Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: CpPIMhx/lmeKo0r2y9r2WLVQBgTIraVDuCzYeNM1U88=
Subject key identifier: 9B:39:CA:03:0C:0B:1F:86:A2:26:CE:44:15:1A:0A:7C:63:10:D5:23
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 0195116C33F50378F1A45524ECDD8B17E121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 11A1
Signing time: Mon 17 Feb 2025 01:00:58 +0000
Manifest this update: Mon 17 Feb 2025 01:00:58 +0000
Manifest next update: Tue 18 Feb 2025 01:00:58 +0000
Files and hashes: 1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=)
2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: zkP54KmKwfgaw85vuFXCRIlZRwe+dhXl6ztT+pVyyGs=)
3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:33:f5:03:78:f1:a4:55:24:ec:dd:8b:17:e1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Feb 17 01:00:58 2025 GMT
Not After : Feb 18 01:00:58 2025 GMT
Subject: CN=9b39ca030c0b1f86a226ce44151a0a7c6310d523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:d5:69:6e:84:6b:45:cf:c3:7d:91:e7:43:
b8:05:cb:1d:9e:e6:ba:7a:21:ae:18:60:75:cf:32:
ff:5f:10:73:7a:08:b0:0d:31:d5:56:52:0a:a7:f3:
18:dc:37:b7:4b:03:86:66:00:18:6b:50:f7:04:1a:
da:40:6d:3e:41:06:d9:6d:07:fb:30:59:02:f2:2a:
ab:e0:fe:c2:6c:be:70:aa:41:4d:35:69:b6:bf:52:
e0:4d:14:74:e1:58:2e:90:5c:5c:94:17:c3:7e:30:
c3:9a:54:d6:cf:1b:9a:75:56:4c:3c:52:91:3f:7f:
49:45:42:ca:53:ee:2e:be:e4:45:88:e6:f8:10:dc:
d5:20:25:e8:60:b0:c4:9e:f8:ee:18:c4:aa:f6:a2:
d6:23:5b:0e:81:4e:f2:3d:d7:d9:06:00:54:52:4f:
d4:6f:d9:1d:13:c1:71:b6:c7:fb:64:20:f8:06:77:
ae:4d:c5:3a:e4:b7:05:ec:f2:f0:90:63:ad:bc:ba:
19:83:85:87:d8:67:a5:8e:b6:c1:02:3a:b9:b0:ff:
54:d9:41:c5:f5:5e:41:de:75:d4:e3:19:01:d4:2d:
28:8a:80:3e:71:3f:f6:7c:84:56:9f:65:4f:d4:01:
72:9e:89:6d:b4:68:36:c3:f9:6d:cb:52:66:e6:57:
ce:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:39:CA:03:0C:0B:1F:86:A2:26:CE:44:15:1A:0A:7C:63:10:D5:23
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ff:36:df:49:72:2e:c8:d9:62:cd:1b:51:b5:98:3c:fb:dd:
59:13:97:d9:3b:38:8a:f1:37:f4:52:e1:02:01:41:c0:5c:ca:
6f:91:66:f2:ea:dc:4e:e7:ab:0b:26:c3:24:9a:c5:a8:14:df:
55:e8:c6:e1:ad:4b:ae:7e:e4:c1:06:c2:18:32:fb:2c:e4:12:
3e:2f:65:2c:0a:6d:57:64:7c:54:d4:16:97:0a:72:79:22:95:
59:40:44:ba:ed:8c:91:08:0c:9a:94:d2:1a:71:16:ba:dc:73:
26:3a:33:b7:10:69:f1:91:a1:cf:92:bf:87:67:d6:3d:a2:6c:
d4:a7:ed:b4:d7:41:7e:0d:b0:3c:14:0e:0b:c6:85:5e:3c:8b:
8f:74:7c:06:97:b1:6a:5c:6f:98:8a:3b:cf:eb:60:87:4d:db:
98:15:f1:21:77:94:14:f9:36:94:99:8d:42:d8:61:16:08:8a:
12:d0:03:57:86:f6:91:48:09:e2:92:17:92:73:23:c7:f9:80:
f4:d8:e1:80:d8:83:d5:63:7d:37:01:9d:5a:2b:88:dd:8f:4b:
17:7b:83:17:32:70:b6:67:25:24:9f:a8:24:7c:e8:68:86:11:
d6:7b:fa:8f:0d:e1:14:9e:9e:f1:b5:0c:1c:6a:61:d1:b8:0b:
c1:03:6b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:16 2025 by rpki-client