Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
File: GxUEuvgu-OsK5QivQLY442YKVIg.mft (raw, json)
Hash identifier: l9Xn/PlEceAhD8MmtxMWGu7S4xjUGrcM3A2YYIP79+w=
Subject key identifier: 55:26:87:62:4D:72:8A:D0:CE:D4:54:70:98:D4:1C:60:E5:18:08:79
Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Certificate serial: 0195127E1670FB08C67134BD716257C975D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
Manifest number: 0C9E
Signing time: Mon 17 Feb 2025 06:00:07 +0000
Manifest this update: Mon 17 Feb 2025 06:00:07 +0000
Manifest next update: Tue 18 Feb 2025 06:00:07 +0000
Files and hashes: 1: GxUEuvgu-OsK5QivQLY442YKVIg.crl (hash: k8Npj/E72w4YQ1wF/E0OyyG0l1sneQSRzHZoweoKf/w=)
2: tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa (hash: he0mpoKaeU1kDKUR39rmBxQcGyL1D1fjhdkpr9BtuYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:16:70:fb:08:c6:71:34:bd:71:62:57:c9:75:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Validity
Not Before: Feb 17 06:00:07 2025 GMT
Not After : Feb 18 06:00:07 2025 GMT
Subject: CN=552687624d728ad0ced4547098d41c60e5180879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:3e:02:bf:46:54:ad:64:46:5a:26:57:ed:
62:33:7b:cc:5d:0b:a5:a2:d9:0a:54:0b:ad:96:2a:
65:b2:ec:d8:76:0d:50:d4:16:91:0e:0e:24:21:d2:
39:96:78:cb:ad:db:59:b7:81:48:07:99:f5:25:93:
fc:ce:74:50:38:3b:0a:25:e6:7d:27:7f:59:bc:2a:
62:58:a9:1d:d1:4d:71:1a:be:ce:68:43:3b:67:82:
97:fd:54:58:27:30:b4:58:0f:92:15:70:83:06:1f:
4a:cf:38:d1:6c:fe:91:12:1f:db:fa:26:4a:c4:99:
32:8c:af:d9:f9:44:2c:01:79:71:7c:4f:63:91:85:
7d:66:ef:2b:74:1c:08:b6:70:c0:36:46:70:f2:2a:
56:23:54:b1:d4:20:4e:7e:c0:6d:85:08:09:16:51:
9e:70:1d:ed:33:b0:88:e3:d2:4d:38:34:0f:7a:3c:
cb:12:38:8a:d6:a4:aa:7b:8b:6e:14:39:7c:98:93:
b1:51:c8:9a:4b:cb:b1:a4:d2:94:55:28:bb:48:80:
ad:26:da:c2:56:63:8a:c9:54:73:3b:42:ad:2a:73:
6a:5e:1b:ec:86:04:cc:0f:85:61:ec:4c:6e:f9:83:
21:a0:c8:00:68:84:14:f8:c8:2b:d4:92:8b:54:a9:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:26:87:62:4D:72:8A:D0:CE:D4:54:70:98:D4:1C:60:E5:18:08:79
X509v3 Authority Key Identifier:
keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:41:44:c9:4f:95:de:49:54:78:d2:df:e1:be:14:91:1c:67:
1d:3b:48:0a:96:dd:75:7b:2b:90:4e:e3:3e:99:cb:85:11:df:
dc:d2:d0:28:a9:73:d0:21:1b:49:5d:1e:75:21:14:17:69:57:
50:08:bf:c0:3d:88:40:45:b1:cc:96:db:de:10:eb:84:ce:a7:
4d:06:48:bd:ef:d8:1a:4b:0f:ad:65:58:96:57:ed:f1:47:45:
21:01:78:f2:25:ca:60:0a:51:58:d0:92:1a:27:fe:46:99:45:
f7:6c:b6:5d:4c:a1:c8:7b:8a:87:de:11:ba:12:ce:11:88:36:
a1:a6:6a:2e:cd:a0:ea:7c:28:80:65:ac:6b:fd:85:20:57:da:
8f:09:f4:3d:99:a3:54:84:3d:83:7f:cf:7b:8d:cd:d3:19:52:
98:6f:71:09:30:7b:75:7e:62:65:dc:c8:a6:fc:bb:41:3d:36:
ee:70:a3:d3:b1:6a:3e:1f:dc:f7:f8:82:f1:4c:91:fd:2c:d8:
40:20:c0:75:e8:04:8d:cb:74:06:b1:21:fc:3e:8c:56:d8:9f:
bb:78:9e:82:5e:70:2e:a6:a9:63:b1:55:2d:a9:b3:6d:e4:a5:
ce:41:f7:24:48:55:f8:d1:39:b5:3d:af:e3:49:61:e7:59:b7:
08:2b:6e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:42 2025 by rpki-client