Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: b1zQIyGSZVnXfCKb07Wt1vaMEkYC1+Gy3oEHu6GnrkY=
Subject key identifier: CF:4B:05:DC:EA:6B:D2:4D:43:3E:59:DA:C5:F6:8D:79:3C:7B:71:DD
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 019510C743DAC87712062DCB43A9112C6DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 10A0
Signing time: Sun 16 Feb 2025 22:00:49 +0000
Manifest this update: Sun 16 Feb 2025 22:00:49 +0000
Manifest next update: Mon 17 Feb 2025 22:00:49 +0000
Files and hashes: 1: S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa (hash: dO0JekyTej4OeFDJ56mfA43cKJlW68IvyEqWkG9TsF0=)
2: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: qP3OZarWzITYjWrrehpk1v5VjVrIQGOO484ISBHfHL8=)
3: oICpP-Q_PLyVnvdAV2VhmetD0KU.roa (hash: m1kg9eS0Gm6DACbj0bQUXbsWOvls/kNIhGkM6VQRNuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:43:da:c8:77:12:06:2d:cb:43:a9:11:2c:6d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Feb 16 22:00:49 2025 GMT
Not After : Feb 17 22:00:49 2025 GMT
Subject: CN=cf4b05dcea6bd24d433e59dac5f68d793c7b71dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:0c:c4:64:c9:9a:01:9e:35:49:6a:16:e7:
de:c2:63:17:d9:92:21:6c:21:55:80:01:2b:44:e1:
7b:4b:b2:c3:36:c8:d7:a5:1b:23:3a:06:a2:2b:86:
fa:94:98:4b:4a:71:6d:81:84:23:0b:2f:0e:fc:c0:
48:d8:13:d1:07:6a:d1:51:4d:fb:9f:51:f3:ae:03:
8b:93:c0:8d:77:d7:b9:f9:d8:6a:e9:a6:bf:e5:9f:
c8:bc:26:f4:83:77:db:c2:f7:de:b3:78:71:82:bc:
37:f7:5f:f1:89:16:2a:cd:c8:87:76:64:c7:61:97:
a0:71:cd:bb:66:99:69:5f:b2:63:ae:b9:75:a3:cd:
bc:6d:93:70:05:a4:db:0e:0e:36:8e:a1:0b:df:d0:
05:c9:31:8e:2f:c3:1e:2d:0a:ad:11:48:8f:ee:2e:
de:58:77:53:9d:40:f8:3f:9f:db:e3:1c:7c:9c:01:
8b:38:f8:07:c0:8a:4b:13:95:f0:ad:8a:82:58:04:
d2:8a:73:e4:a5:3a:72:fe:ed:0e:7a:7e:82:59:3f:
d8:f4:25:99:94:b1:bf:b6:c5:ee:b1:c6:a6:6d:a0:
e4:1f:58:80:c4:cf:59:e2:a8:5b:0a:8c:e3:e7:0a:
d9:1a:d9:42:f6:ab:e5:fe:e9:6c:ee:82:a0:86:3b:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4B:05:DC:EA:6B:D2:4D:43:3E:59:DA:C5:F6:8D:79:3C:7B:71:DD
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0f:63:c0:25:ab:b9:4f:3c:41:ad:37:f8:fc:1b:85:a5:56:
c5:26:f8:24:88:60:45:cd:39:66:34:39:12:78:e1:6d:13:7f:
63:cc:60:b2:d2:cf:35:95:b5:bc:79:c3:8e:9f:b1:d6:02:8a:
83:44:ef:73:7e:45:c8:45:3c:9b:e5:36:c9:50:72:b4:45:1d:
42:e8:2d:40:df:82:82:7a:13:d6:3c:67:f9:1d:19:4b:69:72:
b7:69:88:73:1e:32:c8:71:7a:48:00:ac:4b:a7:76:95:b8:11:
29:f6:02:5d:16:9c:d0:07:4a:d7:4e:ba:91:d1:b2:5c:06:d3:
fe:20:f6:f4:a0:97:3a:87:de:cd:c9:56:0f:eb:d2:be:67:0d:
3d:40:49:ea:ba:d7:56:44:c7:59:f8:31:67:4f:71:fb:3a:14:
2e:45:62:93:ed:6b:0a:cb:92:04:05:c9:a5:48:08:ca:49:12:
bd:c1:04:d4:8e:ae:ce:c6:cf:99:b9:93:f7:4a:a4:b4:54:a0:
9c:64:b5:f9:f8:5b:37:50:72:46:37:85:7b:bd:1d:61:c0:3d:
82:7b:7a:a1:74:53:7d:f6:bb:31:bf:42:cd:af:22:32:5e:c1:
b7:eb:9c:d7:f4:16:b2:18:9b:ee:3b:c3:c9:0d:25:6b:96:74:
55:f3:ad:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:58 2025 by rpki-client