Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File: GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier: ttcFiaXaFQbkHUwzaveTowTOhcuZmt3QA3AE0LR+OX4=
Subject key identifier: 79:E9:8F:9A:C1:CC:3E:9B:07:53:69:F5:5B:94:72:8F:A4:72:D6:A9
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 01951210B6B06C9826F0DECE7379AB2A7608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 04:00:40 +0000
Manifest this update: Mon 17 Feb 2025 04:00:40 +0000
Manifest next update: Tue 18 Feb 2025 04:00:40 +0000
Files and hashes: 1: 1-xyQHxf_deE9-ViNoog6kflfJho.roa (hash: QIveh9vpkORylUTH9OU36DpDEaTwHICeGuuojxGmoA4=)
2: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: PktC9o+BcVT8VZlDSULBAul92c78vUQNoMsI2QdqkO8=)
3: vDjAWnb2U_Zni3rwGpwjWOad_gQ.roa (hash: YF5FP9GizLuKXZzGN/kv4NsbvKt5L3RdIPXM7DuHQbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:b6:b0:6c:98:26:f0:de:ce:73:79:ab:2a:76:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: Feb 17 04:00:40 2025 GMT
Not After : Feb 18 04:00:40 2025 GMT
Subject: CN=79e98f9ac1cc3e9b075369f55b94728fa472d6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:5f:79:07:e7:40:30:21:e6:3d:f8:e3:f3:
26:a6:1c:8a:5f:fc:0c:5f:84:38:70:8f:45:ca:7e:
0b:46:6e:b8:62:0c:60:cb:07:85:26:52:f3:3f:b2:
c4:74:2d:b7:93:dc:b0:06:a6:46:7a:49:86:32:e9:
73:fe:a8:53:56:26:e9:aa:a8:8b:50:51:68:3e:b1:
7d:59:38:87:21:f0:6b:ac:46:39:e0:47:9d:7a:f3:
5c:be:8e:40:51:79:07:8b:cf:d0:55:ea:32:0f:b9:
f1:1c:25:5d:7f:e3:f1:5b:ae:7b:a1:93:56:5c:e8:
51:49:11:5c:e8:b4:41:a5:da:1f:59:f0:54:0a:cb:
f2:2c:54:2f:81:d5:7c:1e:23:b4:5c:f8:58:c1:0e:
50:77:92:18:c4:34:46:cb:2d:54:d1:46:11:a2:16:
ee:df:f5:7e:ab:54:19:6a:b1:85:e2:c0:9b:6f:99:
58:90:0d:9f:5b:31:6f:bc:19:c9:3e:5b:5c:bb:55:
27:0e:35:4c:e7:12:c5:c3:74:9f:05:3a:9e:8e:50:
85:12:2c:14:cc:60:75:cc:fd:72:ad:8f:4d:09:80:
51:38:db:e5:e0:ff:5f:d5:16:f0:3e:1e:02:87:30:
ad:40:fb:f0:4f:55:73:6a:71:ad:03:6c:79:59:10:
6e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E9:8F:9A:C1:CC:3E:9B:07:53:69:F5:5B:94:72:8F:A4:72:D6:A9
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b1:c9:c0:8b:7f:cf:89:38:92:35:77:b7:ba:5e:f5:80:98:
fe:63:4e:94:c9:ee:de:68:bf:50:a1:04:ea:e9:44:5b:e5:27:
0d:b9:e7:94:10:47:2c:42:b2:ff:0b:f8:d0:cc:ea:73:a5:5a:
5e:7f:25:44:dd:33:44:e0:70:e8:ea:5c:26:b7:32:b6:b9:b9:
8a:0b:c2:46:b2:d7:3b:93:f4:ef:b5:fe:91:bd:9b:b9:95:04:
77:92:ec:ab:a5:d6:7c:6d:f5:e9:4e:1e:9f:3b:bf:04:1e:78:
c4:e7:3c:ca:92:e7:ba:ec:e4:9e:43:38:01:16:37:44:b0:89:
f1:85:4c:2c:7a:53:f7:48:e5:02:a8:36:da:58:33:fa:5b:64:
80:d8:15:64:34:eb:cd:88:e9:91:a0:5d:22:64:4a:6d:98:06:
9f:ff:2e:f1:7f:ab:15:c2:66:93:2d:dc:0f:21:c6:29:d3:74:
13:c4:69:b4:eb:d3:1e:1d:cb:bb:8e:21:63:9a:6a:39:c9:05:
80:ec:82:92:9b:b6:88:a3:94:d4:6c:ee:ee:d5:4b:21:31:dc:
8a:38:51:36:b9:c6:06:e9:19:85:04:90:25:30:13:c8:1c:82:
18:b6:e3:16:6c:9f:50:30:dc:6a:eb:fa:d5:85:e2:a3:f7:ba:
26:34:54:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:58 2025 by rpki-client