Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier: L+z+vIy7ywGXECI89YVsXDe1rzI9kHdPuABTt9YFfic=
Subject key identifier: 1A:EA:29:2B:25:D3:29:B3:6E:79:F1:E3:5B:12:42:60:9A:43:50:34
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial: 019511D96F10E17F24C597D716E27918E9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 03:00:17 +0000
Manifest this update: Mon 17 Feb 2025 03:00:17 +0000
Manifest next update: Tue 18 Feb 2025 03:00:17 +0000
Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: uQp+pz/j7i9N2YnjjoY2tNWFQrowjy8pTPbbeOoqaDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:6f:10:e1:7f:24:c5:97:d7:16:e2:79:18:e9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Validity
Not Before: Feb 17 03:00:17 2025 GMT
Not After : Feb 18 03:00:17 2025 GMT
Subject: CN=1aea292b25d329b36e79f1e35b1242609a435034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:ca:52:f9:ad:4f:cb:07:b5:df:4c:21:a8:
61:4c:cb:c5:ff:1d:b6:ab:ae:1b:9f:ef:6b:e5:b3:
7b:35:d5:7d:d6:3f:3e:e2:dc:87:ac:e5:ca:1f:39:
95:f1:cd:1b:1d:21:93:79:06:80:60:3f:b0:90:56:
d2:9d:28:ee:7f:71:0f:d2:db:45:83:fa:7b:15:d6:
02:8b:b8:47:0c:72:8b:3e:92:6c:ad:73:3e:c5:2b:
00:19:61:6d:5e:79:19:c8:44:15:df:0e:1c:4d:f6:
67:cd:bf:3e:d8:e1:ef:9a:ec:ad:8e:78:82:40:10:
a1:4e:cc:b4:de:e3:97:c1:32:ea:d2:d0:3a:5f:57:
d3:f5:76:4b:aa:d7:d3:98:18:11:01:b0:3e:c9:60:
e4:02:f2:08:5c:9d:1e:62:69:f3:52:b9:f7:5d:aa:
70:fe:39:33:6e:f6:31:bb:ed:a9:85:b4:dd:6f:bc:
67:90:5f:57:ff:c0:b3:02:e4:c3:88:1b:82:92:e6:
a6:62:f5:ce:d4:de:17:60:62:b7:e2:0d:4b:f7:50:
0f:a8:4b:2d:e0:df:a8:d1:e6:0e:e8:f0:c1:6b:b4:
f3:51:33:a2:57:cf:fd:ce:6b:4a:b1:d5:ac:f9:a5:
20:ab:af:78:8f:b3:8e:07:4f:7b:1f:0a:6a:e8:3b:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EA:29:2B:25:D3:29:B3:6E:79:F1:E3:5B:12:42:60:9A:43:50:34
X509v3 Authority Key Identifier:
keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:de:a8:78:ec:58:63:36:f0:14:ce:20:36:10:c7:d1:e1:a1:
db:f1:2a:1b:8a:1f:40:83:5f:61:d3:6a:9e:4a:23:e7:0d:1b:
c8:d8:9f:dc:72:9c:09:77:97:8a:14:b7:d2:eb:b4:79:bd:98:
21:db:91:d8:96:c3:8f:80:38:2b:13:6e:32:ca:35:3e:d0:fc:
aa:35:84:03:34:ac:6c:e3:a0:3e:9d:ba:20:09:02:08:a1:06:
77:d4:c6:c7:97:0d:9a:84:9f:f0:73:ce:57:94:2e:a0:8d:bb:
4d:e5:67:cc:98:61:0d:df:71:dc:0d:f0:fc:ba:69:73:30:48:
a5:d5:61:e5:fc:9b:b1:aa:53:38:cd:32:48:7d:a0:31:91:62:
88:16:cd:0b:8b:e3:03:9e:4c:3e:41:2b:96:6c:e0:e6:86:fa:
e0:37:a5:85:cd:58:12:d5:c7:db:00:bc:5a:9f:95:c8:dd:b2:
05:46:58:bf:a1:1b:db:fd:31:d9:9a:3a:30:f3:25:7d:71:49:
61:7b:6b:07:9c:f9:ce:16:d4:3d:73:fc:45:d9:69:47:0c:4a:
0e:48:bb:37:38:55:36:e9:7b:64:3c:1e:36:32:2a:b6:27:10:
81:ee:51:49:8f:a8:78:d0:d9:f2:57:5a:39:b7:af:06:de:6a:
72:55:eb:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2W8Q4X8kxZfXFuJ5GOm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDljYmFjNTdmY2M2YzBjYWI3M2EyNGQyMGYwMTZmNjg2
Yjc2MjYwHhcNMjUwMjE3MDMwMDE3WhcNMjUwMjE4MDMwMDE3WjAzMTEwLwYDVQQD
EygxYWVhMjkyYjI1ZDMyOWIzNmU3OWYxZTM1YjEyNDI2MDlhNDM1MDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oXKUvmtT8sHtd9MIahhTMvF/x22
q64bn+9r5bN7NdV91j8+4tyHrOXKHzmV8c0bHSGTeQaAYD+wkFbSnSjuf3EP0ttF
g/p7FdYCi7hHDHKLPpJsrXM+xSsAGWFtXnkZyEQV3w4cTfZnzb8+2OHvmuytjniC
QBChTsy03uOXwTLq0tA6X1fT9XZLqtfTmBgRAbA+yWDkAvIIXJ0eYmnzUrn3Xapw
/jkzbvYxu+2phbTdb7xnkF9X/8CzAuTDiBuCkuamYvXO1N4XYGK34g1L91APqEst
4N+o0eYO6PDBa7TzUTOiV8/9zmtKsdWs+aUgq694j7OOB097Hwpq6DuYdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrqKSsl0ymzbnnx41sSQmCaQ1A0MB8GA1UdIwQY
MBaAFBoJy6xX/MbAyrc6JNIPAW9oa3YmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQt
YTU3NmYwYTE0NWJhLzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQtYTU3NmYwYTE0NWJh
LzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmd6oeOxY
YzbwFM4gNhDH0eGh2/EqG4ofQINfYdNqnkoj5w0byNif3HKcCXeXihS30uu0eb2Y
IduR2JbDj4A4KxNuMso1PtD8qjWEAzSsbOOgPp26IAkCCKEGd9TGx5cNmoSf8HPO
V5QuoI27TeVnzJhhDd9x3A3w/LppczBIpdVh5fybsapTOM0ySH2gMZFiiBbNC4vj
A55MPkErlmzg5ob64Delhc1YEtXH2wC8Wp+VyN2yBUZYv6Eb2/0x2Zo6MPMlfXFJ
YXtrB5z5zhbUPXP8RdlpRwxKDki7NzhVNul7ZDweNjIqticQge5RSY+oeNDZ8lda
ObevBt5qclXrRQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:43 2025 by rpki-client