Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: 2pkkZtn6mo/o9Flec73J7lEj7T3i+ueqrtJVq4Ni7HM=
Subject key identifier: E8:27:03:D4:3F:56:A3:72:3A:6A:99:4C:16:47:7A:0C:FF:F8:50:90
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 0193640F42FC6AD0C425B0AF17720BC1143C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 0AA8
Signing time: Mon 25 Nov 2024 16:02:22 +0000
Manifest this update: Mon 25 Nov 2024 16:02:22 +0000
Manifest next update: Tue 26 Nov 2024 16:02:22 +0000
Files and hashes: 1: 9G4k3_QRj6FGz731QwKZBAbBs14.roa (hash: fKMdxLR6xfX1PbTURjbHkE1SXodZI/S5h/7CQKPdhb8=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: 7BvEz9k8z3Gz13f//8EG1xecdompqhFdFx8A+x/NqJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:0f:42:fc:6a:d0:c4:25:b0:af:17:72:0b:c1:14:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Nov 25 16:02:22 2024 GMT
Not After : Nov 26 16:02:22 2024 GMT
Subject: CN=e82703d43f56a3723a6a994c16477a0cfff85090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6b:0c:9d:1e:99:8b:92:94:9f:a4:57:7e:b1:
4b:97:cc:ec:14:46:ad:dd:33:b4:db:ec:f6:27:8d:
c4:65:95:98:86:b8:89:19:0b:70:25:8f:19:79:54:
89:41:58:f6:25:41:25:23:63:21:ce:64:47:01:f9:
41:55:01:50:7d:e4:29:85:85:10:38:56:9c:9b:f9:
c6:d7:c8:70:62:aa:8a:90:84:40:0d:b4:04:a6:8d:
6a:7d:16:d9:eb:c1:25:89:99:cc:50:2d:b1:62:62:
3d:ca:db:49:86:6a:e0:4d:e3:3a:28:68:5d:41:59:
d1:2f:62:10:d9:5d:5c:c5:2b:81:09:9f:b7:f2:ab:
e0:e4:37:29:6f:3f:a7:df:20:5a:e7:ac:1e:76:56:
a9:bc:9d:d8:81:1d:a9:70:7a:22:6a:76:d3:a8:dc:
4f:e7:a1:ce:5c:eb:ab:a0:f5:0c:e5:7e:0c:69:a1:
5e:03:12:e8:fa:b2:09:81:12:95:5f:4a:c2:d8:3b:
9d:65:37:ca:ad:9b:9c:3d:11:a6:7c:b1:79:50:1a:
5b:02:3a:c2:cc:52:1d:90:24:69:d7:41:8e:8d:a0:
21:01:fd:49:e5:75:14:4f:01:4b:e4:2f:6e:dc:2f:
47:df:f5:a7:8d:08:d1:d5:4d:53:ae:72:5d:dd:15:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:27:03:D4:3F:56:A3:72:3A:6A:99:4C:16:47:7A:0C:FF:F8:50:90
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f7:78:71:04:76:81:9c:e3:0b:7b:a1:c7:86:06:bc:54:83:
1c:d8:b1:c2:19:98:9f:57:f5:41:47:a0:89:78:ae:55:7a:55:
a7:ca:2e:7b:19:60:2f:15:c7:00:c8:d0:7c:8c:2e:7a:2f:bd:
4b:35:95:30:90:fc:7f:20:49:cd:6d:d7:00:38:97:ff:78:48:
1f:6c:e7:25:da:0e:32:e9:26:21:07:4b:4d:1d:4c:f5:e7:92:
95:3e:e2:08:21:a1:ba:43:97:f0:9e:f5:4d:a9:87:2b:d2:11:
bf:92:24:43:58:ae:04:56:8e:86:aa:2c:61:e2:ff:3e:e5:ad:
6d:5b:9b:a4:11:44:0b:95:09:e0:a1:b9:b1:64:38:c6:85:de:
ad:9a:b6:14:73:72:38:83:ff:2f:f4:ff:8a:f4:0e:8e:20:b8:
15:5e:a6:61:fe:57:70:14:ec:a8:da:dd:3a:16:86:89:20:fc:
94:b0:75:01:5f:40:d4:47:47:33:aa:81:26:ce:69:96:5b:d9:
f0:4f:f7:d5:87:54:72:80:51:c3:f6:f2:b2:71:d3:f1:92:4e:
48:a8:cd:5d:e7:64:b6:ca:f5:b6:93:78:99:83:29:82:63:51:
ac:a7:12:72:e9:32:5d:79:64:1a:35:12:3e:04:93:86:57:7f:
5a:ff:4d:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNkD0L8atDEJbCvF3ILwRQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2
YmFlNGMwHhcNMjQxMTI1MTYwMjIyWhcNMjQxMTI2MTYwMjIyWjAzMTEwLwYDVQQD
EyhlODI3MDNkNDNmNTZhMzcyM2E2YTk5NGMxNjQ3N2EwY2ZmZjg1MDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42sMnR6Zi5KUn6RXfrFLl8zsFEat
3TO02+z2J43EZZWYhriJGQtwJY8ZeVSJQVj2JUElI2MhzmRHAflBVQFQfeQphYUQ
OFacm/nG18hwYqqKkIRADbQEpo1qfRbZ68EliZnMUC2xYmI9yttJhmrgTeM6KGhd
QVnRL2IQ2V1cxSuBCZ+38qvg5Dcpbz+n3yBa56wedlapvJ3YgR2pcHoianbTqNxP
56HOXOuroPUM5X4MaaFeAxLo+rIJgRKVX0rC2DudZTfKrZucPRGmfLF5UBpbAjrC
zFIdkCRp10GOjaAhAf1J5XUUTwFL5C9u3C9H3/WnjQjR1U1TrnJd3RWGGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgnA9Q/VqNyOmqZTBZHegz/+FCQMB8GA1UdIwQY
MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt
YTE1YWY1ZThmMTNjLzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj
LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/d4cQR2
gZzjC3uhx4YGvFSDHNixwhmYn1f1QUegiXiuVXpVp8ouexlgLxXHAMjQfIwuei+9
SzWVMJD8fyBJzW3XADiX/3hIH2znJdoOMukmIQdLTR1M9eeSlT7iCCGhukOX8J71
TamHK9IRv5IkQ1iuBFaOhqosYeL/PuWtbVubpBFEC5UJ4KG5sWQ4xoXerZq2FHNy
OIP/L/T/ivQOjiC4FV6mYf5XcBTsqNrdOhaGiSD8lLB1AV9A1EdHM6qBJs5pllvZ
8E/31YdUcoBRw/bysnHT8ZJOSKjNXedktsr1tpN4mYMpgmNRrKcScukyXXlkGjUS
PgSThld/Wv9NEw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:23:59 2024 by rpki-client on console-fra.rpki-client.org