Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
File: g1-7knspUGK30KcgR7a0qhsPmyk.mft (raw, json)
Hash identifier: 1sS1x03KRQ1yfZROnpNTac8hGPHCBb3gb72OC4Zq2pw=
Subject key identifier: D7:5F:6B:96:42:27:68:E5:AC:83:BC:44:0C:97:7B:79:2B:71:18:53
Authority key identifier: 83:5F:BB:92:7B:29:50:62:B7:D0:A7:20:47:B6:B4:AA:1B:0F:9B:29
Certificate issuer: /CN=835fbb927b295062b7d0a72047b6b4aa1b0f9b29
Certificate serial: 01951134BC2E57BCA3293589A1C5BB40FBDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
Manifest number: 0987
Signing time: Mon 17 Feb 2025 00:00:23 +0000
Manifest this update: Mon 17 Feb 2025 00:00:23 +0000
Manifest next update: Tue 18 Feb 2025 00:00:23 +0000
Files and hashes: 1: Xz1rL6dK4mQZieGCdBgSZgZHbZ4.roa (hash: gmK1QKVfo/W+VuZX9S2XVVxCk24nsYt3d8ghU+Ddwrs=)
2: g1-7knspUGK30KcgR7a0qhsPmyk.crl (hash: Us5r7bIiVbp86DSvmWkkPCvEYuSDnm521HReYrxwcjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:bc:2e:57:bc:a3:29:35:89:a1:c5:bb:40:fb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835fbb927b295062b7d0a72047b6b4aa1b0f9b29
Validity
Not Before: Feb 17 00:00:23 2025 GMT
Not After : Feb 18 00:00:23 2025 GMT
Subject: CN=d75f6b96422768e5ac83bc440c977b792b711853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:b7:9b:6c:6f:8b:d7:8c:be:7c:f1:55:9d:
74:a2:fc:4a:01:77:fa:cb:09:55:7e:23:1a:36:d4:
cd:15:c1:f2:e4:1a:2c:7e:a4:5b:ca:5d:6e:96:1f:
d9:21:4d:cf:9f:a0:04:0c:e3:c7:12:06:1c:35:3d:
df:aa:1a:6a:26:3d:fd:56:0a:07:e6:d4:78:7f:80:
d1:76:ed:d7:f9:3c:83:95:9e:6c:0d:37:74:72:5c:
70:16:c0:d5:4a:7a:76:dd:d2:3c:b3:7e:d3:a6:00:
43:e6:31:4b:f0:e5:53:42:a7:5d:26:69:1b:ef:86:
9e:3a:58:c4:0c:21:e3:e4:a0:b4:79:3a:c5:e4:6e:
63:56:4f:99:2b:d9:0c:47:71:ff:9d:dc:6c:80:99:
7d:5c:e0:dc:29:49:d9:2c:ec:06:e0:7b:e8:41:3f:
59:f9:80:23:14:62:81:88:74:3a:46:96:5b:e8:ca:
9b:18:91:89:ef:cb:a4:f0:fd:3c:c0:f3:83:e9:c8:
80:de:28:05:50:f0:d0:be:41:69:96:dd:28:cb:1c:
c4:d4:7a:f8:c8:50:b5:94:16:bf:67:26:47:f9:0d:
11:11:83:bd:12:61:ec:c4:59:d5:e2:d4:a2:98:6b:
30:32:9d:d9:0f:3a:45:87:1f:6f:0d:96:86:bf:0d:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5F:6B:96:42:27:68:E5:AC:83:BC:44:0C:97:7B:79:2B:71:18:53
X509v3 Authority Key Identifier:
keyid:83:5F:BB:92:7B:29:50:62:B7:D0:A7:20:47:B6:B4:AA:1B:0F:9B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:62:bf:11:02:ce:3b:a0:4e:71:9c:f6:aa:aa:3d:23:39:fb:
63:82:12:99:4e:6c:88:5a:0d:b3:53:b8:17:96:63:06:63:77:
93:d5:04:99:17:54:1e:9c:9a:74:63:25:67:a4:7d:84:68:b1:
52:44:ba:e7:28:10:e4:c4:7c:18:32:8d:50:99:18:2d:7c:9b:
38:be:44:d7:71:c6:cb:a4:81:9c:ab:38:5d:5e:ff:e8:49:5c:
78:0d:50:1b:54:89:8f:19:55:21:48:bf:e5:07:8d:84:75:5b:
58:36:6f:8a:8c:ff:e1:d2:23:18:98:56:0d:bb:53:49:67:5a:
85:b7:46:b8:13:c7:ec:39:53:a2:3f:17:ff:72:79:7a:b1:62:
d0:17:dc:53:95:67:1f:21:08:79:06:96:07:8d:23:48:51:ac:
54:30:07:22:4e:75:6d:b5:4a:1b:e9:60:59:5a:05:ca:4f:4c:
14:58:b9:8a:37:22:69:4a:f8:82:d6:9b:54:fa:69:d1:25:4c:
95:e3:4b:fd:68:af:5f:95:56:c9:b1:18:23:40:7e:3f:24:28:
27:85:5e:06:af:b3:ab:f8:87:3a:00:d2:25:ba:bb:1f:97:e2:
88:f8:87:f6:bb:b5:6f:62:ce:50:ab:c1:9b:48:b6:61:3a:03:
26:15:b7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:46 2025 by rpki-client