Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
File: gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json)
Hash identifier: fpO+b4xEXTAezFrAh7pqo/ocl6qPyrL4z6j/aeWzrnA=
Subject key identifier: 9E:21:62:E0:2F:F3:18:F4:AE:56:B4:B8:80:44:3E:B7:07:D3:53:0B
Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
Certificate issuer: /CN=8159495b72ff015878c1314d24759b6e9147a8e0
Certificate serial: 0194C42C1D18EB1E0ADBE44FA8A5DF307264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
Manifest number: 142A
Signing time: Sun 02 Feb 2025 01:00:12 +0000
Manifest this update: Sun 02 Feb 2025 01:00:12 +0000
Manifest next update: Mon 03 Feb 2025 01:00:12 +0000
Files and hashes: 1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: u1B+5MURj38/cdUgBNZbQjCdvm7xsKxcbgW+obXCl7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:1d:18:eb:1e:0a:db:e4:4f:a8:a5:df:30:72:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0
Validity
Not Before: Feb 2 01:00:12 2025 GMT
Not After : Feb 3 01:00:12 2025 GMT
Subject: CN=9e2162e02ff318f4ae56b4b880443eb707d3530b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:5b:0d:50:c7:80:70:d1:0b:d3:bd:9c:93:
79:a0:74:ef:e8:43:e0:08:7d:29:56:07:89:f1:b7:
78:8e:85:c7:33:d0:57:fa:d5:a6:56:ad:7b:d8:45:
70:18:65:ff:d5:b7:75:85:da:82:1c:b6:b4:1e:f3:
d0:eb:09:fa:66:95:d0:35:85:2e:78:aa:b2:84:b0:
c2:df:22:28:3c:54:78:f6:8b:9a:94:c2:32:5c:82:
f4:59:ec:a8:50:91:27:ab:35:d8:db:5e:e4:31:6c:
1e:92:8a:89:5e:ad:8d:6b:7e:5d:6a:7b:b3:3f:fb:
64:c4:87:d5:80:2d:e7:fe:0d:55:79:77:81:16:b9:
9d:a7:4b:db:47:9b:e9:99:68:1b:1d:0f:40:dc:d1:
fd:58:fd:03:2c:48:83:b5:79:fe:8c:86:46:20:7d:
ab:ec:15:0d:71:0e:4b:9c:2c:e6:51:3c:ef:88:0d:
ec:96:b5:46:0a:5e:94:58:83:43:6c:0e:70:52:07:
f0:3d:b1:3c:ce:32:1c:16:59:57:f4:c6:65:41:35:
2c:5e:b3:2d:a7:2f:3e:5d:1a:0a:22:3b:f0:60:90:
a2:98:14:b1:27:22:91:36:8d:fb:4c:4d:30:d6:6d:
fe:72:37:8f:8a:4e:1f:3e:05:a1:15:88:c1:34:08:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:21:62:E0:2F:F3:18:F4:AE:56:B4:B8:80:44:3E:B7:07:D3:53:0B
X509v3 Authority Key Identifier:
keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1d:76:cd:e2:09:28:5e:ac:99:da:8a:a0:d8:54:00:86:eb:
12:6a:77:06:2b:1a:61:31:a2:eb:13:4b:f9:de:9b:23:ae:ac:
4a:fc:d7:7b:28:a4:0e:24:d8:74:ab:59:34:e9:bc:07:b3:24:
f3:51:4e:34:a1:22:df:b9:e5:87:9e:02:0f:9d:b1:88:04:c2:
6f:ad:fc:25:52:54:40:c8:de:13:ef:ec:61:40:aa:12:f6:b8:
bc:a8:d0:8b:0a:29:06:95:b0:f4:41:50:2e:53:79:ae:6c:ca:
68:15:08:d7:aa:32:1a:68:94:29:3e:dd:98:e9:40:04:8f:24:
77:0f:68:60:ce:21:a9:4e:6e:06:a1:1d:12:ff:53:44:d0:02:
64:62:9c:87:e9:c9:3e:28:7a:56:70:31:30:a3:63:8d:21:0a:
35:e1:58:b7:c2:2a:18:b1:84:f8:fa:1a:40:96:57:18:48:ae:
6f:68:6e:66:66:3a:12:b4:9f:62:70:94:39:45:67:92:bb:74:
85:f4:9b:3a:f3:0d:42:b7:6e:c2:1f:40:00:8e:83:6e:86:37:
f6:30:e2:5e:e1:46:f0:eb:fe:ea:67:ba:f6:9f:98:bd:b5:1a:
71:9d:ca:9f:a4:db:b4:e6:32:f5:b6:45:93:66:7b:33:b5:dc:
33:18:c1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:50:31 2025 by rpki-client