Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier: K92w+tJBLB7hqdlUo+JcoZVfBI9XedYQhDGPORM1Iw0=
Subject key identifier: E4:4C:1B:00:E6:FC:00:90:96:66:9D:0F:4B:85:9F:07:5A:C0:7C:08
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 019511D9B9C0A8EA26E1A52AE112B5C7287B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number: 0531
Signing time: Mon 17 Feb 2025 03:00:36 +0000
Manifest this update: Mon 17 Feb 2025 03:00:36 +0000
Manifest next update: Tue 18 Feb 2025 03:00:36 +0000
Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: qs3N7DSJZ6U1bMX61AqS8tf6BfxMMez7g+Pj1igisMA=)
2: YdrEYumUdtVM8J8IIs8UcIvimLU.roa (hash: Q1VxicqBbCeOUqKh1Ex9vJAFuLnRZwsg3d3+Cv9fZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:b9:c0:a8:ea:26:e1:a5:2a:e1:12:b5:c7:28:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Feb 17 03:00:36 2025 GMT
Not After : Feb 18 03:00:36 2025 GMT
Subject: CN=e44c1b00e6fc009096669d0f4b859f075ac07c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:78:1b:4a:be:3c:16:3a:6a:9d:75:cd:86:
d7:45:57:95:85:07:d5:16:08:2a:19:33:1f:9a:ad:
cf:d8:73:a7:51:55:3f:fc:2f:d7:cd:9b:36:b0:c7:
1d:fe:06:25:73:6b:e6:0f:13:6b:a4:dd:b0:24:5d:
99:0a:1c:17:19:72:2b:22:60:a8:ef:cf:57:f1:f1:
e1:55:88:fe:f8:b5:10:ba:52:8c:5b:91:6a:1c:4e:
ba:9a:c9:69:df:98:df:99:59:01:5b:b9:59:53:3c:
f1:37:12:1f:ca:cb:db:80:28:9e:30:3a:59:d7:f1:
ca:5c:7d:e2:90:37:94:21:24:ac:3b:65:ee:5d:3e:
24:20:9d:26:e5:67:32:c1:ce:bb:5b:e3:a0:1f:09:
0b:da:df:24:7e:e3:3e:aa:bb:15:b3:65:8a:f7:8a:
b7:4c:8d:f8:26:01:b8:58:ce:5e:6e:2a:a9:48:7a:
04:51:cb:b6:e1:f2:39:0f:6a:42:f5:87:62:c8:c2:
70:bb:fd:f0:ea:67:86:68:ff:c3:9e:df:82:64:39:
ff:6c:23:c7:fa:fc:4b:ce:49:46:a7:af:34:82:c0:
84:94:3c:46:a0:0b:c6:c5:1a:90:98:04:e2:24:28:
eb:2d:af:89:a0:d9:82:d6:b4:f0:5e:dd:73:8e:fe:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4C:1B:00:E6:FC:00:90:96:66:9D:0F:4B:85:9F:07:5A:C0:7C:08
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5f:b2:9b:6b:38:16:ea:96:ff:87:16:4f:f6:c5:66:ce:ea:
ce:83:c3:72:29:ac:23:42:13:3f:f7:b2:74:c2:7b:6f:37:08:
e9:8a:41:ef:da:80:89:2f:30:55:5d:69:ac:ef:93:d8:5c:c7:
c9:5a:e9:71:75:b8:52:40:8e:04:c5:93:19:2c:6f:08:28:b1:
20:5e:6d:90:4e:eb:ce:0e:a5:ce:6b:34:32:69:f9:85:9a:ac:
d5:09:db:a5:c6:98:97:65:05:85:a0:d0:50:d8:78:90:bc:b4:
e4:19:b8:69:62:23:3d:bb:f0:e9:4f:6c:12:b6:86:93:a8:cd:
92:ba:25:07:71:73:50:2b:fd:20:3e:9b:a2:48:37:ec:82:57:
f8:61:0e:71:a8:19:d0:bc:20:9e:55:d1:63:ed:5f:af:03:d5:
33:7d:82:a2:a3:20:60:08:c6:ac:0b:85:fa:3b:f9:ef:21:4c:
92:2c:b6:1f:fd:c2:bb:6d:5a:73:9a:a7:cd:e8:0e:9d:f3:f3:
a8:57:52:32:95:97:08:81:b8:8a:d3:78:45:76:44:54:54:4b:
b1:58:84:78:f4:50:57:db:92:42:19:93:ef:9f:1d:3a:47:dd:
ec:84:df:b3:e8:a4:c1:a1:e6:8d:2a:09:ca:a0:85:ed:66:67:
f5:cf:38:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2bnAqOom4aUq4RK1xyh7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTRiMmVlM2ZkOTgxOTQwMWRhY2JhNDNlYzBhYzIwMGIy
OTU5YzAwHhcNMjUwMjE3MDMwMDM2WhcNMjUwMjE4MDMwMDM2WjAzMTEwLwYDVQQD
EyhlNDRjMWIwMGU2ZmMwMDkwOTY2NjlkMGY0Yjg1OWYwNzVhYzA3YzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdR4G0q+PBY6ap11zYbXRVeVhQfV
FggqGTMfmq3P2HOnUVU//C/XzZs2sMcd/gYlc2vmDxNrpN2wJF2ZChwXGXIrImCo
789X8fHhVYj++LUQulKMW5FqHE66mslp35jfmVkBW7lZUzzxNxIfysvbgCieMDpZ
1/HKXH3ikDeUISSsO2XuXT4kIJ0m5Wcywc67W+OgHwkL2t8kfuM+qrsVs2WK94q3
TI34JgG4WM5ebiqpSHoEUcu24fI5D2pC9YdiyMJwu/3w6meGaP/Dnt+CZDn/bCPH
+vxLzklGp680gsCElDxGoAvGxRqQmATiJCjrLa+JoNmC1rTwXt1zjv6/BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORMGwDm/ACQlmadD0uFnwdawHwIMB8GA1UdIwQY
MBaAFBoUsu4/2YGUAdrLpD7ArCALKVnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDct
ZmRhOWNkYzkwZmUzLzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDctZmRhOWNkYzkwZmUz
LzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhl+ym2s4
FuqW/4cWT/bFZs7qzoPDcimsI0ITP/eydMJ7bzcI6YpB79qAiS8wVV1prO+T2FzH
yVrpcXW4UkCOBMWTGSxvCCixIF5tkE7rzg6lzms0Mmn5hZqs1QnbpcaYl2UFhaDQ
UNh4kLy05Bm4aWIjPbvw6U9sEraGk6jNkrolB3FzUCv9ID6bokg37IJX+GEOcagZ
0LwgnlXRY+1frwPVM32CoqMgYAjGrAuF+jv57yFMkiy2H/3Cu21ac5qnzegOnfPz
qFdSMpWXCIG4itN4RXZEVFRLsViEePRQV9uSQhmT758dOkfd7ITfs+ikwaHmjSoJ
yqCF7WZn9c84yw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:35 2025 by rpki-client