Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: LxG2SoimlNU0BYQSHDdYzgf08RkThNHjziRXaOLqNAo=
Subject key identifier: 3B:F3:07:8B:79:1D:58:FC:CD:DD:88:85:49:4F:8C:4B:36:B5:1A:B0
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 0193572E026F6619BDFDF58C624C5343F51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 0C06
Signing time: Sat 23 Nov 2024 04:00:53 +0000
Manifest this update: Sat 23 Nov 2024 04:00:53 +0000
Manifest next update: Sun 24 Nov 2024 04:00:53 +0000
Files and hashes: 1: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: ZDoDy6PEzpDfEY/XLYs3Y8GNk2m97YGv+GCiUTIcp5A=)
2: _zIlXljsi9BxoVmf9WdILAiyTPQ.roa (hash: R34Q3li54s+ayOt5OXpxt9uj8CMaQK3WBNg/JLeSWTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2e:02:6f:66:19:bd:fd:f5:8c:62:4c:53:43:f5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Nov 23 04:00:53 2024 GMT
Not After : Nov 24 04:00:53 2024 GMT
Subject: CN=3bf3078b791d58fccddd8885494f8c4b36b51ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:c3:1a:c8:78:c8:e0:a1:8a:ee:3d:00:6c:
ea:ca:c3:1d:10:19:a1:2d:55:ed:7c:25:cb:c7:a9:
5c:c2:e5:3d:23:5e:9e:4f:c6:89:50:96:e2:83:8e:
70:af:ec:03:26:29:2b:95:49:11:61:10:21:c6:bc:
b0:71:7f:f9:4c:bd:3a:fc:9b:d8:cf:2e:dc:26:fb:
d3:99:6d:ca:70:f0:69:6c:53:27:74:1b:24:db:db:
f3:af:b3:d9:5e:98:2b:ac:4b:5e:20:82:f2:84:9c:
53:2c:59:8e:1b:a9:a6:37:41:46:d1:51:02:d5:5a:
18:3d:8b:7d:a0:e7:77:54:60:63:e8:98:e5:13:82:
70:ac:73:0a:ea:34:66:55:79:e8:fd:d0:43:6e:98:
00:d6:97:cc:3d:e2:99:9e:b7:c4:45:92:23:75:21:
d1:59:cb:43:11:8b:ae:27:0c:90:7d:ea:a8:d0:78:
68:c1:c5:27:75:3f:3b:88:94:79:01:4f:e3:ca:4f:
60:b1:3e:f2:cd:62:6f:0c:a7:93:51:29:1c:b8:be:
50:1a:62:82:f9:a1:1a:b3:1c:68:c8:5f:70:2d:0a:
57:15:4c:06:a4:e5:8c:28:94:cd:f9:29:81:a8:7d:
06:89:ba:92:77:07:2b:d9:4c:bc:7a:59:1e:46:9c:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F3:07:8B:79:1D:58:FC:CD:DD:88:85:49:4F:8C:4B:36:B5:1A:B0
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:98:b1:4d:ed:9f:7b:9b:33:dc:2c:38:12:cb:fb:48:da:1b:
c1:e9:af:6f:16:bf:d8:b3:96:50:ce:7a:a0:ed:4d:fd:6a:1f:
6f:42:0f:94:83:3e:49:27:18:a3:ca:8b:82:cf:18:89:d6:03:
fc:bf:89:a6:e5:39:4f:e2:3a:7a:78:56:e6:37:0f:7c:9c:dc:
94:38:db:62:a7:83:b5:43:44:da:84:4a:6f:99:bc:e2:55:aa:
79:b2:88:a9:dd:bb:51:9c:69:b4:59:85:1f:c4:f6:2c:ab:c9:
b5:2a:f1:92:ee:dc:6b:cf:a9:54:d1:6b:dd:d5:40:05:15:18:
c8:59:b9:ea:5f:3b:15:eb:d0:bb:00:2c:f4:9b:43:22:54:b0:
48:04:1a:ca:3c:f4:26:a6:36:fe:52:11:af:81:9a:82:d9:41:
e1:e4:11:d8:32:6a:3d:92:06:f7:95:e6:e6:31:44:28:ef:0b:
15:4d:16:0e:e1:ec:ec:49:7e:b4:69:c6:c1:d4:61:72:60:6e:
0d:fd:ae:ce:ad:34:23:96:26:4d:b4:03:d5:34:e3:ad:f9:9f:
87:1e:f1:35:5f:d7:06:bf:d0:12:df:ec:8d:b6:35:32:2b:21:
50:08:a8:a3:7e:94:33:12:34:ef:e8:20:24:81:a7:41:7e:3e:
78:26:88:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLgJvZhm9/fWMYkxTQ/UfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGQwOTIzZWMxMDY2Nzc2MGFkODgyZTZhZjlhMTU2OTlj
MDVlZjgwHhcNMjQxMTIzMDQwMDUzWhcNMjQxMTI0MDQwMDUzWjAzMTEwLwYDVQQD
EygzYmYzMDc4Yjc5MWQ1OGZjY2RkZDg4ODU0OTRmOGM0YjM2YjUxYWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwvDGsh4yOChiu49AGzqysMdEBmh
LVXtfCXLx6lcwuU9I16eT8aJUJbig45wr+wDJikrlUkRYRAhxrywcX/5TL06/JvY
zy7cJvvTmW3KcPBpbFMndBsk29vzr7PZXpgrrEteIILyhJxTLFmOG6mmN0FG0VEC
1VoYPYt9oOd3VGBj6JjlE4JwrHMK6jRmVXno/dBDbpgA1pfMPeKZnrfERZIjdSHR
WctDEYuuJwyQfeqo0HhowcUndT87iJR5AU/jyk9gsT7yzWJvDKeTUSkcuL5QGmKC
+aEasxxoyF9wLQpXFUwGpOWMKJTN+SmBqH0GibqSdwcr2Uy8elkeRpzXMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvzB4t5HVj8zd2IhUlPjEs2tRqwMB8GA1UdIwQY
MBaAFBpNCSPsEGZ3YK2ILmr5oVaZwF74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2swSkktd1FabmRncllndWF2bWhWcG5BWHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zNTY0ZTctMTFkNC00ZDdhLThiY2Mt
YTk1Mzc2OGZkZTJmLzEvR2swSkktd1FabmRncllndWF2bWhWcG5BWHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zNTY0ZTctMTFkNC00ZDdhLThiY2MtYTk1Mzc2OGZkZTJm
LzEvR2swSkktd1FabmRncllndWF2bWhWcG5BWHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5ixTe2f
e5sz3Cw4Esv7SNobwemvbxa/2LOWUM56oO1N/Wofb0IPlIM+SScYo8qLgs8YidYD
/L+JpuU5T+I6enhW5jcPfJzclDjbYqeDtUNE2oRKb5m84lWqebKIqd27UZxptFmF
H8T2LKvJtSrxku7ca8+pVNFr3dVABRUYyFm56l87FevQuwAs9JtDIlSwSAQayjz0
JqY2/lIRr4GagtlB4eQR2DJqPZIG95Xm5jFEKO8LFU0WDuHs7El+tGnGwdRhcmBu
Df2uzq00I5YmTbQD1TTjrfmfhx7xNV/XBr/QEt/sjbY1MishUAioo36UMxI07+gg
JIGnQX4+eCaIGg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:03 2024 by rpki-client on console-fra.rpki-client.org