Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File: GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier: yG8SRbebDDyp35CvexnPRmEKiypAl5zZPXnb0dP3Hts=
Subject key identifier: 0D:1D:65:C8:12:36:2F:7E:63:0A:44:76:CB:5A:37:4B:47:23:DA:4F
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer: /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial: 019511A2B4D3E5863C89F0D4468253227140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 02:00:30 +0000
Manifest this update: Mon 17 Feb 2025 02:00:30 +0000
Manifest next update: Tue 18 Feb 2025 02:00:30 +0000
Files and hashes: 1: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: NoNm+NtC2Lc9l/P7y9+gFJTyC0OAA/+7owvuznAoMBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:b4:d3:e5:86:3c:89:f0:d4:46:82:53:22:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Validity
Not Before: Feb 17 02:00:30 2025 GMT
Not After : Feb 18 02:00:30 2025 GMT
Subject: CN=0d1d65c812362f7e630a4476cb5a374b4723da4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:96:9b:38:cf:68:5b:19:f0:f6:9e:29:b9:
9d:74:70:90:90:6f:e0:bf:bb:28:ea:ad:d1:1d:92:
88:89:f3:5b:4d:0d:36:74:ad:c4:f6:29:87:88:e1:
d6:8f:99:1b:20:b4:7c:40:d7:b6:eb:51:a3:84:03:
f7:71:5b:7e:90:07:f0:13:a1:57:ed:c4:80:33:6c:
c3:c3:46:d7:4f:03:ec:2b:cb:c1:82:3d:d0:d0:ce:
64:87:da:ac:e3:7a:8a:d5:aa:2b:d2:ef:bc:00:fc:
0f:b4:af:70:c7:5b:48:48:4c:4b:de:89:da:2e:1c:
a0:32:2a:9f:b7:4e:26:33:c5:11:33:cc:ff:47:af:
1c:2e:fb:fb:7f:31:b8:a3:5a:16:40:9c:21:4c:f7:
b9:85:dd:ef:2b:e8:2c:b8:88:aa:0e:cc:e9:53:4d:
1d:af:45:20:06:f7:f7:10:a7:42:2d:b2:dd:43:f5:
de:8f:f5:bb:16:d1:87:42:59:c9:24:cd:68:4e:21:
45:ec:b8:70:fc:c4:5b:6f:81:51:e6:10:2b:10:57:
a2:35:03:1b:f1:1e:1c:87:9c:84:e9:49:90:99:f2:
d4:07:ce:db:c2:5f:ab:89:f6:a5:2e:01:e4:15:7e:
83:20:3e:4f:a2:a5:54:1b:92:66:8c:3d:4f:ff:ec:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1D:65:C8:12:36:2F:7E:63:0A:44:76:CB:5A:37:4B:47:23:DA:4F
X509v3 Authority Key Identifier:
keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c4:bd:47:9f:d7:e6:d8:ef:92:4c:c8:01:3d:d7:22:7f:3b:
60:96:2c:c6:00:c1:37:df:b9:c7:8e:f9:e5:c2:b9:eb:b1:53:
62:c0:fc:55:90:d7:2b:f8:57:2e:70:33:f0:4e:a3:f0:56:5f:
67:64:de:40:3f:27:ca:20:23:ad:94:5e:71:30:71:0b:a9:23:
a8:4f:3b:66:b0:47:a2:84:33:e2:2a:00:b6:9f:b2:19:3b:4e:
48:2c:f6:a8:a2:f6:be:2c:64:d7:3c:f1:3e:0c:08:1e:f8:e7:
40:f6:80:92:db:d7:69:85:66:c7:4e:6f:0f:33:3b:15:cb:3d:
a6:5a:08:ee:43:91:f1:88:b5:8c:ea:cc:6d:03:67:26:ae:f0:
83:68:98:fc:b1:6f:2b:9d:d8:93:61:85:1a:b0:a1:48:23:8a:
2a:dd:cd:93:56:16:12:20:b6:4d:17:ad:ce:dd:19:ba:65:fd:
de:8e:53:a0:50:12:a9:e4:1e:73:39:af:98:18:e5:dc:5b:03:
98:4e:a9:72:36:ef:cf:cb:f7:a9:d8:e5:d6:db:f2:9d:e2:45:
7b:93:98:8e:88:1d:19:fc:85:ff:4f:c7:aa:d3:1f:23:a4:64:
24:ac:77:e0:94:a7:8e:d0:e4:63:60:ce:1e:06:0d:f5:28:40:
d5:02:4d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:06 2025 by rpki-client