Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
File: gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json)
Hash identifier: CBpcK14uk6CW8fwBNr3+LQAUFPKjYFAvJggUaReVugw=
Subject key identifier: 24:B7:26:4A:32:84:F9:2F:3B:FE:2E:94:40:E7:49:96:95:BC:55:47
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 0194BAF26F7E9DEC26B23F9C9E39BFE5E0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
Manifest number: 1459
Signing time: Fri 31 Jan 2025 06:00:37 +0000
Manifest this update: Fri 31 Jan 2025 06:00:37 +0000
Manifest next update: Sat 01 Feb 2025 06:00:37 +0000
Files and hashes: 1: 27V8sJJwgIzO1qcIVY_-DZZvf_M.roa (hash: exmmu8c+uCsi0tyx4soqeQL+p+Bunr8jhKFYebbB13s=)
2: bg83CsbAQiTyxHzKc0CBT2sNe1Q.roa (hash: IypY4fWGLD2Ctp5fhCv/SvpdxWW6HbfvIyIXTNzNYXY=)
3: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: wrOUe1pxsauGCA4bw1ZM1cL39VXtijXiCj+zpsrThGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:6f:7e:9d:ec:26:b2:3f:9c:9e:39:bf:e5:e0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: Jan 31 06:00:37 2025 GMT
Not After : Feb 1 06:00:37 2025 GMT
Subject: CN=24b7264a3284f92f3bfe2e9440e7499695bc5547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:78:09:9f:c3:94:e3:09:5c:bc:aa:26:46:
13:9d:c8:9b:99:dc:98:07:65:7b:06:83:cf:df:71:
80:66:e3:4a:81:a6:52:86:bc:15:7d:63:0f:37:4a:
82:7d:b7:62:d2:d5:75:53:45:d9:8d:42:32:6c:b2:
f8:9c:42:61:ae:48:b9:e1:c4:ff:2a:5c:a5:61:36:
b5:03:48:89:44:ce:9e:48:36:77:ba:41:3b:ba:25:
79:ab:7b:c8:e0:e8:87:35:80:e9:20:49:02:86:da:
de:e2:69:1d:ff:9f:40:66:e1:a7:5f:04:d7:70:0a:
b2:f0:57:95:9a:07:b3:b1:16:97:fb:e2:2e:ed:f4:
ae:ce:66:a3:da:70:8a:7f:bc:32:3e:6b:4c:12:f0:
2d:56:4d:87:08:7a:49:34:3f:01:b1:ca:cf:85:d1:
17:7d:e7:2d:37:24:29:6b:28:d6:66:3d:89:a4:2b:
d0:a4:72:25:16:ee:57:55:76:22:80:4a:e0:0e:cc:
46:d1:62:33:00:f6:ef:7a:39:1f:0f:a7:b2:f9:5a:
2e:e9:46:f9:07:78:a3:30:70:8a:6a:e7:b9:63:ef:
69:3d:a9:03:c3:bf:44:22:d9:e7:b8:e7:73:c4:50:
d9:e7:2e:4b:2a:74:b6:ce:85:26:82:02:fb:86:29:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B7:26:4A:32:84:F9:2F:3B:FE:2E:94:40:E7:49:96:95:BC:55:47
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:12:2b:26:ef:c6:fe:91:64:0b:1a:53:65:8c:50:d5:14:b1:
cf:3f:43:03:e0:3d:80:b8:eb:d5:55:a4:9e:94:84:f9:39:79:
c9:3c:f4:9d:49:b4:dc:d0:1c:1b:41:65:bc:d0:20:95:61:b2:
c8:dc:af:21:5a:4a:49:41:86:df:89:52:52:db:7c:61:5c:30:
bc:0f:21:ce:2a:27:01:9e:b7:21:ca:62:9d:56:8f:0f:c8:d2:
30:cd:c9:47:6d:9b:c6:c9:c9:9e:48:bb:1f:bb:d7:bf:10:cd:
e2:6e:07:18:4f:ec:29:c2:ad:3c:a4:87:4d:06:15:80:2b:87:
fe:54:75:48:ea:7f:c0:1a:b3:da:39:0a:53:4a:1d:46:67:b5:
45:0e:49:67:34:87:61:5c:1a:48:90:86:ce:9a:70:9a:ce:d2:
c8:b8:01:d5:6f:05:4d:18:54:8d:ba:af:5b:ab:7c:82:bf:2a:
86:33:ff:33:f0:d3:8e:6c:7f:ca:dc:45:cb:21:2c:c8:41:a8:
ef:4f:e8:93:d9:09:d6:58:58:4a:71:58:d3:16:55:d2:21:1e:
5a:ca:f6:f9:00:be:8f:2d:52:94:08:84:8e:d6:4f:93:19:41:
88:7c:1c:3a:0b:8e:ba:90:88:d5:b3:ae:e0:b4:3f:9a:64:4b:
dc:eb:4a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:57 2025 by rpki-client on console-fra.rpki-client.org