32:6a:c5:cd:ee:2a:
a8:ce:9b:31:7d:e2:0e:28:b1:1a:87:9a:e9:86:91:23:d6:d0:
54:ba:e6:f3:80:7a:2f:d4:93:ea:bc:e4:1f:9c:e1:88:8d:bf:
72:01:97:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:45 2025 by rpki-client