Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: tb/lds5IKDNEnyQN00hYmRRLyLbvM6V5cJlN/bMnB14=
Subject key identifier: BB:7A:8C:A0:CF:92:B8:EA:3C:5F:74:5A:C9:ED:42:51:97:1F:A0:57
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 019510C6BA09D6E0D097953FC75715FAA1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 0153
Signing time: Sun 16 Feb 2025 22:00:13 +0000
Manifest this update: Sun 16 Feb 2025 22:00:13 +0000
Manifest next update: Mon 17 Feb 2025 22:00:13 +0000
Files and hashes: 1: Gu1VfmEwwWGyyu8mUifUt3Et1aU.roa (hash: HigRll08o/Aqm4OTZp77tT+XoPqn533WGHlSSBF902U=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: PxcbJYuQK9ImBw5sN9wu6z0TzIwqty5K2/AtFnD0V3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:ba:09:d6:e0:d0:97:95:3f:c7:57:15:fa:a1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Feb 16 22:00:13 2025 GMT
Not After : Feb 17 22:00:13 2025 GMT
Subject: CN=bb7a8ca0cf92b8ea3c5f745ac9ed4251971fa057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c6:c7:08:ed:74:ec:ca:18:96:46:8d:c4:a6:
2e:61:a3:79:ce:20:2d:c7:84:67:f3:a0:e6:41:e8:
82:f0:66:e7:39:b7:5c:03:51:38:9e:2a:79:ea:54:
a6:df:0b:0e:05:aa:c9:d5:c0:32:0b:e4:81:72:74:
3a:d1:dc:21:34:38:9f:4f:60:83:8e:e7:3d:73:f9:
41:be:6b:4c:e1:d4:8c:a3:1f:60:58:ae:60:f4:22:
af:21:8f:5f:23:87:2a:55:a5:ad:70:aa:99:6e:48:
87:4c:ef:56:78:ad:76:d1:80:c4:49:41:63:53:d9:
c5:94:15:78:e3:16:10:15:5a:02:ad:b4:ee:90:f3:
cf:b6:20:30:09:15:4c:3a:ce:87:53:66:29:00:3e:
4e:90:d6:a2:bc:da:be:22:fa:c4:63:a7:eb:d8:17:
02:a8:76:31:02:ec:46:18:e2:6c:26:cd:db:6a:ec:
8d:ff:42:fe:5d:a6:73:93:bb:2f:28:69:24:1e:4c:
6a:b0:0c:bc:60:79:87:46:a0:05:c5:ea:7a:9d:7a:
b5:02:ae:1c:64:35:ac:49:f1:e6:64:4d:53:86:bf:
a3:60:64:fa:da:dc:3f:d0:15:b5:2c:27:1e:4f:0b:
66:dc:0a:a2:91:11:75:12:20:f0:9c:ef:25:d9:3b:
8d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:8C:A0:CF:92:B8:EA:3C:5F:74:5A:C9:ED:42:51:97:1F:A0:57
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:25:c1:b1:54:15:7f:f0:4a:5b:d9:e4:8e:6d:85:37:05:cd:
9e:b1:a7:a8:ae:5d:e8:bb:1e:37:ad:67:c1:91:96:2b:74:2f:
b2:40:da:13:53:de:58:f8:bb:fb:0b:1d:d1:04:ef:79:e8:89:
65:0a:b0:9f:76:fd:a6:e6:9e:1b:c9:c5:ab:95:a0:cb:b4:c2:
31:51:20:98:2e:31:6e:ee:a5:d0:47:f9:34:8d:ab:14:c6:64:
94:86:d9:f2:5f:1a:ad:10:5d:1d:42:32:d1:32:68:a7:8a:7a:
cd:83:18:d1:f2:05:58:3d:a1:e3:ff:a3:e7:a7:91:c0:af:1b:
33:76:ac:28:bf:8b:a0:64:ad:99:27:b5:e6:11:3d:7f:1b:c9:
60:b0:0d:1b:5a:fc:17:85:23:2a:80:81:09:ec:00:29:97:2d:
39:bd:30:94:b1:58:bd:1f:5a:5b:a6:8d:2f:e3:c0:75:6b:67:
e0:99:3e:2b:16:5e:c4:a0:c3:15:c8:46:95:64:fb:67:a3:83:
5f:3e:4c:59:95:a6:16:19:c3:f2:61:f2:63:7f:3b:a4:72:0e:
71:83:b0:7c:4c:fa:18:91:f5:f2:fa:00:ca:36:4c:99:7a:11:
fa:6b:95:89:f3:37:7e:b8:30:c9:49:45:f8:70:bf:03:0a:b0:
ce:9f:b3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:57 2025 by rpki-client