Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
File: gvJFXc9FrmWm_cz494Ic48UkAR0.mft (raw, json)
Hash identifier: i9Ce4OKnVrE+qH2HWhQj6Yad9u9gDLET0b7nTdpila4=
Subject key identifier: 19:73:27:94:76:6B:A6:A0:25:5E:61:D3:EC:48:96:7E:56:44:D1:C1
Authority key identifier: 82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
Certificate issuer: /CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Certificate serial: 019511D9AB3B4D7C23947749F2A7940542C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
Manifest number: 143C
Signing time: Mon 17 Feb 2025 03:00:32 +0000
Manifest this update: Mon 17 Feb 2025 03:00:32 +0000
Manifest next update: Tue 18 Feb 2025 03:00:32 +0000
Files and hashes: 1: eS_V4C4cNESsUi7U8IjjlNIhlSE.roa (hash: wdsqtGZ831qd+AJFvCqG1OGszbCCIEt4963PPzg5D0k=)
2: gvJFXc9FrmWm_cz494Ic48UkAR0.crl (hash: 5Aq/tnWvDmFfLJKnZaG65Cv86bBOVuatG2/YOdrDz+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:ab:3b:4d:7c:23:94:77:49:f2:a7:94:05:42:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Validity
Not Before: Feb 17 03:00:32 2025 GMT
Not After : Feb 18 03:00:32 2025 GMT
Subject: CN=19732794766ba6a0255e61d3ec48967e5644d1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:4c:b7:ac:dd:40:dc:b9:67:b7:f5:4e:6b:
90:01:a2:10:d2:41:b5:2f:48:22:46:40:e1:1f:79:
ab:95:db:7b:cb:68:0c:0f:dc:18:10:78:9d:b6:2d:
b9:e0:e2:fa:d0:c1:5e:f6:66:ef:54:c7:28:d9:08:
fe:54:fe:8f:71:88:af:57:dc:6f:a3:77:9d:5d:4f:
4b:e9:3c:17:67:a3:df:db:bb:40:68:85:cf:83:5d:
75:de:03:f8:67:80:bf:8e:e6:c1:cf:f1:b3:e7:67:
00:a7:24:b6:02:84:09:6b:7d:40:da:18:e6:1a:e6:
eb:b5:c2:05:77:d0:c5:69:69:95:ab:8a:9d:60:2f:
46:5f:ac:d5:ef:d1:ac:59:ff:f4:27:ec:e2:7b:14:
ec:74:39:f1:55:ec:eb:d4:37:bb:28:42:bd:be:c2:
bf:70:32:fd:3b:22:62:ef:33:dd:27:ac:f9:b8:a4:
d1:f3:81:21:22:f6:e9:ee:48:69:2d:1f:72:63:df:
b5:25:33:13:0e:da:f7:95:60:47:d7:55:fb:27:b1:
7a:db:5b:8d:b3:84:8d:e1:dc:3d:04:57:41:ae:84:
a2:d2:be:35:af:7f:85:7c:d0:78:0a:18:68:53:d4:
4a:9f:1a:1b:14:22:97:c1:6d:f3:fa:f3:0a:4b:39:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:73:27:94:76:6B:A6:A0:25:5E:61:D3:EC:48:96:7E:56:44:D1:C1
X509v3 Authority Key Identifier:
keyid:82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ab:fb:b0:ee:ff:62:64:47:f9:2b:7a:8c:7d:27:fd:d1:c1:
30:66:f7:76:6d:54:26:00:95:b8:c3:06:a7:de:fa:fc:41:ea:
c2:76:89:f3:8b:8f:fe:19:67:8b:d4:a8:d2:05:6d:27:f4:59:
d3:b5:f5:78:13:29:d7:f6:b8:15:1b:db:cb:8f:0f:11:76:a4:
ac:cb:8b:9b:27:de:38:93:53:d6:97:39:fc:f5:52:bc:8a:62:
bb:39:e9:b3:b1:0e:39:14:81:6e:be:30:fd:d8:46:60:d5:3c:
74:88:fa:27:5c:8e:40:40:85:96:49:61:2b:80:0c:66:f1:ee:
97:a6:6c:4f:ba:75:47:1e:f5:89:b5:7e:de:10:2f:1c:0a:b5:
60:31:e0:75:84:ea:85:1d:28:85:e5:7c:1f:23:b0:cf:e0:6a:
5f:16:25:e4:d6:2b:76:28:71:42:64:14:01:b6:ab:a0:00:ca:
5a:2c:67:12:06:0f:19:2d:c7:cb:d6:cd:f3:df:8c:ea:67:d0:
4b:7c:ab:1b:18:04:17:80:72:d2:dc:32:32:f7:4d:9d:20:dc:
b4:81:89:30:90:1c:e1:f2:c4:93:f0:5f:63:8b:88:7b:84:8f:
b3:85:fc:92:0c:31:3c:ca:a5:ec:a3:f5:5a:0f:e9:8f:3a:8e:
e4:b0:d1:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2as7TXwjlHdJ8qeUBULJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZjI0NTVkY2Y0NWFlNjVhNmZkY2NmOGY3ODIxY2UzYzUy
NDAxMWQwHhcNMjUwMjE3MDMwMDMyWhcNMjUwMjE4MDMwMDMyWjAzMTEwLwYDVQQD
EygxOTczMjc5NDc2NmJhNmEwMjU1ZTYxZDNlYzQ4OTY3ZTU2NDRkMWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymZMt6zdQNy5Z7f1TmuQAaIQ0kG1
L0giRkDhH3mrldt7y2gMD9wYEHidti254OL60MFe9mbvVMco2Qj+VP6PcYivV9xv
o3edXU9L6TwXZ6Pf27tAaIXPg1113gP4Z4C/jubBz/Gz52cApyS2AoQJa31A2hjm
GubrtcIFd9DFaWmVq4qdYC9GX6zV79GsWf/0J+ziexTsdDnxVezr1De7KEK9vsK/
cDL9OyJi7zPdJ6z5uKTR84EhIvbp7khpLR9yY9+1JTMTDtr3lWBH11X7J7F621uN
s4SN4dw9BFdBroSi0r41r3+FfNB4ChhoU9RKnxobFCKXwW3z+vMKSzkcvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlzJ5R2a6agJV5h0+xIln5WRNHBMB8GA1UdIwQY
MBaAFILyRV3PRa5lpv3M+PeCHOPFJAEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3ZKRlhjOUZybVdtX2N6NDk0SWM0OFVrQVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81YTI0ZGUtNDRmMC00YTU0LTkxMzct
ZWNkOWZhZmYyNjJjLzEvZ3ZKRlhjOUZybVdtX2N6NDk0SWM0OFVrQVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy81YTI0ZGUtNDRmMC00YTU0LTkxMzctZWNkOWZhZmYyNjJj
LzEvZ3ZKRlhjOUZybVdtX2N6NDk0SWM0OFVrQVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKv7sO7/
YmRH+St6jH0n/dHBMGb3dm1UJgCVuMMGp976/EHqwnaJ84uP/hlni9So0gVtJ/RZ
07X1eBMp1/a4FRvby48PEXakrMuLmyfeOJNT1pc5/PVSvIpiuznps7EOORSBbr4w
/dhGYNU8dIj6J1yOQECFlklhK4AMZvHul6ZsT7p1Rx71ibV+3hAvHAq1YDHgdYTq
hR0oheV8HyOwz+BqXxYl5NYrdihxQmQUAbaroADKWixnEgYPGS3Hy9bN89+M6mfQ
S3yrGxgEF4By0twyMvdNnSDctIGJMJAc4fLEk/BfY4uIe4SPs4X8kgwxPMql7KP1
Wg/pjzqO5LDRGQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:02 2025 by rpki-client