Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
File: g_j9dJOi_gViIttB7Wkwg7UOzPs.mft (raw, json)
Hash identifier: cm5xtCzCYVivNZIjm3yr0jdtrnLnBFmhdOuBhCQQQ40=
Subject key identifier: 1A:E5:27:F0:3D:97:A6:E5:83:02:0B:77:5D:94:09:42:3B:82:B1:7B
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Certificate issuer: /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial: 019511A2C310FD8831EEF5220BF6F7DE138D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
Manifest number: 0602
Signing time: Mon 17 Feb 2025 02:00:34 +0000
Manifest this update: Mon 17 Feb 2025 02:00:34 +0000
Manifest next update: Tue 18 Feb 2025 02:00:34 +0000
Files and hashes: 1: g_j9dJOi_gViIttB7Wkwg7UOzPs.crl (hash: VSMcNrxfmARWrXKWMm+89c1ALiNE+gUKY9Rgpzd37MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:c3:10:fd:88:31:ee:f5:22:0b:f6:f7:de:13:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Validity
Not Before: Feb 17 02:00:34 2025 GMT
Not After : Feb 18 02:00:34 2025 GMT
Subject: CN=1ae527f03d97a6e583020b775d9409423b82b17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:48:e7:f5:65:3a:9c:b6:a2:98:17:b5:ea:12:
01:ec:5f:0e:9c:2d:f4:2b:0e:d7:df:9a:be:08:43:
db:37:cc:a0:4e:67:07:2f:33:21:6c:a2:f0:48:6d:
50:e0:78:28:26:ab:62:c5:2e:81:b3:4c:1f:da:cf:
0c:de:11:7c:46:dd:e9:a7:f8:23:07:bd:d4:8f:96:
2f:18:f6:1d:eb:18:77:d4:08:6d:8b:fa:8d:91:f9:
4e:56:6e:59:97:ea:6a:3d:b6:98:30:98:1e:cd:e6:
fe:eb:19:3a:10:db:25:7e:b9:80:fe:d0:c2:79:cf:
f1:90:19:52:68:44:09:73:82:dd:77:fc:2c:07:0c:
21:89:2f:9d:c5:36:6e:aa:c6:3c:fa:4f:9b:aa:af:
8e:63:d1:28:49:58:2f:4b:7a:96:18:b8:90:4d:3e:
d9:b0:d2:b2:89:18:bf:f2:3c:39:0c:f8:9e:7b:15:
78:f4:1e:ca:1e:83:f7:44:8a:34:4b:64:d2:d5:73:
a2:71:a2:af:3d:d3:1f:48:80:e6:4e:a9:78:75:99:
6c:ea:17:e2:85:f0:01:1b:37:5f:ee:3b:c8:75:5f:
c6:b4:17:9c:ed:84:d2:a2:aa:3d:91:00:b1:02:13:
0a:1d:2f:9a:3b:23:24:2d:ab:9d:b2:c8:b5:33:db:
d6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E5:27:F0:3D:97:A6:E5:83:02:0B:77:5D:94:09:42:3B:82:B1:7B
X509v3 Authority Key Identifier:
keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:14:14:b5:8b:35:05:22:91:1f:04:d6:ee:52:8b:a2:87:a3:
3e:84:26:4a:31:d7:fa:bb:38:57:fd:04:be:fb:81:88:0a:62:
de:4f:e7:d0:74:ef:4b:77:32:05:cb:a2:8a:a9:a9:5e:de:c3:
5c:50:74:4c:7a:fb:4e:5e:52:c2:e1:30:2c:db:59:c8:88:a4:
a7:b5:c2:0c:74:8e:7f:b7:ec:78:4a:91:36:0b:76:d6:ea:0d:
d4:7e:b4:e2:93:96:bb:03:b1:ba:d7:68:96:be:3b:65:c1:64:
12:7d:6a:66:39:7b:44:78:f5:1c:10:13:2a:6c:32:07:c0:fe:
ec:92:c7:39:ea:b5:b3:8b:3f:07:e2:37:2b:57:10:ea:e2:ed:
22:fb:31:a2:04:a3:d0:01:a1:dd:43:17:d8:bb:29:5b:6a:89:
7f:05:c0:d4:44:79:fc:d6:44:26:84:47:91:d3:9c:c1:32:f6:
f8:8f:86:71:be:40:42:7b:8f:90:b1:e9:50:e4:e3:0a:1f:3e:
e4:92:3c:a7:02:73:26:9e:32:f0:be:23:5b:3b:71:72:81:62:
d3:1f:da:61:5e:48:0e:f0:f3:09:2b:b9:27:de:e6:78:14:4b:
7f:34:7c:31:01:ef:65:f2:0b:2c:66:43:4d:c1:ad:dd:b4:db:
79:5b:29:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:26 2025 by rpki-client