Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.mft
File: g27BEvKGCMthun5cs62BDusT8Wk.mft (raw, json)
Hash identifier: SyA2QlkNbwcM4UbNA/hjwOBXMzBgqnMLnVc1nA8AMm8=
Subject key identifier: A1:47:C7:8F:3F:F3:D4:4C:01:82:BB:56:EF:60:79:98:72:8B:23:50
Authority key identifier: 83:6E:C1:12:F2:86:08:CB:61:BA:7E:5C:B3:AD:81:0E:EB:13:F1:69
Certificate issuer: /CN=836ec112f28608cb61ba7e5cb3ad810eeb13f169
Certificate serial: 0194C3F5A80405B5B7F7512BE66137D23721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g27BEvKGCMthun5cs62BDusT8Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.mft
Manifest number: 0228
Signing time: Sun 02 Feb 2025 00:00:43 +0000
Manifest this update: Sun 02 Feb 2025 00:00:43 +0000
Manifest next update: Mon 03 Feb 2025 00:00:43 +0000
Files and hashes: 1: g27BEvKGCMthun5cs62BDusT8Wk.crl (hash: OWG08GIfc6hc3g2/EkzKjrShQpG0QcxiT1VxYU4//wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g27BEvKGCMthun5cs62BDusT8Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:a8:04:05:b5:b7:f7:51:2b:e6:61:37:d2:37:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836ec112f28608cb61ba7e5cb3ad810eeb13f169
Validity
Not Before: Feb 2 00:00:43 2025 GMT
Not After : Feb 3 00:00:43 2025 GMT
Subject: CN=a147c78f3ff3d44c0182bb56ef607998728b2350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:bc:40:50:4d:db:fa:61:c0:32:d9:0b:e3:
49:b3:19:b3:cc:c0:b5:e6:48:16:2d:5b:cb:03:8a:
8b:5f:5b:e2:38:0e:52:08:a6:e1:8c:47:95:69:ae:
5d:b3:be:08:aa:b5:ce:e7:63:d9:f4:b4:37:d0:74:
54:68:e2:a0:b4:6e:e8:33:4a:9c:92:e2:e1:8b:15:
59:21:6f:5d:ac:a5:bd:fe:1c:99:4a:08:06:98:15:
8e:a3:dd:be:5c:91:f2:8f:9a:96:45:a5:58:67:a8:
87:69:3a:c1:6e:99:7d:f7:8c:ee:5c:fa:25:df:58:
16:50:80:5b:48:6e:71:7c:bf:a6:aa:bc:93:54:96:
2c:60:4f:2a:fa:80:ca:ba:18:35:84:b7:ee:ee:b5:
f7:4f:24:f5:a5:7a:91:c4:4c:72:11:a5:73:37:56:
18:0c:6f:39:56:e1:70:5a:6a:37:37:8c:91:63:53:
80:a1:ee:12:9e:e8:30:9c:a7:d4:fc:93:50:e1:b3:
9b:2e:b5:da:fb:2d:e0:fe:bb:e2:4a:a9:d4:07:09:
1e:4b:23:e7:0a:fb:e2:a4:29:9c:24:b0:0f:35:6c:
0b:5b:e5:ea:e7:f8:22:d4:e9:cd:42:07:a2:8c:d0:
85:a5:54:15:f1:84:79:31:98:cf:85:20:45:c6:c6:
33:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:47:C7:8F:3F:F3:D4:4C:01:82:BB:56:EF:60:79:98:72:8B:23:50
X509v3 Authority Key Identifier:
keyid:83:6E:C1:12:F2:86:08:CB:61:BA:7E:5C:B3:AD:81:0E:EB:13:F1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g27BEvKGCMthun5cs62BDusT8Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0b:1f:1f:92:45:34:5f:80:07:f0:db:59:2b:ec:7c:2e:69:
3b:4e:a7:6a:5d:1c:c9:56:29:c8:b0:67:ba:7e:d8:c2:1d:58:
c8:99:a3:ef:7f:3b:60:3f:03:c5:c4:72:64:61:92:01:00:4c:
d8:b5:f5:f8:33:a4:17:c7:a2:d6:0a:e4:24:d4:8d:a0:88:b9:
ee:16:eb:c4:ce:07:3c:57:95:08:15:2f:5b:ac:91:58:11:66:
ac:ab:73:3d:55:63:e4:7a:66:5a:29:69:8b:a4:db:93:22:21:
2e:72:92:d8:3e:06:e0:53:3d:34:5f:e5:03:cf:07:5c:65:7e:
59:f2:e9:9a:a3:56:11:0f:90:b8:b5:77:5d:c6:f8:24:06:2d:
87:62:b5:80:e5:49:7e:5e:e0:de:23:c5:65:53:68:89:bb:fe:
84:c5:5e:63:8a:92:43:22:3d:d2:32:50:21:78:e5:11:84:57:
bc:51:6a:c7:04:85:7f:40:7e:1f:1d:9c:51:0e:38:58:58:cd:
2c:74:94:02:74:b6:e7:18:ca:f5:c1:a6:f9:52:ae:4e:40:b0:
14:8e:6d:e9:9f:cf:ee:46:09:85:c7:e6:bf:ca:61:49:4b:79:
da:32:9c:0d:e5:dd:f1:fa:be:f2:cb:9c:6a:99:26:a5:5d:fb:
97:7a:1b:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9agEBbW391Er5mE30jchMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNmVjMTEyZjI4NjA4Y2I2MWJhN2U1Y2IzYWQ4MTBlZWIx
M2YxNjkwHhcNMjUwMjAyMDAwMDQzWhcNMjUwMjAzMDAwMDQzWjAzMTEwLwYDVQQD
EyhhMTQ3Yzc4ZjNmZjNkNDRjMDE4MmJiNTZlZjYwNzk5ODcyOGIyMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6a8QFBN2/phwDLZC+NJsxmzzMC1
5kgWLVvLA4qLX1viOA5SCKbhjEeVaa5ds74IqrXO52PZ9LQ30HRUaOKgtG7oM0qc
kuLhixVZIW9drKW9/hyZSggGmBWOo92+XJHyj5qWRaVYZ6iHaTrBbpl994zuXPol
31gWUIBbSG5xfL+mqryTVJYsYE8q+oDKuhg1hLfu7rX3TyT1pXqRxExyEaVzN1YY
DG85VuFwWmo3N4yRY1OAoe4SnugwnKfU/JNQ4bObLrXa+y3g/rviSqnUBwkeSyPn
CvvipCmcJLAPNWwLW+Xq5/gi1OnNQgeijNCFpVQV8YR5MZjPhSBFxsYzWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFHx48/89RMAYK7Vu9geZhyiyNQMB8GA1UdIwQY
MBaAFINuwRLyhgjLYbp+XLOtgQ7rE/FpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzI3QkV2S0dDTXRodW41Y3M2MkJEdXNUOFdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82NjVkMDEtM2NjNy00ODNlLThlOWYt
YzkyNDNiODM3NGFhLzEvZzI3QkV2S0dDTXRodW41Y3M2MkJEdXNUOFdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS82NjVkMDEtM2NjNy00ODNlLThlOWYtYzkyNDNiODM3NGFh
LzEvZzI3QkV2S0dDTXRodW41Y3M2MkJEdXNUOFdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwsfH5JF
NF+AB/DbWSvsfC5pO06nal0cyVYpyLBnun7Ywh1YyJmj7387YD8DxcRyZGGSAQBM
2LX1+DOkF8ei1grkJNSNoIi57hbrxM4HPFeVCBUvW6yRWBFmrKtzPVVj5HpmWilp
i6TbkyIhLnKS2D4G4FM9NF/lA88HXGV+WfLpmqNWEQ+QuLV3Xcb4JAYth2K1gOVJ
fl7g3iPFZVNoibv+hMVeY4qSQyI90jJQIXjlEYRXvFFqxwSFf0B+Hx2cUQ44WFjN
LHSUAnS25xjK9cGm+VKuTkCwFI5t6Z/P7kYJhcfmv8phSUt52jKcDeXd8fq+8suc
apkmpV37l3obCg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:01 2025 by rpki-client