Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File: GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier: ZVJ/thfZQ32nXFstnhy3dpdnODwez6CAo6UwCEEBA7Q=
Subject key identifier: FC:95:98:9C:BA:7E:BA:66:E5:C8:31:30:09:40:08:95:5A:BF:BA:99
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial: 019512105743BD13D2D1B0F8330D479B47AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number: 0654
Signing time: Mon 17 Feb 2025 04:00:15 +0000
Manifest this update: Mon 17 Feb 2025 04:00:15 +0000
Manifest next update: Tue 18 Feb 2025 04:00:15 +0000
Files and hashes: 1: 1MMOey2DFiHGwBuawoDAV5GTR0U.roa (hash: C6gJNXtwf6inO2jQLVsOQct8LTsyFQuwXSbNPT+y76g=)
2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: XvFrtmrowXkITicV9E6w/W4eZPmyDeDjogkH0d2nXC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:57:43:bd:13:d2:d1:b0:f8:33:0d:47:9b:47:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
Validity
Not Before: Feb 17 04:00:15 2025 GMT
Not After : Feb 18 04:00:15 2025 GMT
Subject: CN=fc95989cba7eba66e5c83130094008955abfba99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:41:e2:6f:6b:2e:8d:80:d9:8f:89:c1:4f:
fc:9b:91:41:ce:7f:cb:e0:53:2f:7f:a7:61:44:c9:
26:61:e7:d8:34:6d:3a:d8:a9:2a:a8:cc:8e:5d:37:
66:2f:a8:cc:2f:17:0a:71:b7:14:d8:ad:0f:49:72:
7b:5c:3b:25:a0:e6:56:f8:34:8b:5c:b5:1b:45:f8:
b9:45:ba:d3:17:6f:a9:76:7e:55:22:94:1a:b6:39:
42:da:80:64:b8:62:41:94:5c:2f:f0:42:ce:b8:79:
7c:08:7e:02:74:66:97:1e:45:0e:2c:d5:50:3c:27:
e5:23:09:35:3d:6f:70:a3:52:c5:da:b4:55:6d:11:
6e:91:9e:b3:4c:54:85:98:b0:a4:82:fd:c0:30:33:
36:85:7f:3f:a9:92:8d:f7:8a:e9:40:a6:01:4f:d8:
7a:ca:e4:65:9d:06:1f:59:78:95:ed:55:b6:10:83:
3f:28:9e:b5:16:05:0b:5a:ef:c2:ee:c2:6b:f0:26:
58:5e:5b:2f:32:f1:03:6e:66:34:9e:31:6c:23:86:
7c:80:65:9f:7f:4e:d0:cb:4f:78:0f:c3:2c:37:c7:
ae:30:df:0b:7f:b3:cd:02:98:4e:82:b4:85:63:56:
9f:90:e0:3e:8b:54:e1:d8:d1:69:2b:d8:94:c4:03:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:95:98:9C:BA:7E:BA:66:E5:C8:31:30:09:40:08:95:5A:BF:BA:99
X509v3 Authority Key Identifier:
keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9f:a0:7c:d2:4b:4c:d8:99:aa:1e:25:83:18:6e:c7:56:f3:
c9:f0:d7:10:7e:c0:5c:56:0d:26:37:b3:a8:8f:58:90:33:da:
55:9d:63:49:a3:86:6f:47:74:a5:d4:0b:2b:35:dd:a9:3f:73:
9e:f5:7e:19:a2:d7:d8:5f:b1:ad:5e:7f:39:52:c8:e5:9b:7f:
cf:90:07:99:aa:46:44:99:7b:28:df:92:8a:ac:99:59:26:7a:
30:1b:51:c2:0b:2f:b9:d9:c8:b7:42:7e:21:db:60:8d:3a:6d:
4b:8e:a0:1b:a5:dd:ed:08:78:4b:b7:6a:03:f7:69:84:8b:24:
a9:af:56:54:cd:38:9b:3c:02:80:83:f2:fc:cc:b0:56:fa:c6:
59:74:97:56:da:60:32:70:a5:e1:7b:d5:f3:76:90:4e:02:06:
ea:e4:ab:bb:bb:d4:97:ed:88:e2:63:26:83:c7:83:14:69:27:
d4:8a:61:ee:1e:a1:fa:81:14:fe:7c:e2:a2:43:23:19:33:fa:
3a:6b:e2:bc:f5:13:4d:8c:2a:2b:20:5b:6b:ee:b5:5f:bd:2e:
e2:30:61:13:eb:25:80:f1:5b:64:3d:0e:49:07:2b:ea:36:cb:
6a:ed:06:12:8d:c7:d9:fb:f5:d9:e8:0d:d2:7d:9b:37:c9:c8:
de:9a:56:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:07 2025 by rpki-client