Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
File: gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json)
Hash identifier: Ppi+7hJOGrM6GnK8yzY+BB3/q7XLgCeYbl/QFvpUHtw=
Subject key identifier: AD:5A:D1:91:07:87:85:94:C0:D5:AD:79:84:47:4C:C4:8A:BC:5D:7A
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial: 0194C46369E515E502F2D851938D860B1087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
Manifest number: 142C
Signing time: Sun 02 Feb 2025 02:00:36 +0000
Manifest this update: Sun 02 Feb 2025 02:00:36 +0000
Manifest next update: Mon 03 Feb 2025 02:00:36 +0000
Files and hashes: 1: EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa (hash: +4JZ98C4BqbbLLfwtggPDHTa1SBuwVe0r20VBr9Sh7Q=)
2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: 7SIS0//gnqJSHVpHZATiKCr5G+1zO1Hlk2XVVJknpVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:69:e5:15:e5:02:f2:d8:51:93:8d:86:0b:10:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Validity
Not Before: Feb 2 02:00:36 2025 GMT
Not After : Feb 3 02:00:36 2025 GMT
Subject: CN=ad5ad19107878594c0d5ad7984474cc48abc5d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:7b:bf:4b:79:04:1e:0b:08:4c:78:ab:ed:
45:a8:4f:99:14:eb:4d:0e:70:2d:fb:23:ae:ab:c0:
06:26:96:d5:b6:0a:ea:1e:38:d6:d3:17:12:7b:ae:
d7:c1:f2:7d:34:4a:76:01:a5:49:9b:1b:04:04:f0:
67:31:27:7f:0a:73:b4:71:14:9c:af:22:e1:73:47:
5e:e4:f7:4c:65:b5:43:b6:23:62:77:43:fe:0c:41:
98:75:ce:64:fd:63:bd:94:03:3b:6f:0d:d2:c2:c9:
1f:ab:63:52:24:2c:b2:fc:8a:04:98:6c:26:c2:46:
7e:4d:d1:cd:40:bd:1e:89:d7:90:19:af:57:91:11:
d3:58:fb:a5:a9:38:ac:9e:44:22:03:c7:3a:1b:06:
a5:dd:a6:f9:f9:6e:d5:eb:05:d9:58:c0:fc:68:85:
ae:e8:1b:7f:f9:83:3d:95:dd:98:69:3c:7b:d2:ef:
f8:48:05:9c:84:80:78:d9:21:93:a4:79:01:d7:6c:
8b:e9:86:31:cd:9d:1c:df:47:86:d9:c6:06:ba:41:
7a:fd:1d:64:12:48:0a:9f:bb:f0:be:ad:aa:5b:47:
50:70:0a:26:ac:9f:6e:1a:df:95:e9:08:52:10:c7:
c9:a4:46:92:d1:e5:ed:4b:d4:b8:5a:d2:25:88:3b:
d1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5A:D1:91:07:87:85:94:C0:D5:AD:79:84:47:4C:C4:8A:BC:5D:7A
X509v3 Authority Key Identifier:
keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:62:57:0e:ef:4f:d7:d3:f1:37:9c:56:26:11:ca:f2:4a:86:
65:0a:1b:17:6b:2c:d8:0d:a3:41:90:79:0c:8e:22:f4:76:67:
fe:f4:e4:90:ce:de:54:d7:8e:86:8d:e1:dd:87:8c:2a:fa:f3:
6d:b3:42:08:2f:27:cd:a9:79:6d:5e:04:d8:43:f1:d9:dd:ef:
ee:c3:a9:c5:de:ef:33:d4:de:2c:40:cf:0b:ec:1f:c7:76:fb:
86:7b:24:c5:a7:07:6e:e6:f8:92:0a:9e:94:7a:c1:60:2b:78:
a7:31:8c:09:15:f2:46:1f:ce:1f:98:36:d9:bf:6f:91:77:fc:
32:af:56:6d:a5:45:fe:fd:0a:e4:1e:eb:7e:0d:ce:f3:8b:98:
23:d2:9e:21:d4:91:4c:f5:20:3c:c4:f7:51:a0:79:82:84:a0:
1c:96:75:0a:16:74:12:84:25:1f:c1:25:c5:c8:e6:d5:e7:96:
93:61:1b:e3:a6:29:9a:be:32:f0:74:b8:00:18:c3:87:28:ed:
8f:b4:2c:67:4f:bd:ef:77:c6:1b:8b:48:03:f0:ad:98:27:06:
ab:95:e2:60:60:06:94:2b:57:e1:82:1f:96:46:85:5b:92:4c:
58:7b:bf:1a:b8:9b:5e:90:59:cc:57:61:fc:4f:c0:66:b9:18:
14:e7:5a:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY2nlFeUC8thRk42GCxCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYTMzM2QxM2RjOTE1ZjRmYmZiNjFiMjVhNDg3N2U5MTM4
ZTdmMWQwHhcNMjUwMjAyMDIwMDM2WhcNMjUwMjAzMDIwMDM2WjAzMTEwLwYDVQQD
EyhhZDVhZDE5MTA3ODc4NTk0YzBkNWFkNzk4NDQ3NGNjNDhhYmM1ZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq17v0t5BB4LCEx4q+1FqE+ZFOtN
DnAt+yOuq8AGJpbVtgrqHjjW0xcSe67XwfJ9NEp2AaVJmxsEBPBnMSd/CnO0cRSc
ryLhc0de5PdMZbVDtiNid0P+DEGYdc5k/WO9lAM7bw3Swskfq2NSJCyy/IoEmGwm
wkZ+TdHNQL0eideQGa9XkRHTWPulqTisnkQiA8c6Gwal3ab5+W7V6wXZWMD8aIWu
6Bt/+YM9ld2YaTx70u/4SAWchIB42SGTpHkB12yL6YYxzZ0c30eG2cYGukF6/R1k
EkgKn7vwvq2qW0dQcAomrJ9uGt+V6QhSEMfJpEaS0eXtS9S4WtIliDvRcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1a0ZEHh4WUwNWteYRHTMSKvF16MB8GA1UdIwQY
MBaAFICjM9E9yRX0+/thslpId+kTjn8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0tNejBUM0pGZlQ3LTJHeVdraDM2Uk9PZngwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xMzliMzgtNWIyNC00MDdkLWIxN2Ut
NGNhMzU0MzBkY2EzLzEvZ0tNejBUM0pGZlQ3LTJHeVdraDM2Uk9PZngwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xMzliMzgtNWIyNC00MDdkLWIxN2UtNGNhMzU0MzBkY2Ez
LzEvZ0tNejBUM0pGZlQ3LTJHeVdraDM2Uk9PZngwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2JXDu9P
19PxN5xWJhHK8kqGZQobF2ss2A2jQZB5DI4i9HZn/vTkkM7eVNeOho3h3YeMKvrz
bbNCCC8nzal5bV4E2EPx2d3v7sOpxd7vM9TeLEDPC+wfx3b7hnskxacHbub4kgqe
lHrBYCt4pzGMCRXyRh/OH5g22b9vkXf8Mq9WbaVF/v0K5B7rfg3O84uYI9KeIdSR
TPUgPMT3UaB5goSgHJZ1ChZ0EoQlH8Elxcjm1eeWk2Eb46Ypmr4y8HS4ABjDhyjt
j7QsZ0+973fGG4tIA/CtmCcGq5XiYGAGlCtX4YIflkaFW5JMWHu/GribXpBZzFdh
/E/AZrkYFOda2A==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:25 2025 by rpki-client