Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
File: gTPYnAaoocydvDYiAffsVZ1_3Ug.mft (raw, json)
Hash identifier: IG+c8kDwG1qh1TtLfFAVgZN1WhNsvhQb21AgwamMEu8=
Subject key identifier: EE:DD:FE:BC:78:A9:5F:05:94:6B:3B:F6:9F:88:A0:D4:AD:DB:BE:1C
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 0194BC04D6033A46218F929DF850ED07872D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: 6YQ-jnepT6pN_8cKnFx986vpDmo.roa (hash: ADUAxsOhzBp/8FjslBZikiSdync0GB2c0kYbe7uYwHU=)
2: CNmJJKt3ACjx2VO51daqHUFA1ig.roa (hash: GRBxouS17KxIhr3BAOufUKRbPiek0R40LWyYw0NkBpQ=)
3: HahR5soNktUlYKPgZEbE7H3aKhs.roa (hash: lStniR/EONynfdLx+qNvUDgudFR2+K1QsCmoIxTWUXU=)
4: Lmq-65cXmJjYlux89MFz3Iu9Fw8.roa (hash: qmicYrcQm3Rq08O/DhyLzmuk/28w0SgSGaSRkPUSLmg=)
5: VpDc8u2rAhCHY8dw5A-uURm2uTo.roa (hash: TnPUye+699meF5Ik4Elk4nVoV3KO8X7ti0DlB40uigY=)
6: ZkqOfmuhubAXa5wjbsE6j4_ahXs.roa (hash: Hey5kTZ4283sFnXZkMTOrQ0P+6y/gPOLg1iSKQS0uK8=)
7: gTPYnAaoocydvDYiAffsVZ1_3Ug.crl (hash: 1fzwaF3x4c1URauj9MlYvSAaAG3smU7oUtJdx2JFX0o=)
8: j1-fP3sdEayV1bR9GGOFSeW4cN0.roa (hash: z2Cs0c66T/XL7AZnx0VV9qMsM3hsvemjVWPE/YF4p8M=)
9: kgWUcLVwnlHQ9N0edYU-mPTihYQ.roa (hash: Rkf4hqgx8RyOM/raBR82mKj09VXl9DozZJeQyPvjCIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d6:03:3a:46:21:8f:92:9d:f8:50:ed:07:87:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=eeddfebc78a95f05946b3bf69f88a0d4addbbe1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:0d:00:92:64:32:4a:18:94:a5:59:99:4d:
16:7e:5f:6a:ca:c5:d9:c8:dd:5e:4c:b1:02:c2:b4:
42:02:40:49:45:6c:27:ee:de:25:9f:cf:74:7a:1e:
92:09:01:19:6d:05:2e:14:a3:5c:93:7e:1e:0b:9d:
2f:65:55:2e:b6:54:4b:c2:38:5e:09:2e:3d:ab:89:
e4:30:9e:04:52:b6:f6:fe:f3:ce:52:23:07:c3:7d:
c1:0d:73:1a:50:60:3b:cf:38:44:e3:15:c6:9f:0d:
52:81:39:59:4c:aa:8b:62:e4:c9:6a:f4:e6:93:21:
01:95:e0:ad:ac:32:09:4f:44:65:14:f7:77:6d:97:
43:40:aa:32:69:ee:d0:ff:ef:6b:d5:8d:b9:9b:39:
bf:2a:eb:5c:4f:ac:7a:7b:79:aa:6b:ce:db:4f:da:
25:79:2e:76:4f:e0:bc:f5:86:f1:ef:61:91:dd:ba:
51:08:e2:7c:6f:5c:57:51:33:0f:ba:ec:f8:2a:00:
7b:8d:fc:a5:ca:26:e4:ba:19:a6:d0:9c:9a:23:51:
c2:f8:72:c8:8b:72:f1:92:89:8e:57:f8:dc:a2:25:
8d:29:c1:eb:aa:e6:da:81:01:ff:d2:05:27:0d:6e:
fa:c4:04:a3:56:18:93:00:02:17:94:2f:e6:59:9b:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DD:FE:BC:78:A9:5F:05:94:6B:3B:F6:9F:88:A0:D4:AD:DB:BE:1C
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:21:36:10:df:dd:e3:83:4d:6d:06:7e:1f:de:18:42:0f:d1:
a7:45:dd:0b:13:03:6b:e3:49:75:19:c4:be:bb:b2:b5:27:10:
8e:38:09:89:b8:23:63:cd:30:03:8a:81:c7:c0:55:16:5d:4c:
79:10:8e:60:5e:35:e3:de:4b:85:e3:02:eb:79:42:03:7d:67:
62:95:a0:32:45:2c:92:36:e8:7f:ea:ff:9b:a4:d2:3b:37:f8:
28:71:fe:5c:49:13:ec:03:30:5d:33:23:fc:3b:3f:c5:0a:41:
79:bf:ee:98:00:57:62:cc:41:c4:34:07:64:0b:94:d8:73:62:
e8:c9:cd:fe:94:1c:27:30:ea:fd:72:70:25:12:5e:71:c9:29:
74:77:36:64:18:c4:b1:27:be:0f:22:ff:40:37:71:dd:54:58:
2e:ba:aa:71:77:3a:1e:c7:eb:47:b1:f2:27:12:3e:a1:f1:fd:
c4:85:34:81:4d:12:17:e4:69:5b:b2:01:6a:e1:56:0b:f3:bc:
27:8a:df:5d:01:76:15:07:75:02:b0:f5:c2:9e:da:36:b7:82:
47:e2:61:7f:92:93:0a:09:0d:df:36:e4:f3:f9:cb:3e:66:8c:
d5:eb:e4:50:1c:51:89:0d:c3:71:88:db:df:6c:79:70:36:97:
66:c8:0c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:40 2025 by rpki-client on console-fra.rpki-client.org