Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
File: gvWThvzeWW90WQde3qTXTBmwHKI.mft (raw, json)
Hash identifier: YjAifoCNIoO38//ZQbnqrOMXustDe7SRkjMbApncs+8=
Subject key identifier: 57:B0:EC:BC:76:B0:4B:5D:BF:34:3D:35:04:75:C3:C3:0A:4E:46:6B
Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
Certificate issuer: /CN=82f59386fcde596f7459075edea4d74c19b01ca2
Certificate serial: 0195116BAC75709ABAC3D372F6C20CAB0314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
Manifest number: 06F4
Signing time: Mon 17 Feb 2025 01:00:23 +0000
Manifest this update: Mon 17 Feb 2025 01:00:23 +0000
Manifest next update: Tue 18 Feb 2025 01:00:23 +0000
Files and hashes: 1: MVRm2B27-mtawpjQijtz-fTQOKU.roa (hash: TjDlm71DJPQeofi//IsXEPB4VT8uuUFQlFrO0LSDhhk=)
2: gvWThvzeWW90WQde3qTXTBmwHKI.crl (hash: cBAHdQrGLsLOhI0OTwMSKiB135wJ5F3GCpfGIvg8wMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:ac:75:70:9a:ba:c3:d3:72:f6:c2:0c:ab:03:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2
Validity
Not Before: Feb 17 01:00:23 2025 GMT
Not After : Feb 18 01:00:23 2025 GMT
Subject: CN=57b0ecbc76b04b5dbf343d350475c3c30a4e466b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:21:88:f3:9e:2c:1b:5b:89:45:e8:b2:fe:
3b:2b:02:84:53:15:fd:73:84:dd:13:0f:03:53:72:
a5:f3:d0:0f:0b:29:74:a5:3b:b2:a9:47:79:24:26:
01:51:6b:bc:15:ee:9c:bf:9b:ce:e2:e8:5c:38:81:
83:e5:64:48:a9:9d:c4:b4:17:d1:3a:e7:cb:26:1b:
24:30:e8:9e:c4:c9:ba:8c:6d:ec:c6:25:16:b0:6f:
b3:5f:e9:7b:6b:6b:51:55:15:7b:08:5b:80:c3:74:
b6:0d:c4:3e:18:8d:24:b4:38:db:f5:77:78:6e:ab:
b1:27:b1:37:4a:e3:52:ea:71:cc:b9:93:da:d2:a9:
73:80:5c:8f:18:4e:94:f9:94:e2:5b:90:0f:8c:68:
40:7b:21:2b:3a:46:68:95:54:4e:22:f0:20:df:9c:
0e:5f:8a:62:7f:83:84:56:9d:16:93:a1:89:76:5e:
16:25:14:07:b6:c3:b9:9f:32:b0:68:9c:53:41:c5:
37:e4:b8:f8:68:6a:75:1f:4f:ac:6e:d8:32:4e:a8:
dc:8e:4f:e4:f1:17:0d:bc:8e:1e:a8:91:dd:5b:3b:
8c:ea:65:5e:55:a3:96:33:f5:7d:a5:e8:0f:18:85:
8f:fb:15:fd:a0:d2:02:1d:72:f4:4b:0c:01:11:70:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:EC:BC:76:B0:4B:5D:BF:34:3D:35:04:75:C3:C3:0A:4E:46:6B
X509v3 Authority Key Identifier:
keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:df:b2:5f:22:13:b0:8a:0c:8c:31:bb:bd:25:34:42:fd:bc:
ff:f1:c6:e3:c5:9e:4b:cd:76:55:ef:f4:41:4b:81:6d:84:73:
26:b5:8a:17:12:bb:60:e7:dc:68:28:5b:97:40:bf:52:48:52:
40:61:8e:5d:9d:03:d6:88:e0:9c:be:9c:2d:bb:26:8e:a5:55:
83:fd:4c:54:cc:20:92:26:dc:0c:53:46:9d:ae:27:1d:ce:02:
5b:5c:71:27:ce:04:00:7d:89:a2:c2:c6:4f:9b:30:7a:cc:9f:
e8:85:76:73:8e:31:2a:45:9a:b6:a2:8a:36:78:7f:aa:81:fd:
0e:5e:fa:13:9d:0f:3c:1f:08:e0:a8:8c:ac:60:4d:16:1d:97:
61:44:5e:b3:d1:6d:95:49:9f:1a:08:4e:2b:fe:0c:d9:4a:f6:
f5:aa:a7:a0:22:6f:dd:a8:51:a2:10:41:4c:39:f9:d0:25:0c:
5e:35:3c:a8:56:4f:00:16:91:b2:73:01:6c:ba:55:36:c1:a4:
72:5f:74:e4:c7:7e:d8:b4:7e:5f:54:6b:b2:58:b8:dc:11:c6:
94:2a:78:db:1b:b2:f3:19:3f:3d:7d:f9:74:17:9c:ff:ca:59:
95:b0:91:11:da:c8:12:a0:ef:5b:47:6f:3c:63:e9:ba:7b:79:
fc:65:42:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:56 2025 by rpki-client