Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
File: gJXgzG5Kjeis07B8zl6gwEDEf_E.mft (raw, json)
Hash identifier: hUtybvG9UjHDLXjNfn4gQoskzzvbLEXiZJW3WfvgU9E=
Subject key identifier: 92:39:6C:DD:B6:F7:63:BA:89:0F:1D:B7:00:85:65:31:C4:94:25:7F
Authority key identifier: 80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
Certificate issuer: /CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Certificate serial: 0195113533155877A7087DADD1DB8DED31A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 00:00:53 +0000
Manifest this update: Mon 17 Feb 2025 00:00:53 +0000
Manifest next update: Tue 18 Feb 2025 00:00:53 +0000
Files and hashes: 1: 5BEa602wZYpMxTuh3zw8qo0mrK4.roa (hash: +ORzsbOhqz/jkJrclx5p3HM7N8Z+T1SUhWKkKSdLD+M=)
2: gJXgzG5Kjeis07B8zl6gwEDEf_E.crl (hash: UDxoD65TnfuTPYch8OIIFmp8GfR8WZVyutuCMU++1o4=)
3: jWNTJ1FpKEnE4-XV0f-LwaNjgGw.roa (hash: uelleaLEyblsE/O04BBgVrwIcj9C3h4Y81oJVkNhBzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:33:15:58:77:a7:08:7d:ad:d1:db:8d:ed:31:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Validity
Not Before: Feb 17 00:00:53 2025 GMT
Not After : Feb 18 00:00:53 2025 GMT
Subject: CN=92396cddb6f763ba890f1db700856531c494257f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:48:c9:cd:7a:fc:35:72:3e:a5:4b:8f:25:
49:4f:24:da:58:1e:44:a6:0c:c3:3b:a9:c7:f8:13:
d0:0d:65:01:89:fd:00:06:cd:7c:4e:9e:82:50:15:
17:0d:e4:38:33:d1:b1:ef:23:27:3c:de:5b:d0:8f:
d8:b4:67:1a:c2:30:57:2c:f8:11:83:6e:47:61:d0:
1e:83:0f:4e:30:78:86:8b:74:9d:97:ed:0a:a1:ba:
45:8d:17:84:93:aa:15:ca:90:fb:bb:2c:ec:25:32:
c0:00:14:31:f1:cf:60:14:e4:b0:f7:b7:c1:9e:65:
b0:89:12:94:e5:95:a9:f4:a7:f0:b0:d6:5b:0d:0d:
43:ad:38:c0:46:c6:e1:7c:b3:a4:e5:53:14:83:c2:
e5:8a:dd:1a:72:e4:03:2b:c5:f7:78:34:02:b0:eb:
55:b7:3d:85:cb:5d:0d:0f:09:70:0b:91:f5:89:94:
1f:d6:d3:5a:98:97:24:f8:26:85:9a:23:45:13:5f:
2c:09:12:eb:c0:13:30:5b:ca:d4:4a:99:1a:4a:c4:
f6:81:17:eb:f3:96:e2:8b:81:5c:68:ef:62:5b:f9:
f5:97:ef:5a:c7:c9:70:86:8e:d2:34:19:4c:1c:ea:
97:fd:23:d2:a6:8c:9b:31:60:20:ec:a7:df:ed:bb:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:39:6C:DD:B6:F7:63:BA:89:0F:1D:B7:00:85:65:31:C4:94:25:7F
X509v3 Authority Key Identifier:
keyid:80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fa:3d:64:61:8a:27:1d:2d:16:78:e6:a6:bb:eb:39:87:f4:
7c:c2:59:fb:59:4d:74:5d:ba:fd:f1:8d:af:7c:15:05:76:6c:
ad:df:8d:e6:01:06:7e:5c:26:41:8e:da:47:9f:79:b4:7a:4e:
92:97:55:39:9f:11:29:77:c5:09:ac:cf:d4:64:53:25:4a:20:
7b:35:8c:a0:10:52:6f:f3:be:c6:0d:a0:a1:f1:c2:78:63:7e:
7f:38:34:ac:37:98:c8:28:d0:d2:58:ca:67:68:0e:d9:e1:39:
fd:f9:4a:6f:21:04:57:64:9c:a0:1c:90:09:54:4c:50:0d:b1:
28:a4:18:a8:03:e8:0d:43:8e:e3:7c:bb:6b:ec:95:1c:03:6d:
83:59:ac:f1:10:80:e9:1a:69:c7:0b:db:01:c8:98:62:f1:8d:
67:36:54:68:aa:14:e2:71:23:ad:d3:70:4a:53:e4:02:ad:e7:
8b:79:9b:9c:83:f4:ca:8b:c7:0b:e2:5c:f8:b2:85:79:04:61:
12:b7:9c:df:00:fb:be:f6:31:c2:51:ea:50:96:9b:3c:da:71:
e3:e8:3b:ff:5f:5d:a2:17:f8:38:1f:1f:45:34:ed:b1:1f:20:
38:a4:3b:c1:58:88:19:f4:b1:4c:c8:7c:ae:26:ce:a7:c5:83:
99:70:bc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:44 2025 by rpki-client