Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
File: giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json)
Hash identifier: /AnJpgtrVaeCoLs+fXXEQa27BEHdFQb5IeOvxcvjpUc=
Subject key identifier: EF:91:E5:D8:63:00:02:43:07:30:C8:96:10:71:E0:11:9F:97:39:0D
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Certificate issuer: /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial: 01951210861BA90787AC80358BA49EAD56EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
Manifest number: 13E7
Signing time: Mon 17 Feb 2025 04:00:27 +0000
Manifest this update: Mon 17 Feb 2025 04:00:27 +0000
Manifest next update: Tue 18 Feb 2025 04:00:27 +0000
Files and hashes: 1: GpgJajGCbSNl3e4aO7PdAchg1ng.roa (hash: JjeUV08MlhBjZNwlusZZDt6ugsqaNAcVm8lYJFEKoLw=)
2: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: 3m3Tuj0OCGaKAt8rStLybjt8Bov5Ti5ccvjb2qySyAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:86:1b:a9:07:87:ac:80:35:8b:a4:9e:ad:56:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
Validity
Not Before: Feb 17 04:00:27 2025 GMT
Not After : Feb 18 04:00:27 2025 GMT
Subject: CN=ef91e5d8630002430730c8961071e0119f97390d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:ed:65:f8:0a:d3:b3:29:ae:cd:82:c7:ef:
52:a3:d3:6d:aa:d9:e3:25:4c:6a:71:8e:4b:48:04:
3f:bb:32:01:86:bb:fd:5d:71:63:4c:54:40:b2:ca:
bf:89:72:ac:dc:0c:6e:e9:f3:57:97:eb:86:3a:e2:
b7:e8:84:d2:59:d6:2f:2c:56:a7:ce:92:2f:c6:a4:
18:ab:54:57:76:a7:e5:01:aa:01:f7:0b:7d:18:4b:
04:63:8d:c4:bf:09:19:6b:55:51:27:65:61:61:a6:
0f:47:6b:c0:72:fd:d5:49:59:cb:8c:a0:4e:5e:e2:
1c:d6:86:e6:4d:45:ed:1b:16:39:ed:41:1e:00:5e:
0f:c4:26:c6:64:fe:52:fe:04:61:ff:ed:ac:d4:16:
e9:8a:30:4e:a5:4c:70:9f:a4:56:cf:00:27:07:5d:
7e:cb:60:aa:da:db:4f:0c:45:9d:df:6a:ff:3e:9c:
dc:d6:70:42:38:a8:bb:bd:16:f7:e0:b1:0b:95:36:
13:4a:87:ae:6c:fc:f7:3b:c2:92:ea:a3:8a:b9:7d:
e5:cf:76:43:95:b2:c6:0a:41:b4:2e:47:03:08:63:
56:05:87:d7:bd:aa:a3:42:cc:1f:f1:2c:35:e9:21:
49:f4:f9:30:6a:05:b0:ef:2a:5a:e5:8d:c0:30:29:
b4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:91:E5:D8:63:00:02:43:07:30:C8:96:10:71:E0:11:9F:97:39:0D
X509v3 Authority Key Identifier:
keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f2:69:7c:b5:1f:40:60:62:ef:7b:a2:67:d3:30:2a:97:7c:
51:37:6e:ef:e2:13:76:94:08:c5:c1:92:bf:57:f6:40:e2:c6:
fa:a8:d8:fa:86:72:4e:f2:3a:f2:0c:0a:a5:11:ec:28:09:13:
a5:6e:cd:90:3d:07:a4:06:54:26:6e:75:1a:67:3b:21:c2:34:
e3:1b:bf:2f:05:e2:04:5b:59:6c:7e:f0:9a:79:ef:92:7d:0a:
be:27:3c:22:5e:01:06:85:8e:8d:41:19:13:a7:39:3e:0e:80:
60:f1:ec:31:2c:17:00:a9:53:b4:9b:a9:1d:bd:eb:8b:d1:84:
61:c6:4b:e8:6d:86:7f:3a:59:c9:06:2c:3d:97:d0:3a:85:6c:
9b:e6:4c:35:7b:95:87:64:3b:bd:02:7e:97:e9:86:a8:a7:db:
19:6d:89:29:c2:91:76:9f:86:2f:72:3f:f1:f8:0b:bc:19:7b:
55:df:c8:40:d1:76:0d:7d:87:e7:46:09:d5:88:47:77:d5:20:
34:72:35:11:31:92:f0:04:ad:36:99:9b:2f:51:53:12:35:fe:
fb:e5:49:6c:36:f1:8c:8a:4c:d4:18:e7:19:9a:c2:55:74:e5:
16:4c:47:b4:57:09:2d:fc:61:fd:f3:52:f0:93:e8:0e:48:4a:
10:73:f4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:36 2025 by rpki-client