Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
File: GiynpYOySXw2fp6G3rect6c3Wkc.mft (raw, json)
Hash identifier: 44Gu2dEUFX2kJCuF5uEalJ7ts9SyeaZKeXnBjYHuo2U=
Subject key identifier: D0:60:AC:01:DC:62:00:1A:44:B4:6E:EB:57:E2:CD:10:D2:D7:43:BF
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 0194BB6061FC6075A49B3F2F8B46BA67376A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
Manifest number: 0AC1
Signing time: Fri 31 Jan 2025 08:00:43 +0000
Manifest this update: Fri 31 Jan 2025 08:00:43 +0000
Manifest next update: Sat 01 Feb 2025 08:00:43 +0000
Files and hashes: 1: Btc4qpdT0aRzIHC1dA2Swul-oTg.roa (hash: uKGbMNZQlHtPafIv0wdS9IBOfkHQ7RxwMz40Kx+7kY8=)
2: GiynpYOySXw2fp6G3rect6c3Wkc.crl (hash: 5Gz+bjRt3H14FPrxmn9yhkOWpWOHiuvaxgnWKJ38Nks=)
3: LowqF6jNQcP5gUuUZPzdzSTRQ_E.roa (hash: MaL24Dedevc8MXN5LlmhfVbJ0dnqBAZxBiWzlel5CFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:61:fc:60:75:a4:9b:3f:2f:8b:46:ba:67:37:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Jan 31 08:00:43 2025 GMT
Not After : Feb 1 08:00:43 2025 GMT
Subject: CN=d060ac01dc62001a44b46eeb57e2cd10d2d743bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9e:e4:f0:5b:7c:81:4e:e0:98:5c:2f:a3:0f:
42:92:36:13:99:1e:ef:7e:55:8d:d6:ac:e8:68:99:
e8:6f:b7:a2:f3:dc:4d:68:70:6d:74:65:0a:7d:72:
c5:ca:0a:b4:30:9b:02:34:b6:72:3d:5d:41:37:5f:
57:2d:f6:10:df:38:4f:25:e1:40:b1:eb:16:13:5d:
65:51:85:72:07:43:97:35:b5:a1:3c:53:6a:6b:35:
7c:76:93:b7:2d:d9:e0:fa:b8:b4:4e:9f:0a:0f:88:
bf:7a:af:2c:e8:34:1a:08:66:05:9e:82:0f:86:37:
f4:c2:a2:4d:ef:8b:47:a7:23:99:5e:88:0f:24:f8:
cf:21:06:7a:d3:36:35:63:db:cc:1b:a1:16:4e:b4:
d3:63:e1:f2:9f:94:89:61:2d:83:ec:08:3f:b6:55:
34:dc:90:7c:c5:d7:b1:8e:de:5d:22:6c:b2:65:00:
4b:17:4e:84:c1:10:43:cc:56:14:b0:14:38:1c:95:
27:02:8a:c7:ce:e7:46:fc:b2:95:a9:73:c5:2b:8b:
63:42:52:c4:ca:ce:32:f5:80:06:53:83:7a:49:f9:
2f:71:4a:d4:ca:04:06:c2:e8:c3:5e:6b:57:75:82:
a3:95:6c:cc:73:8d:56:7b:8c:73:4e:24:27:04:32:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:60:AC:01:DC:62:00:1A:44:B4:6E:EB:57:E2:CD:10:D2:D7:43:BF
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d9:dd:cc:88:ab:d1:34:1d:a7:1c:72:96:aa:dd:ac:4e:ff:
0e:bb:e0:ff:a1:15:3c:c7:84:8e:39:62:f0:57:aa:44:6b:c8:
96:f0:b3:a1:00:e9:a8:ff:fd:2b:7a:47:5b:9b:01:90:cb:10:
9f:8f:70:7e:56:66:44:f6:20:7a:6d:36:f6:a8:4f:e2:36:a2:
29:f0:c9:99:78:77:55:84:f8:f5:ec:11:f9:2f:e5:8d:ac:15:
1b:ab:00:39:0b:72:48:51:49:91:a1:92:27:e0:75:0a:6d:60:
ac:74:60:07:d7:1e:62:df:30:8a:7f:20:4b:e9:b3:5b:40:b2:
50:67:97:67:e1:0c:3b:57:7d:03:be:2d:60:75:97:57:4e:4e:
54:93:ec:f6:c9:94:2f:a8:54:a2:09:fa:b8:b3:75:dc:53:c7:
25:a3:c0:a7:00:47:5b:7b:65:3a:17:50:11:ec:4a:8d:4c:2a:
73:a3:52:d5:10:c1:89:e2:4a:44:32:53:73:4d:61:c3:bc:a4:
f3:ba:b1:20:4c:7d:b1:29:11:80:c3:66:86:ef:7f:85:55:34:
b5:87:bf:16:5d:84:61:da:3a:9f:49:76:cf:f5:5a:7c:da:d9:
51:06:98:e9:e2:35:39:2b:f2:d4:15:d8:a1:72:84:9c:0f:33:
14:cb:d1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:10 2025 by rpki-client on console-fra.rpki-client.org