Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
File: gs1f087z4cqiC7ph-i1RtrlOtU0.mft (raw, json)
Hash identifier: AZrKN0TUEMfj4qacYIbATjqZfZIL2c1fDpgBd7x+X6s=
Subject key identifier: CE:69:85:0A:50:50:26:58:86:97:38:A5:8B:CA:65:F1:B4:B5:CA:DE
Authority key identifier: 82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
Certificate issuer: /CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Certificate serial: 0194C3886FDF13068E3300A7BE0ECDB4FF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
Manifest number: 05AA
Signing time: Sat 01 Feb 2025 22:01:26 +0000
Manifest this update: Sat 01 Feb 2025 22:01:26 +0000
Manifest next update: Sun 02 Feb 2025 22:01:26 +0000
Files and hashes: 1: 6-Zj3bcyCjNacB1xPlmd-41FIz0.roa (hash: A56X5AQbB29BB1sjg1qgfONBr80piND7T2p/Wos86gU=)
2: gs1f087z4cqiC7ph-i1RtrlOtU0.crl (hash: I1HD9X7uE8SeMsGehwCycZIjqJbZ5InIwK5Yxu++TnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:6f:df:13:06:8e:33:00:a7:be:0e:cd:b4:ff:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Validity
Not Before: Feb 1 22:01:26 2025 GMT
Not After : Feb 2 22:01:26 2025 GMT
Subject: CN=ce69850a50502658869738a58bca65f1b4b5cade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:46:9b:ae:19:38:5f:7e:22:41:85:08:b3:
b2:a7:d9:bf:7e:36:b7:db:7e:45:15:32:52:fd:8d:
8d:e2:ba:e5:81:df:1e:1a:4d:6c:c3:00:45:3e:e7:
97:f8:ba:e7:30:30:81:01:ed:bb:c4:16:57:2a:23:
f6:f5:06:47:35:66:f2:cc:ab:d2:da:9f:3a:31:34:
c0:eb:8f:00:0a:ca:95:1e:6f:47:b7:39:91:06:a3:
5d:40:6a:75:91:8f:ee:69:0a:b8:f1:a1:38:3f:bf:
04:90:0f:33:1a:88:da:41:9d:94:9c:ad:3c:c9:49:
f6:2c:04:81:81:ca:24:05:64:d2:73:f6:e3:c6:15:
74:d7:00:ef:de:68:b2:6d:0f:e7:a7:e2:47:01:3b:
37:1e:f7:f6:0a:96:68:a6:3f:03:2f:cb:de:02:56:
91:06:3e:dc:a8:d9:37:08:9d:e8:bc:72:03:9c:1f:
2d:3e:a5:37:61:ce:db:6d:96:e4:31:f2:a6:a8:61:
c4:9e:c6:0c:78:a6:69:33:01:f3:06:be:4e:75:81:
7e:85:2e:c9:44:c3:f1:70:d6:75:32:ed:54:85:0f:
0c:ae:9f:ae:ab:55:42:5c:3c:1c:af:df:5f:f9:eb:
83:d5:bb:b5:bb:85:b5:96:cc:9e:1c:a2:49:49:43:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:69:85:0A:50:50:26:58:86:97:38:A5:8B:CA:65:F1:B4:B5:CA:DE
X509v3 Authority Key Identifier:
keyid:82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3d:10:e7:2f:f8:0b:e2:bc:32:e2:98:d1:41:85:76:de:bd:
36:55:44:ba:28:d3:9c:c6:8d:3f:fd:bf:e0:84:61:61:65:3b:
63:f0:8a:f2:2b:98:53:04:9a:20:4f:3d:df:4f:7d:fc:eb:ea:
07:f8:da:1b:84:f4:3f:73:71:80:a5:1a:e9:30:1b:f2:5e:c9:
bd:a4:1d:bf:6c:55:12:5d:9e:a8:95:79:0c:50:a6:c3:58:33:
d4:ef:c5:76:c2:b6:94:cf:84:da:d2:8a:96:04:80:a8:27:45:
ce:17:2a:b9:0c:9e:19:b8:22:ff:6e:ca:9d:59:f3:c6:9f:7f:
57:c9:af:06:b2:43:a3:6c:7e:4d:08:e2:15:6f:b0:a6:70:70:
e1:00:a6:bf:2a:3f:4b:8d:06:7f:f9:25:6c:92:15:f9:57:31:
6e:79:ab:de:ff:3a:8a:94:58:b0:56:9f:a8:ce:8a:af:b7:2f:
aa:64:7a:e7:41:15:a9:87:ab:7f:e5:9a:b0:0a:3a:4e:53:80:
3b:08:60:01:5e:14:44:d8:2f:8f:4f:3f:bc:7a:d4:c7:b0:bc:
5b:fa:50:c1:f0:a4:6b:a7:c2:08:16:01:d7:f7:88:d6:2e:a9:
ab:6f:78:87:6b:51:20:da:c0:f3:26:f3:07:c6:b7:2e:00:6e:
ab:2f:17:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDiG/fEwaOMwCnvg7NtP85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyY2Q1ZmQzY2VmM2UxY2FhMjBiYmE2MWZhMmQ1MWI2Yjk0
ZWI1NGQwHhcNMjUwMjAxMjIwMTI2WhcNMjUwMjAyMjIwMTI2WjAzMTEwLwYDVQQD
EyhjZTY5ODUwYTUwNTAyNjU4ODY5NzM4YTU4YmNhNjVmMWI0YjVjYWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeJGm64ZOF9+IkGFCLOyp9m/fja3
235FFTJS/Y2N4rrlgd8eGk1swwBFPueX+LrnMDCBAe27xBZXKiP29QZHNWbyzKvS
2p86MTTA648ACsqVHm9HtzmRBqNdQGp1kY/uaQq48aE4P78EkA8zGojaQZ2UnK08
yUn2LASBgcokBWTSc/bjxhV01wDv3miybQ/np+JHATs3Hvf2CpZopj8DL8veAlaR
Bj7cqNk3CJ3ovHIDnB8tPqU3Yc7bbZbkMfKmqGHEnsYMeKZpMwHzBr5OdYF+hS7J
RMPxcNZ1Mu1UhQ8Mrp+uq1VCXDwcr99f+euD1bu1u4W1lsyeHKJJSUNqkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5phQpQUCZYhpc4pYvKZfG0tcreMB8GA1UdIwQY
MBaAFILNX9PO8+HKogu6YfotUba5TrVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MzZlNTQtZDhmZC00NWVmLWJlNjAt
ZjUyMzA2ZWViNzIyLzEvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MzZlNTQtZDhmZC00NWVmLWJlNjAtZjUyMzA2ZWViNzIy
LzEvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbD0Q5y/4
C+K8MuKY0UGFdt69NlVEuijTnMaNP/2/4IRhYWU7Y/CK8iuYUwSaIE893099/Ovq
B/jaG4T0P3NxgKUa6TAb8l7JvaQdv2xVEl2eqJV5DFCmw1gz1O/FdsK2lM+E2tKK
lgSAqCdFzhcquQyeGbgi/27KnVnzxp9/V8mvBrJDo2x+TQjiFW+wpnBw4QCmvyo/
S40Gf/klbJIV+Vcxbnmr3v86ipRYsFafqM6Kr7cvqmR650EVqYerf+WasAo6TlOA
OwhgAV4URNgvj08/vHrUx7C8W/pQwfCka6fCCBYB1/eI1i6pq294h2tRINrA8ybz
B8a3LgBuqy8XrA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:55 2025 by rpki-client