Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier: HvaLpLZ1q3oidGCrhwDaR2AygG7UkF78sJbpDmH/41I=
Subject key identifier: 3A:85:64:C1:42:3F:DE:9F:AE:5B:C3:F5:55:A2:23:CD:79:CE:AA:D8
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 019510FDF82026AA64B93EC1D98BD25047AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 23:00:34 +0000
Manifest this update: Sun 16 Feb 2025 23:00:34 +0000
Manifest next update: Mon 17 Feb 2025 23:00:34 +0000
Files and hashes: 1: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (hash: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=)
2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: 0kbiTb6PnNu6nICKyCudQXEBIN/qIXJ1mKWhOrtae4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:f8:20:26:aa:64:b9:3e:c1:d9:8b:d2:50:47:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: Feb 16 23:00:34 2025 GMT
Not After : Feb 17 23:00:34 2025 GMT
Subject: CN=3a8564c1423fde9fae5bc3f555a223cd79ceaad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:96:73:37:3c:bd:bc:75:f3:35:12:94:65:
a5:d7:77:21:4e:0e:b1:d3:ce:af:b2:9f:a5:ac:99:
9f:ac:9e:bb:65:ba:a0:6a:ef:94:c3:ba:72:b4:8d:
99:77:7e:49:bb:54:b4:3e:47:d6:a6:45:bb:02:3a:
3e:d4:ed:92:9b:ca:33:7d:c9:be:b8:75:50:ff:e1:
2b:2e:15:f0:f7:bd:a7:71:f2:8e:73:1c:21:73:0d:
5d:83:36:4d:21:ef:06:b3:28:6e:c9:b8:4c:eb:cb:
88:85:20:d5:a5:8a:27:04:59:c3:fc:93:d4:6b:3d:
43:c1:3f:8f:d4:aa:ce:6a:39:36:0e:ee:84:82:f9:
ec:ae:90:af:0c:d3:a1:61:b0:45:3a:b8:cb:9b:c3:
48:16:32:38:da:95:7d:56:d8:1e:6c:e3:2b:9b:68:
05:48:3f:d3:ca:c0:9c:43:6b:cf:cc:5c:87:aa:17:
2c:22:05:b7:bd:5d:a1:ac:86:23:ad:47:d8:73:32:
c5:39:9d:10:f5:03:d5:27:48:34:c2:43:f1:63:67:
07:2b:5f:bc:08:ea:4a:5d:e9:47:25:91:13:66:7f:
5a:bf:34:9a:34:36:b4:98:f5:3c:43:7a:da:1b:7c:
7c:8f:7b:16:a4:13:80:f7:fc:0c:1c:1a:92:9a:9e:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:85:64:C1:42:3F:DE:9F:AE:5B:C3:F5:55:A2:23:CD:79:CE:AA:D8
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:41:17:86:1a:5b:07:55:b6:ce:af:fb:e9:d2:f8:4c:8b:c3:
90:08:45:1b:3d:cd:9c:51:e6:5a:62:c9:27:7c:cb:3e:fb:f7:
7a:bb:9e:14:21:f7:38:c9:4d:ec:c1:a5:60:b6:be:aa:91:b9:
bd:55:14:46:8f:00:af:aa:e9:98:b0:48:ed:63:65:f7:53:a8:
ce:93:9a:01:4e:d8:cb:dc:65:f3:f2:0f:9f:0c:e2:ef:44:8d:
bd:01:5f:7f:b6:49:f7:92:72:1e:d3:d4:b8:3d:13:b9:2f:83:
65:e4:38:6e:55:bb:c1:9a:e9:d6:18:14:49:0b:55:70:28:6a:
94:13:2a:44:a0:7d:a4:0a:11:77:b8:ba:d0:a5:2d:02:46:78:
ab:47:23:1a:e0:63:92:2a:ed:da:69:e3:d6:21:68:07:b3:89:
ba:6d:d2:26:d6:2f:4c:b0:01:bf:b7:72:74:f5:c9:bd:81:2f:
f9:ac:6f:59:54:81:a1:e5:0f:8a:0d:3e:b9:c0:7a:cc:06:7f:
d4:9c:be:2c:54:ad:ef:7e:ee:e8:e6:fb:4d:24:c2:98:58:a2:
75:3a:8a:cb:a5:61:69:45:c5:22:b0:c4:aa:67:46:81:f8:2d:
0c:ff:3a:cc:4e:fa:1d:02:c4:27:3a:b8:d8:64:be:44:61:03:
1a:61:9d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:32 2025 by rpki-client