Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: OE//QA36BXLPv4WTCQVdk3jwRqh0IABKnQlTZ4br3XY=
Subject key identifier: A5:A6:6A:5E:B4:A1:CB:23:D1:9B:70:19:F1:5C:82:0B:0F:F9:70:2F
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019512108D61D32FBD69985997D53244938A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 1138
Signing time: Mon 17 Feb 2025 04:00:29 +0000
Manifest this update: Mon 17 Feb 2025 04:00:29 +0000
Manifest next update: Tue 18 Feb 2025 04:00:29 +0000
Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: UgByxQRZXlgwsdhrzJPIAbkxv2drqINCDLf9StbhSEM=)
3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:8d:61:d3:2f:bd:69:98:59:97:d5:32:44:93:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Feb 17 04:00:29 2025 GMT
Not After : Feb 18 04:00:29 2025 GMT
Subject: CN=a5a66a5eb4a1cb23d19b7019f15c820b0ff9702f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:93:5e:ab:14:38:3b:28:fe:f0:92:e0:e1:
33:c3:ee:da:90:a7:84:69:5d:77:97:2a:2e:0f:d4:
16:6e:12:18:24:7b:87:64:79:ba:9a:26:88:d7:dd:
89:20:d6:9f:8b:99:f1:a5:5a:f6:47:61:4d:5c:a4:
76:96:b3:41:9f:3f:f2:d9:6d:64:3f:72:b2:9b:db:
88:72:c5:a8:ee:0d:e6:ad:61:d1:09:f2:ea:0f:41:
cc:05:29:27:36:08:a1:04:3f:06:9e:47:b4:23:2e:
90:72:c6:4e:be:34:ae:1b:16:34:dd:df:2d:3c:bd:
bd:14:98:f0:6e:6b:28:a5:9f:da:f1:d1:c6:8a:56:
0f:fc:62:cc:9a:64:65:3e:e5:6b:8b:17:cd:3f:fd:
68:e0:e4:00:8b:cc:54:35:40:a0:a2:2a:ab:61:38:
fd:25:9a:b6:2a:12:de:29:e5:cb:bf:b8:1c:05:13:
8f:f0:8a:33:41:03:95:b8:36:b0:63:a2:48:d9:21:
8c:c6:96:d1:fc:ed:81:a1:8b:5a:2c:7f:e5:cb:f3:
53:21:ac:cb:71:64:14:b0:83:ae:c8:54:a3:e0:c2:
63:d6:42:8c:22:b9:8c:29:7f:07:d7:4f:fa:de:10:
8b:c6:d0:ba:8a:e3:cf:e0:00:de:ec:01:3b:85:2f:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:6A:5E:B4:A1:CB:23:D1:9B:70:19:F1:5C:82:0B:0F:F9:70:2F
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f8:18:1d:9a:74:3c:fc:d8:2c:af:05:4b:e6:9b:08:46:98:
f2:8e:1f:ca:ff:05:46:59:52:2a:b6:3f:a0:cb:1d:ff:c2:dc:
89:70:1b:d5:ca:73:60:63:1e:17:86:28:2f:97:8b:d8:38:a1:
d3:16:97:16:90:4d:38:56:be:fe:64:ab:c8:c5:df:7f:a9:bd:
d4:3c:d1:d5:f7:42:96:8d:82:d8:8b:1c:bc:d8:38:af:4d:98:
6a:5f:1a:4d:c0:a4:ee:02:3c:1e:a9:18:11:ac:b8:5f:19:ee:
1f:81:9d:50:92:f2:99:30:95:9d:9f:9e:05:97:70:e3:54:dc:
69:21:0e:2e:1e:1b:5c:fa:f7:ae:d1:0f:47:3d:79:9e:28:41:
bd:8e:96:99:ff:ef:f8:a7:b1:0a:3a:1f:b3:fa:78:5f:d6:23:
38:35:ab:d5:39:13:7f:50:ca:37:44:fe:a0:73:ed:16:aa:53:
34:6c:5e:48:fa:54:82:db:86:37:b8:3b:3c:cb:bb:7d:e3:73:
ad:61:e1:66:4b:2a:4d:c4:a3:e4:30:c2:33:3d:2d:3a:ca:53:
da:4e:4c:f8:12:8c:35:75:69:54:1a:62:dc:ac:2e:1d:dd:a7:
76:7d:14:eb:35:00:23:96:90:50:a1:7a:9e:6e:0b:55:10:84:
cf:fb:f1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:11 2025 by rpki-client