Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
File: g4dr-7WujP4Ra7X18oZKEWITqk8.mft (raw, json)
Hash identifier: FGRn3icrwPxVXbWo0N1KR6Pm/LmgJnJw6RrA991CXno=
Subject key identifier: 21:DC:83:29:EB:E4:4A:02:37:16:F4:4F:AD:C0:22:8E:50:78:B9:9E
Authority key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
Certificate issuer: /CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Certificate serial: 0194C49A20BEB570A0905E19518258D4D026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 03:00:22 +0000
Manifest this update: Sun 02 Feb 2025 03:00:22 +0000
Manifest next update: Mon 03 Feb 2025 03:00:22 +0000
Files and hashes: 1: g4dr-7WujP4Ra7X18oZKEWITqk8.crl (hash: bc5bgvsXsk+uRopjgfCEjRGXzgVN9S4eVV7WguBOYC4=)
2: on6c4T5uruUZ19cPvyYxdOa3Uo4.roa (hash: DzOTGbti7Ycex9SFmllizCyD+Zg7ddBWN0hhpKZi1gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:20:be:b5:70:a0:90:5e:19:51:82:58:d4:d0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Validity
Not Before: Feb 2 03:00:22 2025 GMT
Not After : Feb 3 03:00:22 2025 GMT
Subject: CN=21dc8329ebe44a023716f44fadc0228e5078b99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ac:5b:b8:a0:d6:73:91:6b:95:09:c7:ff:b0:
8d:e6:d4:ab:58:32:22:fa:c2:7b:18:0f:5a:f3:d9:
19:a6:5d:55:8e:14:28:da:e8:14:e9:aa:9e:e6:37:
d7:5a:f8:fa:da:8b:3d:e1:33:85:b3:c2:e0:34:33:
8c:48:22:50:ef:c2:1e:6e:5e:d9:90:0b:52:6d:56:
98:2d:d7:a4:d8:e2:d3:7b:0a:df:51:04:37:2f:88:
6a:d2:fc:6a:6d:a8:4b:df:e2:e5:7f:4d:e0:5f:09:
b2:ff:fc:0f:c8:9c:13:3d:23:72:ef:e1:8b:81:bc:
f0:46:54:45:67:21:f2:df:d5:05:a9:55:a2:c1:91:
2f:e4:4a:4c:be:0f:e4:aa:5a:b5:5c:37:26:1c:f7:
40:c6:01:c2:1f:bc:08:12:81:0c:c6:06:d9:94:fd:
a7:39:7e:75:84:02:8f:0d:31:e0:ca:c8:ff:2d:3c:
0b:88:d9:4b:7d:d9:5d:24:18:74:0f:11:06:d8:7d:
a4:9e:78:e9:3f:95:ec:82:b1:f0:b9:ed:fb:2e:fa:
8b:80:e6:fa:60:21:5a:03:47:49:ba:34:27:8e:de:
ab:cd:db:45:43:d9:ef:7d:32:92:cb:70:4a:ab:f3:
62:6b:25:b2:54:94:98:b4:d9:d3:ff:3e:7a:f0:ad:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DC:83:29:EB:E4:4A:02:37:16:F4:4F:AD:C0:22:8E:50:78:B9:9E
X509v3 Authority Key Identifier:
keyid:83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ee:ac:29:92:85:4e:b2:ea:1d:b6:8e:93:e6:c2:ce:bd:02:
a1:88:ef:0d:76:bf:d1:32:5d:4f:47:fa:35:e2:fa:9a:f0:65:
9c:e4:d3:5f:16:48:7c:7b:c9:32:e1:fa:ff:0a:45:78:9a:34:
40:93:ab:bb:a3:9b:5d:dd:92:4b:71:46:fc:53:2c:cc:10:93:
b5:ea:65:ed:26:76:a8:04:db:09:cb:da:3f:88:8d:d7:0c:25:
70:99:31:7c:1e:df:82:b7:ed:df:0a:cc:6f:f6:a2:7c:7a:06:
0e:a8:93:1f:53:73:ab:45:0b:57:b7:57:39:4f:54:47:06:cb:
bb:2c:2a:03:c2:ab:a4:ff:3e:f7:0d:bd:b2:e4:cd:f7:3f:06:
d1:ca:06:df:bc:58:60:96:76:d3:2b:df:8a:98:d2:34:20:e2:
62:ee:59:43:b2:69:d5:ce:84:d1:10:44:86:c2:19:5c:26:d3:
11:88:ae:27:90:b7:ff:54:60:0a:16:b8:4e:0f:4e:39:33:01:
23:78:7c:29:eb:3f:c5:af:79:c2:0a:f3:60:bd:ad:c4:d6:05:
47:b5:2d:f5:de:b7:b9:d3:02:bb:f6:50:21:25:ee:54:89:0b:
79:35:a9:1c:34:3e:0d:48:4a:58:35:32:01:26:39:4b:89:d9:
ad:f9:20:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:28 2025 by rpki-client