Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: SCvuQsLXLllrjiZ6a4A1h0tyz95m8qwL7sdlDLHGJGs=
Subject key identifier: BD:DB:B3:4E:4B:9A:52:3D:7F:41:7A:BF:08:2B:DB:3A:43:EB:5B:91
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 01951134EA9FEB645E53CC139192C6A06F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 13E9
Signing time: Mon 17 Feb 2025 00:00:35 +0000
Manifest this update: Mon 17 Feb 2025 00:00:35 +0000
Manifest next update: Tue 18 Feb 2025 00:00:35 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: 2kZav9lJIkE0JaGUSS0hFExAPogb/lt7nWiym3P1oS4=)
2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:ea:9f:eb:64:5e:53:cc:13:91:92:c6:a0:6f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Feb 17 00:00:35 2025 GMT
Not After : Feb 18 00:00:35 2025 GMT
Subject: CN=bddbb34e4b9a523d7f417abf082bdb3a43eb5b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:a1:88:30:2e:ed:d3:01:4e:49:e3:1b:2e:
03:16:9b:50:e1:9f:92:a6:d5:81:f4:49:cf:36:ae:
35:fe:a4:46:65:5b:e7:e9:75:d8:f9:bb:92:fc:4e:
d6:7e:b8:af:ef:93:d4:cb:2c:39:58:e7:fe:37:33:
55:04:2f:65:1c:7d:b7:2c:f6:44:79:a7:25:1e:80:
8d:9e:28:55:ed:e1:21:c1:18:9e:c0:f7:a3:1d:20:
fd:bb:4f:17:39:ad:04:8c:00:97:e8:a3:21:4d:fa:
39:c1:19:1d:08:00:af:35:67:f0:db:2d:76:00:08:
ae:12:10:28:87:d9:e7:f6:cc:93:31:6f:b7:22:dd:
73:39:1e:c5:5a:c4:3f:f5:be:74:f5:60:e1:c6:7c:
21:ec:00:f6:6b:bc:41:9f:7a:b3:1f:47:a1:6d:f2:
ad:eb:ee:fd:a8:75:b5:aa:e0:5f:59:2d:6f:3b:67:
6b:fd:6f:4e:05:42:59:d8:f8:d0:f7:07:a0:e7:b5:
6d:5d:78:63:6b:e3:ca:ed:a2:6c:ba:d6:d1:4f:31:
37:0d:d6:2e:09:5e:9e:70:9a:52:16:6b:49:f5:cc:
3c:aa:28:fe:43:56:e9:f9:ce:da:82:29:36:c4:52:
73:f7:d0:2b:66:af:b1:25:0f:96:55:d6:23:15:8f:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DB:B3:4E:4B:9A:52:3D:7F:41:7A:BF:08:2B:DB:3A:43:EB:5B:91
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:5f:d9:b7:ac:60:ff:46:84:ba:8b:8c:87:0b:be:c4:11:33:
2e:46:49:61:75:00:ba:4e:c6:ec:a0:30:d2:be:85:61:98:fe:
00:eb:d1:81:25:fd:49:64:d8:3f:06:09:aa:25:4a:93:cf:61:
29:e8:bd:79:6d:08:ef:f9:7d:ea:ad:b9:03:a5:4e:5d:f3:15:
85:2f:3b:07:96:b8:61:68:b6:cf:b7:72:5b:f2:df:0c:a9:99:
fa:80:10:6b:e9:46:11:c8:3d:bd:59:21:a8:cf:d8:bf:4a:c1:
d2:b8:8f:30:84:50:5a:db:77:5d:82:7b:bf:6e:22:46:d6:15:
7c:e8:dc:90:51:70:17:9e:73:31:89:01:5e:0d:d9:75:8b:5a:
46:fe:36:42:4b:7f:81:75:15:71:21:c7:85:6f:84:5b:49:fe:
70:7e:75:1d:e9:4e:c3:ba:51:a6:98:a9:2b:b1:ac:58:f7:2b:
73:e3:9d:b5:e5:2f:3c:56:4c:0e:90:e4:d0:1b:e0:0a:a7:aa:
53:11:01:69:87:3a:b4:95:6c:6d:94:dc:0a:71:86:85:f7:4e:
4e:4e:bb:c1:c9:14:e5:e3:a6:15:43:06:d6:93:4e:a3:37:ab:
4b:f2:7a:74:c3:c9:b0:2c:99:9a:2e:fd:aa:d7:85:3f:dd:5b:
ea:74:78:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:05 2025 by rpki-client