Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier: EwRVJHrWhv2ib7doRRG7gwo43PHzfXPpa939kDgC99k=
Subject key identifier: A1:BF:C9:3E:A3:6A:FD:DE:D7:40:FE:3B:5A:06:0D:82:E2:D3:6F:8D
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 0194C507F6AC7BF7987F8B9C673C2FA419F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number: 0775
Signing time: Sun 02 Feb 2025 05:00:20 +0000
Manifest this update: Sun 02 Feb 2025 05:00:20 +0000
Manifest next update: Mon 03 Feb 2025 05:00:20 +0000
Files and hashes: 1: fvmPK9oBYawf3WrvWH2W-IrLack.roa (hash: jbyIzGoc+3nZMPPaYxP5PgX+7SvKTCObiN1ijSSrLNI=)
2: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: KzYVpepbmvKGSNl96TsG0uc8ZKkfXLfNtLO52oJvQ7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:f6:ac:7b:f7:98:7f:8b:9c:67:3c:2f:a4:19:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Feb 2 05:00:20 2025 GMT
Not After : Feb 3 05:00:20 2025 GMT
Subject: CN=a1bfc93ea36afdded740fe3b5a060d82e2d36f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d1:e9:40:6a:d0:8c:e0:50:2b:8f:bc:07:40:
7a:a7:91:a4:d5:e3:4e:bb:eb:f2:1f:8f:4c:f4:dd:
6b:75:3a:fc:af:b3:fd:46:6a:dc:b5:00:00:03:73:
2a:2a:13:0f:c7:47:b5:66:b6:e1:a7:e9:6c:77:97:
7e:96:54:1c:ee:45:86:c0:47:c0:90:8b:e6:65:b9:
79:61:71:28:50:35:f7:5e:50:37:98:41:2f:b4:43:
e7:f7:85:26:d5:a2:b9:c6:71:5b:2d:4e:1e:b2:c9:
89:33:78:ee:d4:b5:a5:86:fb:ac:ae:4f:71:71:25:
46:6c:bb:9a:44:66:51:2b:0d:0b:c2:8a:43:4b:93:
d3:ae:ab:b9:85:a1:31:fa:5d:9a:38:83:68:9f:a2:
c5:e7:e8:a6:13:00:37:cf:5a:8c:9c:22:5f:11:4f:
71:11:bd:72:2a:cf:25:48:12:92:00:cd:bc:53:14:
36:47:0f:b5:15:b5:23:83:7b:88:0f:51:56:2d:b8:
19:82:68:55:2f:87:b3:de:e6:8f:d3:27:44:ab:0c:
20:a6:20:bc:aa:50:73:19:95:39:2d:c6:56:a5:4f:
62:7f:7a:66:01:17:df:eb:44:b1:85:ab:5f:4d:24:
ef:92:5b:9d:d0:12:fb:49:3e:66:5a:bd:e2:15:f3:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BF:C9:3E:A3:6A:FD:DE:D7:40:FE:3B:5A:06:0D:82:E2:D3:6F:8D
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4a:1e:ae:87:23:b1:c3:1c:8a:2d:9d:e7:1f:3f:a4:c8:a9:
68:e9:24:8c:fd:d7:37:99:fa:65:7c:42:7e:79:fc:60:e7:c0:
e5:1f:a1:dd:56:83:20:38:87:b5:b5:c6:c2:69:91:13:62:b3:
2e:b9:5b:70:83:62:a5:38:df:74:a7:d0:11:e5:c2:e3:42:47:
48:af:e9:f7:1c:c4:0c:70:d5:d3:da:61:91:0a:5b:10:c1:39:
1d:e4:f8:6e:1c:2f:3f:95:c3:7c:f2:0a:62:21:56:ff:41:87:
3a:98:bf:f8:e4:89:c9:4e:f2:38:59:89:b9:2c:34:fb:d5:b1:
d4:94:93:3c:dd:42:54:ad:90:43:73:8a:2d:4c:0c:90:6d:4b:
f1:21:dd:15:98:66:0b:1e:27:bc:b3:9f:33:1f:ab:1e:3f:9e:
2f:ee:3a:75:d9:f9:c2:53:d7:6c:6d:39:8e:97:db:ce:82:6b:
9a:64:3d:90:cd:08:37:46:4f:45:23:39:bb:22:72:9e:0a:fa:
83:9e:50:52:20:06:dd:e3:e5:f6:45:1a:3d:52:03:47:11:be:
2b:34:49:54:a7:07:a3:b0:22:07:c0:a6:fe:b0:69:47:dc:e2:
ee:ea:1b:05:61:b9:71:3a:91:fc:6e:43:a8:eb:42:63:4b:f3:
a7:c0:cb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:04 2025 by rpki-client