Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File: GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier: x/iio7gZpDh/mmWacvTmXD2u69G3S6dRlgMCqErvc2w=
Subject key identifier: 17:4D:B9:F8:5E:DD:A3:FF:50:DB:AA:29:BF:3E:85:62:83:53:84:A4
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer: /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial: 0194BABBC8FD01E151AE138E679C1ABBA338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 05:00:56 +0000
Manifest this update: Fri 31 Jan 2025 05:00:56 +0000
Manifest next update: Sat 01 Feb 2025 05:00:56 +0000
Files and hashes: 1: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: 4NNgaRbtszXSNwwF4FV8tG0DcN5iaJBk4Y7GmY8rZJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c8:fd:01:e1:51:ae:13:8e:67:9c:1a:bb:a3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Validity
Not Before: Jan 31 05:00:56 2025 GMT
Not After : Feb 1 05:00:56 2025 GMT
Subject: CN=174db9f85edda3ff50dbaa29bf3e8562835384a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:f3:7c:1a:10:0c:36:b3:89:6f:da:3d:ab:
97:e2:e2:5e:9c:93:73:ba:83:3b:28:46:64:8a:f1:
03:03:4e:cd:f4:e1:80:1d:d3:24:7d:79:a2:55:88:
d0:9c:25:e4:28:20:c9:09:fb:df:87:2a:17:99:10:
65:a1:24:32:c8:92:2e:b4:01:39:33:ef:6f:e9:46:
93:93:a3:83:91:66:aa:f2:9e:1f:2b:33:93:12:6e:
cf:ce:77:8b:e1:99:bd:7c:b8:aa:b2:99:1a:7e:3d:
7b:4b:af:ab:fb:0e:f3:e4:ca:01:37:1f:65:df:d8:
c7:78:a4:0e:c5:b3:a4:b9:cc:33:f6:6b:04:b1:2a:
15:4f:59:db:e4:9b:5a:00:a2:0b:ce:00:b7:55:1f:
66:d8:6b:ce:bf:9a:dc:0c:6a:96:1a:1b:97:87:cb:
3a:a9:6b:5a:b5:c4:9c:2f:8d:48:ac:ec:71:f2:10:
57:1b:84:15:80:ac:ae:d2:5b:4a:40:44:1c:0d:19:
f9:0d:16:2f:3a:d0:a1:05:14:f6:0c:1f:4a:38:fb:
e2:a0:2c:33:0b:1f:6f:6b:dc:cb:0b:ce:a9:11:10:
9a:7c:b5:97:ff:ab:a5:cd:56:4d:bb:97:45:18:64:
b8:d2:48:fc:08:66:d3:26:6c:e4:3d:62:5e:85:d2:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4D:B9:F8:5E:DD:A3:FF:50:DB:AA:29:BF:3E:85:62:83:53:84:A4
X509v3 Authority Key Identifier:
keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:16:e9:aa:9f:64:cd:03:e6:99:db:2b:af:d9:2d:d6:60:39:
c9:13:31:86:c5:c5:91:a8:f2:ea:51:28:05:97:70:65:bc:63:
81:6f:aa:e9:f4:b7:49:05:bb:18:2b:9a:d0:b1:b4:85:df:4b:
5d:ea:4c:07:3b:75:00:ea:7d:fb:69:d7:37:e4:8c:7c:78:fc:
24:21:7f:a2:57:ff:fb:25:ec:d2:70:4b:03:f8:3a:30:e3:e0:
5b:15:1b:02:04:f5:3e:73:b4:57:b0:bd:00:a7:62:25:d5:62:
ca:77:4d:e9:d0:5a:24:26:7c:4a:9e:c6:74:77:23:3a:06:fc:
97:62:62:d0:e4:f8:f9:58:f0:3a:2c:08:58:cb:47:c5:86:09:
cc:3b:ee:d7:4e:3c:b9:54:f6:9e:54:14:1c:a7:4f:91:a2:c7:
0c:98:a4:11:ff:7e:12:ed:a9:14:34:68:2e:21:77:25:69:88:
84:8b:1d:1e:e5:97:6b:d1:69:19:3e:77:fe:d2:35:f7:1b:4f:
49:3c:93:a1:96:82:48:3f:23:6a:21:1c:c2:74:e9:57:6f:28:
dd:a3:eb:a1:f1:6d:0e:13:22:ed:3b:da:3b:a7:0b:e3:6a:32:
fb:0f:48:09:f8:a8:fd:24:b7:1c:41:0b:65:e5:2f:44:73:66:
7e:ac:22:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u8j9AeFRrhOOZ5wau6M4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OTc2MjVjMzk1ZmI4NjdmNWQ4MDhkNTM1OTdhMTFjZTdm
M2M0Y2IwHhcNMjUwMTMxMDUwMDU2WhcNMjUwMjAxMDUwMDU2WjAzMTEwLwYDVQQD
EygxNzRkYjlmODVlZGRhM2ZmNTBkYmFhMjliZjNlODU2MjgzNTM4NGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HjzfBoQDDaziW/aPauX4uJenJNz
uoM7KEZkivEDA07N9OGAHdMkfXmiVYjQnCXkKCDJCfvfhyoXmRBloSQyyJIutAE5
M+9v6UaTk6ODkWaq8p4fKzOTEm7PzneL4Zm9fLiqspkafj17S6+r+w7z5MoBNx9l
39jHeKQOxbOkucwz9msEsSoVT1nb5JtaAKILzgC3VR9m2GvOv5rcDGqWGhuXh8s6
qWtatcScL41IrOxx8hBXG4QVgKyu0ltKQEQcDRn5DRYvOtChBRT2DB9KOPvioCwz
Cx9va9zLC86pERCafLWX/6ulzVZNu5dFGGS40kj8CGbTJmzkPWJehdIxKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdNufhe3aP/UNuqKb8+hWKDU4SkMB8GA1UdIwQY
MBaAFBmXYlw5X7hn9dgI1TWXoRzn88TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pkaVhEbGZ1R2YxMkFqVk5aZWhIT2Z6eE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xNmU4MTItMjdjNi00MDVkLWE0YzUt
YTdmN2I5ODA5MDA3LzEvR1pkaVhEbGZ1R2YxMkFqVk5aZWhIT2Z6eE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8xNmU4MTItMjdjNi00MDVkLWE0YzUtYTdmN2I5ODA5MDA3
LzEvR1pkaVhEbGZ1R2YxMkFqVk5aZWhIT2Z6eE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRbpqp9k
zQPmmdsrr9kt1mA5yRMxhsXFkajy6lEoBZdwZbxjgW+q6fS3SQW7GCua0LG0hd9L
XepMBzt1AOp9+2nXN+SMfHj8JCF/olf/+yXs0nBLA/g6MOPgWxUbAgT1PnO0V7C9
AKdiJdViyndN6dBaJCZ8Sp7GdHcjOgb8l2Ji0OT4+VjwOiwIWMtHxYYJzDvu1048
uVT2nlQUHKdPkaLHDJikEf9+Eu2pFDRoLiF3JWmIhIsdHuWXa9FpGT53/tI19xtP
STyToZaCSD8jaiEcwnTpV28o3aProfFtDhMi7TvaO6cL42oy+w9ICfio/SS3HEEL
ZeUvRHNmfqwiwQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:09 2025 by rpki-client on console-fra.rpki-client.org