Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json)
Hash identifier: 2MZz91qXxcB/+IymHo/nbvimv1HvwFyJAe5dV6q/S2w=
Subject key identifier: 65:AD:46:41:7A:13:94:D6:39:5C:8D:8D:94:BA:0B:0B:57:04:4F:6B
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 0194BAF26E8C15CB3BD549DF0FD0662A7003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
Manifest number: 0863
Signing time: Fri 31 Jan 2025 06:00:37 +0000
Manifest this update: Fri 31 Jan 2025 06:00:37 +0000
Manifest next update: Sat 01 Feb 2025 06:00:37 +0000
Files and hashes: 1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=)
2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=)
3: CIdrqclZnSmjRFuSBAbdKW19zw4.roa (hash: 9geTO1Fm8NuZG2BgvP5/MT++gloTQfJHuTiZpCoTKho=)
4: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (hash: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=)
5: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: Iv9ZaKcG8aF2MsirD0A3K1xQfpO/x0Bb+SLnJElhnQc=)
6: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=)
7: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=)
8: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=)
9: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=)
10: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:6e:8c:15:cb:3b:d5:49:df:0f:d0:66:2a:70:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jan 31 06:00:37 2025 GMT
Not After : Feb 1 06:00:37 2025 GMT
Subject: CN=65ad46417a1394d6395c8d8d94ba0b0b57044f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:38:a7:8d:5d:cc:f2:02:f9:09:6a:03:f2:
a6:2d:ad:90:e1:be:54:da:f0:4f:c8:35:3b:4a:2e:
92:36:5f:d1:e7:c6:75:0f:fd:4a:4a:a9:ff:9c:5e:
8f:da:8a:7c:a9:b8:e8:45:e1:5a:b9:e4:99:ba:5b:
24:a2:c2:1c:f6:a6:fd:77:f8:6e:86:b3:8c:89:45:
74:cc:4d:9c:9b:2f:61:61:f4:af:5d:e8:1e:1c:5b:
0c:e4:50:26:8b:c7:b2:73:24:11:da:e3:f5:0c:7c:
1b:6c:66:71:4a:8b:c3:dd:3c:31:88:98:9c:a6:1d:
dc:27:d1:34:ec:a9:60:f5:46:ab:41:2e:3b:11:bc:
86:7a:43:4b:5e:a4:5b:64:75:cb:e2:5a:4e:2d:1c:
34:cf:d2:d8:80:f3:5a:e5:f6:d9:11:c9:af:d4:15:
c4:2b:d7:19:a4:a0:2a:75:a4:6e:3e:70:fe:ef:37:
35:88:e6:dc:43:c4:3a:2a:cf:0c:29:98:de:38:16:
5f:d1:04:64:07:3c:30:a3:50:5a:b3:e0:ee:58:25:
dd:2e:e0:45:2e:5e:38:2a:a1:f5:3b:b1:86:99:06:
89:3c:fe:40:f5:ee:68:6d:f4:4a:fa:0e:fe:a8:ee:
5a:eb:d1:af:51:7f:df:89:cc:64:27:5a:db:03:c0:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AD:46:41:7A:13:94:D6:39:5C:8D:8D:94:BA:0B:0B:57:04:4F:6B
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1e:60:22:d7:a6:bf:ce:1b:41:34:6a:b6:8f:91:4f:99:7e:
12:8b:f6:99:89:f8:8f:ee:6e:72:1c:21:62:9e:b4:38:d0:a4:
ed:b2:6f:18:54:fe:e2:d7:ce:31:0e:94:69:aa:0a:83:d5:44:
d2:9b:89:a5:19:c3:71:e0:7f:87:4e:74:0f:53:94:92:a4:a0:
69:51:d0:62:57:c9:c2:76:fe:be:90:11:df:dd:88:31:2a:b7:
02:ee:18:45:47:c7:30:11:e5:b1:61:04:f1:56:6e:6e:06:9e:
c0:c3:65:db:98:3d:ea:10:0c:ff:e3:1f:7a:76:77:d4:c1:1f:
bb:3d:bf:66:44:1f:1d:f3:84:8c:d8:c9:5c:6e:dd:4a:81:6f:
a3:87:fc:4d:5a:82:70:5e:2d:65:25:5f:56:17:bb:89:6c:a6:
ac:d2:a6:0f:e3:5e:a8:ab:04:bf:cb:a7:4e:08:a1:5c:64:d0:
bc:f2:24:36:b0:57:8d:36:2a:81:f1:be:82:bb:f5:5c:63:87:
14:26:a4:0b:9c:fb:e2:80:ea:c7:0c:71:07:e7:69:48:fd:75:
8e:37:da:30:ef:a0:d7:a3:26:bb:4f:6e:c7:bb:02:4c:f4:4d:
fe:ca:fc:8f:d1:60:a7:c3:53:a5:d8:01:fd:bc:37:50:e9:f8:
79:7a:20:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:51 2025 by rpki-client on console-fra.rpki-client.org