Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
File: g9gpJjs8X2OWgDf56GP9D9AeeGk.mft (raw, json)
Hash identifier: lFNsnOKQkCbigmX/CzuGB7C5mgkBNL8yNGwMBf2fZOU=
Subject key identifier: 46:99:67:F4:A9:67:C2:AA:61:67:87:CB:43:16:7F:85:BE:3E:8C:CC
Authority key identifier: 83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
Certificate issuer: /CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Certificate serial: 0194C3F5E74264B0BCF2E8D5AB8F12966CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
Manifest number: 0FEF
Signing time: Sun 02 Feb 2025 00:01:00 +0000
Manifest this update: Sun 02 Feb 2025 00:01:00 +0000
Manifest next update: Mon 03 Feb 2025 00:01:00 +0000
Files and hashes: 1: KyWdAlshbj0x1AA1uUx-ZQPp9Zk.roa (hash: WDABDJxxu4elmiEAWMv89c2ma+ic8Jsi7E3Q6vmgEYc=)
2: g9gpJjs8X2OWgDf56GP9D9AeeGk.crl (hash: 5xqE9XmHR+9Y7mhGPXmh7BVSRPyI0R3JV53b3Sb4ByY=)
3: hkjDx-2GOhGp7IPuQmrLBkkB_0U.roa (hash: 4gfS7chtfvvAEHSEdJQzQiuhcE63Qr3QGw7uAtNLDMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:e7:42:64:b0:bc:f2:e8:d5:ab:8f:12:96:6c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Validity
Not Before: Feb 2 00:01:00 2025 GMT
Not After : Feb 3 00:01:00 2025 GMT
Subject: CN=469967f4a967c2aa616787cb43167f85be3e8ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:e9:c1:54:8e:cc:30:65:84:d3:7f:a1:8e:
2e:c2:fc:36:76:af:98:b3:d2:32:8d:29:9e:ed:c6:
0f:db:ff:5c:04:d1:9b:90:50:fe:fe:99:99:48:6d:
eb:c4:06:87:aa:c3:ee:0a:f5:5d:95:36:58:45:97:
23:3a:76:40:26:58:b2:5c:1d:7d:04:53:31:34:a5:
9a:f5:0f:c2:4f:48:28:2b:1b:1f:fa:54:4f:90:8d:
7d:69:08:c6:3d:e2:0b:01:6b:c9:40:51:0e:0b:e7:
fb:28:0d:c7:86:26:65:b9:1d:d8:33:5d:c6:65:c8:
74:54:4e:b6:40:7b:02:f6:61:45:a9:f2:de:66:18:
a3:6c:d3:f2:1f:fe:57:71:b6:38:b4:e8:76:c3:6a:
e4:59:f2:52:38:d2:76:c0:86:49:df:3c:88:90:7d:
f6:a5:0b:2e:8f:13:53:3a:24:b8:93:d2:fb:17:b8:
a8:98:d3:a6:db:a8:8a:ba:bf:fe:5d:6c:35:ae:50:
05:2d:1a:52:41:89:64:ce:3c:fc:00:21:06:8a:ad:
5f:b7:e7:3a:19:ac:ca:f3:fd:70:fe:a8:93:c0:5e:
e3:12:88:0d:47:f5:53:2f:03:5b:d3:94:4a:21:0a:
fc:e8:68:5b:22:24:00:29:9a:b1:aa:73:dc:f8:c0:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:99:67:F4:A9:67:C2:AA:61:67:87:CB:43:16:7F:85:BE:3E:8C:CC
X509v3 Authority Key Identifier:
keyid:83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ad:6f:a3:36:cb:cb:05:44:70:99:de:48:58:4d:4b:76:ef:
04:1c:9a:1a:ee:49:16:9c:6b:a5:19:b0:e8:af:8a:ba:dd:41:
8c:4a:a6:78:65:69:e0:1b:26:3c:3e:c8:da:ff:65:de:01:78:
92:c6:78:3a:fb:7b:8e:77:54:bd:e8:c0:68:e7:2f:2a:54:bf:
cf:22:a0:a5:1f:3b:64:ca:cd:92:3b:ca:a4:3a:34:8b:a0:cf:
89:5a:57:6b:c7:62:90:e4:ab:bc:e2:90:cb:d4:6a:11:79:c8:
5c:b8:9a:3e:89:d6:3d:d1:09:38:66:7e:fe:1d:b4:26:98:25:
9b:7b:4d:10:0e:ff:03:70:30:81:76:b0:26:61:9a:87:cb:f5:
25:3f:a2:d5:58:13:67:4e:5a:8f:45:3d:69:fa:1f:06:b7:78:
3c:6c:ba:9f:dd:ff:5e:27:e1:6b:61:ab:b8:17:cd:0a:18:54:
14:fd:7e:f2:4f:51:f8:5e:03:fb:f1:d3:52:b8:88:3f:af:ae:
0c:83:e3:03:9d:3f:56:e7:86:41:55:45:e2:ea:bd:ed:31:5d:
46:2c:9f:3b:fc:f3:f9:6f:94:ba:a7:b9:f3:c2:03:5e:a3:2e:
20:e7:d9:bc:b0:fb:be:b6:1a:db:36:03:d2:f2:24:33:5a:f1:
0e:9f:ad:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:33 2025 by rpki-client