Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File: g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier: lftNCSOUeXmIFDHsIaspm58wm5N1z/hQ9nt2BCFweaY=
Subject key identifier: C8:EA:88:29:8C:7F:E4:E4:F9:19:49:A3:CD:A1:98:DD:23:AC:1C:66
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 0194BB5FF2F61814221234B511FC4694B964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number: 1230
Signing time: Fri 31 Jan 2025 08:00:15 +0000
Manifest this update: Fri 31 Jan 2025 08:00:15 +0000
Manifest next update: Sat 01 Feb 2025 08:00:15 +0000
Files and hashes: 1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: gXaNHKAd+ZC9ykQ9Y4Ve9a51mBEkyNShziaRIOPsL5w=)
2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:f2:f6:18:14:22:12:34:b5:11:fc:46:94:b9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: Jan 31 08:00:15 2025 GMT
Not After : Feb 1 08:00:15 2025 GMT
Subject: CN=c8ea88298c7fe4e4f91949a3cda198dd23ac1c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:ed:79:df:30:f6:aa:f7:82:5f:8a:24:37:
8a:a8:07:bb:f8:09:b2:f3:f6:be:5b:63:3c:da:60:
34:fa:28:1c:ce:83:d4:2a:2b:3f:6d:eb:e2:14:5c:
85:23:cb:37:f9:2e:83:28:6d:c6:57:69:c5:5b:d2:
cb:07:13:0b:db:07:d0:fd:a0:70:83:ad:a2:5b:1e:
21:90:ad:d3:b2:d6:c6:dd:59:da:50:ab:c6:04:16:
1f:27:18:a0:36:2c:c9:a0:92:ea:ac:00:cb:6a:2f:
81:16:5d:1d:34:43:b1:98:00:0a:f7:52:50:b4:30:
4a:83:eb:03:f2:f1:33:dc:aa:fa:9b:67:ec:1e:4a:
6c:2b:98:ab:ae:5d:14:45:56:68:14:01:79:c3:b9:
a3:eb:71:e4:0f:e9:31:4b:a2:95:35:cf:e5:41:c9:
3b:1f:ec:9b:4e:d6:01:85:73:02:0e:fd:fa:5e:5f:
75:02:6b:5e:fa:a3:57:cf:de:b7:ef:8d:e0:5e:b3:
00:14:21:e7:42:56:28:20:21:97:c8:3c:9b:6e:57:
d6:ce:95:bf:d8:04:c2:18:51:75:3f:7c:9e:98:45:
fc:e1:b6:ab:fc:fb:9c:2b:eb:46:f3:c5:ce:f1:6c:
8f:27:be:7c:91:5d:98:8d:42:b3:48:59:96:d3:98:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EA:88:29:8C:7F:E4:E4:F9:19:49:A3:CD:A1:98:DD:23:AC:1C:66
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:20:2b:af:78:08:30:cb:04:31:4c:88:b8:39:7c:4b:88:b2:
25:bc:79:35:fe:14:b4:f9:b8:8c:55:3f:3a:35:17:89:a6:d9:
52:1e:20:42:3a:91:4c:77:21:99:8d:c0:b2:3f:26:96:66:c9:
3a:f2:d6:dc:ec:6b:b4:56:0b:83:8f:6e:85:38:0d:1c:86:ba:
17:bd:c9:76:8c:50:1a:06:1f:22:82:07:49:71:79:49:54:6f:
9c:ba:9e:32:4d:62:fa:97:fc:ec:68:ec:21:b0:71:3e:70:26:
af:39:1b:d7:ca:c6:e2:7d:78:3d:7c:f8:ff:95:9b:98:32:24:
17:0b:3c:6f:9a:bb:fe:df:12:fd:2d:c3:87:9c:45:1e:79:d2:
80:0e:2e:b6:bc:2b:58:bf:82:a3:f6:9a:f0:7e:01:f4:87:70:
18:38:77:40:57:da:be:e8:31:a8:ee:6b:62:dd:7e:93:82:19:
97:db:90:43:92:98:49:06:51:a0:4c:f4:9e:bd:2e:fc:78:a3:
b6:02:b7:21:5a:d2:84:93:e6:3a:a2:9f:fd:67:77:e2:30:a1:
fd:c3:9f:4d:85:f0:94:73:ca:2a:9b:22:3a:1f:34:08:cf:d1:
0b:c5:bc:75:76:47:0f:f8:10:3f:2e:6b:00:2e:d9:83:93:39:
30:93:07:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X/L2GBQiEjS1EfxGlLlkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNmE3M2JlZDc1YWE0ZWZhNTc3ZWQ5MGFkMzU2MmUyMTk1
MWQxYjIwHhcNMjUwMTMxMDgwMDE1WhcNMjUwMjAxMDgwMDE1WjAzMTEwLwYDVQQD
EyhjOGVhODgyOThjN2ZlNGU0ZjkxOTQ5YTNjZGExOThkZDIzYWMxYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7nted8w9qr3gl+KJDeKqAe7+Amy
8/a+W2M82mA0+igczoPUKis/beviFFyFI8s3+S6DKG3GV2nFW9LLBxML2wfQ/aBw
g62iWx4hkK3TstbG3VnaUKvGBBYfJxigNizJoJLqrADLai+BFl0dNEOxmAAK91JQ
tDBKg+sD8vEz3Kr6m2fsHkpsK5irrl0URVZoFAF5w7mj63HkD+kxS6KVNc/lQck7
H+ybTtYBhXMCDv36Xl91Amte+qNXz963743gXrMAFCHnQlYoICGXyDybblfWzpW/
2ATCGFF1P3yemEX84bar/PucK+tG88XO8WyPJ758kV2YjUKzSFmW05gs/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjqiCmMf+Tk+RlJo82hmN0jrBxmMB8GA1UdIwQY
MBaAFINqc77XWqTvpXftkK01YuIZUdGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJwenZ0ZGFwTy1sZC0yUXJUVmk0aGxSMGJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hYjM0YWQtOWU5YS00Mjg5LTg3Mjct
YjFhY2Q3NTAxOGMzLzEvZzJwenZ0ZGFwTy1sZC0yUXJUVmk0aGxSMGJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9hYjM0YWQtOWU5YS00Mjg5LTg3MjctYjFhY2Q3NTAxOGMz
LzEvZzJwenZ0ZGFwTy1sZC0yUXJUVmk0aGxSMGJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSArr3gI
MMsEMUyIuDl8S4iyJbx5Nf4UtPm4jFU/OjUXiabZUh4gQjqRTHchmY3Asj8mlmbJ
OvLW3OxrtFYLg49uhTgNHIa6F73JdoxQGgYfIoIHSXF5SVRvnLqeMk1i+pf87Gjs
IbBxPnAmrzkb18rG4n14PXz4/5WbmDIkFws8b5q7/t8S/S3Dh5xFHnnSgA4utrwr
WL+Co/aa8H4B9IdwGDh3QFfavugxqO5rYt1+k4IZl9uQQ5KYSQZRoEz0nr0u/Hij
tgK3IVrShJPmOqKf/Wd34jCh/cOfTYXwlHPKKpsiOh80CM/RC8W8dXZHD/gQPy5r
AC7Zg5M5MJMHUw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:02 2025 by rpki-client on console-fra.rpki-client.org