Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
File: GzVUSY88jdU5wlqdhTSPq4F-2iM.mft (raw, json)
Hash identifier: 8V7gFLymeNrPpIsZfEmy4uXRfizF2E0x2BgP19joLZw=
Subject key identifier: 89:22:E8:0A:79:40:81:A2:B3:5E:80:DF:F2:30:5A:7F:22:E4:8B:2B
Authority key identifier: 1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
Certificate issuer: /CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Certificate serial: 019462C19FF6DC334CD18FC94D1EF9FA642F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
Manifest number: 08F0
Signing time: Tue 14 Jan 2025 03:00:44 +0000
Manifest this update: Tue 14 Jan 2025 03:00:44 +0000
Manifest next update: Wed 15 Jan 2025 03:00:44 +0000
Files and hashes: 1: GzVUSY88jdU5wlqdhTSPq4F-2iM.crl (hash: 3HTY7YmYdG47+G7F2L0LR8dDJOiwBeVQSoqDsx6Hg38=)
2: TJqYJ8PgowX2_0fLvr-J92tN24Y.roa (hash: SyEDMYr3gmhjsEM3DpobXAPSbcOSlzfmvEvbnyrm1xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jan 2025 20:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:62:c1:9f:f6:dc:33:4c:d1:8f:c9:4d:1e:f9:fa:64:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Validity
Not Before: Jan 14 03:00:44 2025 GMT
Not After : Jan 15 03:00:44 2025 GMT
Subject: CN=8922e80a794081a2b35e80dff2305a7f22e48b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:35:c1:36:02:d6:97:d8:92:e3:23:a8:22:
bc:35:59:60:b5:13:d8:7b:f0:0a:c9:79:7c:34:ea:
7c:88:ca:31:6e:66:6f:7f:1d:9b:9f:3e:28:f5:14:
7e:98:aa:e5:9c:31:15:e4:10:57:36:5f:c8:c1:f4:
df:1c:fe:97:4d:52:41:3f:d3:0b:5f:b3:4a:15:b5:
fb:91:c3:5f:c8:2d:a1:af:35:fa:88:1c:1b:b1:c2:
41:9d:a4:ad:e4:98:31:b9:23:42:62:b7:15:71:1d:
bf:82:38:d3:fb:7e:05:41:30:9e:e7:6e:bc:da:00:
e3:d5:8a:cd:79:85:db:82:93:2f:72:e2:ec:fd:60:
79:39:a2:fb:7a:94:4f:fc:57:70:d3:12:f3:33:d9:
c6:62:ad:18:bd:09:7f:80:87:00:d4:6e:53:4f:a2:
be:3d:aa:3b:a9:05:72:1b:69:00:12:47:87:75:80:
ac:26:f8:21:da:f9:cc:31:7f:f9:e4:60:b0:c4:16:
44:65:8a:32:b1:41:58:7c:73:9b:5c:c9:58:45:56:
42:91:6d:f2:93:86:54:3f:c1:0e:2a:b1:00:11:9f:
72:d2:67:59:a1:32:0a:4d:8a:ca:de:ae:85:e2:39:
25:e4:38:30:86:9b:4c:23:01:c7:ce:96:dd:1e:68:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:22:E8:0A:79:40:81:A2:B3:5E:80:DF:F2:30:5A:7F:22:E4:8B:2B
X509v3 Authority Key Identifier:
keyid:1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:11:7b:6b:9a:4c:2f:20:fb:fd:38:d9:cb:60:33:50:c4:96:
54:53:70:73:86:ba:0e:e7:04:90:43:67:92:65:d7:2f:10:70:
70:9d:2b:33:8b:f9:bd:60:e0:28:eb:63:ad:fb:e7:5a:05:df:
1f:30:b1:9f:81:62:0e:e0:2b:23:7a:86:d9:4a:30:10:b5:4c:
59:5f:45:63:a0:c2:68:fb:7a:bf:70:ef:02:57:ca:2f:5f:54:
63:9e:12:8a:cc:3d:e3:23:a5:c4:15:79:cf:65:c6:88:00:e7:
d3:86:9d:f4:0f:a6:e2:05:e3:65:e7:af:18:85:75:61:08:df:
de:a0:6c:f0:bb:30:e6:a6:e5:5f:3f:65:16:fc:11:f8:e0:7c:
a5:ad:af:49:a8:e6:77:52:15:a0:a8:bd:b8:62:10:e5:ba:fa:
33:49:4e:52:8d:86:69:ca:39:51:56:aa:e4:02:20:ba:83:56:
45:c1:ad:c3:4c:c7:55:2c:fa:1e:95:ce:f5:62:28:16:13:5f:
07:bc:c9:40:b4:2e:64:c5:19:8e:6e:57:3e:62:cd:57:df:12:
56:4c:e9:0f:b0:4d:79:d8:fd:e7:9e:ee:ac:84:59:81:84:e7:
06:73:b6:c2:41:ca:1e:8b:7d:d1:b0:95:41:e9:45:53:97:b0:
e3:e8:0a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 14 05:05:23 2025 by rpki-client on console-fra.rpki-client.org