Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
File: GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft (raw, json)
Hash identifier: lKQ4e0T+lUPQMH9iuz/TDBVZMRfOKn9xNCIWCCwckuE=
Subject key identifier: AD:C2:CE:51:6D:29:A4:83:0F:84:DF:DD:42:CE:FE:23:C8:B9:0B:DE
Authority key identifier: 19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C
Certificate issuer: /CN=1913cb4856821d14cd2e0b767c2931a22c154e7c
Certificate serial: 019510C71F5ACA0BE057A1455A2FD49EBBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
Manifest number: 08E5
Signing time: Sun 16 Feb 2025 22:00:39 +0000
Manifest this update: Sun 16 Feb 2025 22:00:39 +0000
Manifest next update: Mon 17 Feb 2025 22:00:39 +0000
Files and hashes: 1: GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl (hash: ZC2WJJKiRFcmNlb1RBzjjTIB1hhPebUznuuoDdOSKLg=)
2: zvde-1FktXCEIRB3FHyBiaah4JI.roa (hash: 6R+oudRdqFBVe7OQ/+aXtal9Y8TCWwoFCMfYuyQJNpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:1f:5a:ca:0b:e0:57:a1:45:5a:2f:d4:9e:bb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1913cb4856821d14cd2e0b767c2931a22c154e7c
Validity
Not Before: Feb 16 22:00:39 2025 GMT
Not After : Feb 17 22:00:39 2025 GMT
Subject: CN=adc2ce516d29a4830f84dfdd42cefe23c8b90bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:40:0e:22:9d:11:8e:4e:f8:70:54:0a:8c:
c6:70:0d:78:32:95:ec:e2:65:da:ce:37:8b:07:ef:
53:f2:62:41:a7:16:28:83:29:4b:ed:ce:5c:e4:db:
e1:08:64:60:de:db:58:fc:41:8a:88:c4:9b:87:5a:
e9:0a:20:94:60:7d:e8:a0:67:fd:4b:13:8d:a9:ad:
03:4c:fa:13:84:7d:8b:ae:9e:40:8d:cb:7c:7c:72:
96:cc:b8:e9:71:03:ec:7e:46:25:66:83:a2:e8:98:
6f:b0:7a:65:ed:4a:0b:fc:23:1a:0b:6d:72:55:ac:
48:0b:44:df:f2:bf:c7:18:32:8f:04:10:cb:76:91:
df:6b:7b:c4:74:8f:8a:c9:3f:81:e6:e8:e9:98:71:
0c:b9:c0:0a:2d:e7:cb:b9:b7:f7:37:6f:69:51:9b:
27:b0:4e:27:71:a3:04:25:3b:0b:56:8f:21:ea:64:
3c:d4:ad:9b:a0:25:42:78:9f:c4:fc:11:af:ce:ee:
c8:1a:30:01:04:06:16:23:7f:32:6e:4b:b9:b5:68:
e5:ee:0c:49:a9:71:66:b4:ce:f1:d7:a9:4e:ee:36:
79:70:a6:20:4b:33:05:3e:fb:d1:b6:f5:e3:f6:23:
06:ec:cf:29:51:e4:9d:e0:91:42:1f:57:29:fc:41:
3c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C2:CE:51:6D:29:A4:83:0F:84:DF:DD:42:CE:FE:23:C8:B9:0B:DE
X509v3 Authority Key Identifier:
keyid:19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fa:10:8b:16:91:ec:5f:b2:a1:13:2b:41:e3:26:55:5a:62:
7e:fb:f7:02:d5:69:8d:ba:73:19:fe:df:db:81:ab:da:e2:1f:
f1:55:33:32:7d:67:7c:df:3c:b6:a2:9e:22:2c:40:d2:c0:ae:
a1:2e:45:2c:a3:6b:65:4c:1a:d5:76:e4:ca:87:22:07:11:7a:
f8:bb:4b:97:cf:e6:1b:de:a8:24:ad:a3:f3:8b:34:5f:1f:96:
b9:04:ec:28:a7:c5:d2:43:ae:fd:a3:9e:5b:33:a0:15:4b:54:
44:48:ca:58:8b:44:25:f7:e4:c1:71:b1:30:12:96:8c:4a:89:
e8:ce:9e:a2:8d:fe:6d:78:38:38:13:59:2f:b7:a1:a2:3b:28:
ba:3c:4c:aa:bd:99:9c:70:d5:40:5a:e4:33:d3:ba:c7:8e:39:
7c:88:7e:f5:ff:35:8d:58:c3:a2:ba:19:90:94:cf:b6:3e:b9:
80:22:2e:9c:12:62:76:5e:3f:26:71:6c:b2:a7:2b:63:a8:11:
cb:11:a9:27:fe:dc:27:02:c0:8f:cf:13:2c:78:bd:0a:21:70:
0d:5a:87:82:f4:ce:42:46:96:da:b2:cc:49:a2:7d:43:57:e0:
6a:20:a0:79:80:f9:77:75:12:e3:86:96:04:c9:94:c9:31:db:
7e:3a:1a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:10 2025 by rpki-client