Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier: oNi1g4vJQ2CUeEY50M3TDdBAmG5Ed36oe7wTOLvEU1U=
Subject key identifier: 25:6A:5D:09:4B:3C:FF:A9:AD:8B:86:09:55:18:A6:7D:D4:DA:E8:89
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 0193609E8945355F423C8EEFA9D72FFBE204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number: 1379
Signing time: Mon 25 Nov 2024 00:00:22 +0000
Manifest this update: Mon 25 Nov 2024 00:00:22 +0000
Manifest next update: Tue 26 Nov 2024 00:00:22 +0000
Files and hashes: 1: BsYzlC9om29XC5ZoIuyf-96MAJ8.roa (hash: 47pR6DHPCp/NxOO+ejNObshofeg6IoRVkhboYH5ljek=)
2: HR9-s-VGOApjR-AadUJwA-yk3sM.roa (hash: +Zjrqgl28OKDP5yPph8UosUs5wtus9PGKrl6mHwlylI=)
3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: W/E9K1ZuHrBc5cgz3hD8jUX66DFVaMwKuywZdAtHTuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:60:9e:89:45:35:5f:42:3c:8e:ef:a9:d7:2f:fb:e2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Nov 25 00:00:22 2024 GMT
Not After : Nov 26 00:00:22 2024 GMT
Subject: CN=256a5d094b3cffa9ad8b86095518a67dd4dae889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:dd:95:a3:10:d0:8d:ec:01:44:34:43:3d:
53:2f:78:25:4b:d9:58:19:37:40:b5:fb:76:80:e9:
83:16:aa:9c:7c:9b:f1:61:83:eb:e6:02:85:31:4f:
7a:5d:f9:2f:6f:46:9f:b7:8a:ae:bd:23:d4:56:9d:
6c:5f:59:1c:4e:9a:32:bc:80:c7:52:a1:b0:a1:62:
25:9b:39:2e:83:1d:8b:2b:47:e0:f2:35:87:2b:5d:
e0:e2:21:a2:40:1a:6e:7e:78:5b:e8:2f:36:1a:c5:
a2:2c:79:43:1e:fb:db:89:5f:c2:7c:dc:97:9c:ae:
50:20:16:5b:ee:ad:0b:25:c9:9a:d8:96:11:98:0e:
3e:ad:88:4a:b8:47:28:54:80:9a:f1:a8:20:00:19:
03:b4:d0:f3:1b:9f:80:c9:ad:3f:11:72:ac:5f:53:
05:cb:23:5d:02:c0:b3:5e:b5:20:a7:6d:24:72:f0:
74:c6:73:a6:c8:bb:d2:aa:0d:26:15:40:d8:e2:17:
be:6f:13:3c:90:03:32:6a:09:de:f4:22:39:ed:c2:
b0:13:1a:7e:6c:5e:be:87:bf:d3:81:69:e6:78:bc:
82:91:fe:bd:66:79:b4:08:c2:86:f1:a8:85:56:80:
46:b7:86:b0:64:77:b7:29:25:c8:9b:35:87:12:3b:
22:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6A:5D:09:4B:3C:FF:A9:AD:8B:86:09:55:18:A6:7D:D4:DA:E8:89
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:23:1a:4a:d0:14:53:69:00:75:d8:7b:77:70:b6:48:03:08:
81:51:88:60:1c:02:5d:72:b4:fc:af:2a:8b:65:e3:25:27:28:
a3:d5:5a:0f:5f:ad:0b:b8:5b:0f:a0:63:21:c7:f7:35:2a:48:
58:71:2a:12:39:76:10:67:db:79:2d:89:cd:9f:87:d2:99:72:
87:c9:18:52:ea:57:7f:85:03:67:98:6a:c4:70:ca:81:1b:c9:
0f:1a:20:e7:3f:72:7d:b7:3d:55:04:0a:80:82:0b:d2:46:5f:
33:15:83:c9:4b:26:36:62:74:9e:fa:7f:9b:ba:ce:4c:d8:87:
dc:4d:fc:14:b2:fd:e6:76:ef:f1:89:57:b2:16:b5:fd:8d:5c:
7d:1d:52:62:89:91:55:a8:66:80:b1:47:9a:f2:66:a5:47:22:
f8:c8:5a:4a:ca:74:67:f6:0e:38:d1:a5:52:92:cd:2f:ad:f9:
53:c5:5a:95:3f:33:79:dc:ab:35:ed:12:2e:29:74:4a:2c:ec:
5d:1e:db:ed:1a:2c:3a:f4:b5:c3:ae:0d:93:dc:2d:c7:eb:0c:
a3:e6:eb:40:d3:74:27:30:9b:41:66:15:8a:05:14:14:8c:38:
3a:20:ee:83:31:4e:10:f5:c3:bc:51:db:5b:de:9f:67:e6:91:
e8:50:bc:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNgnolFNV9CPI7vqdcv++IEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjlkOWZmZTA0OGE3MDAwM2YxNmYwNmUyNGQ5YmYyZGI4
NWViNTIwHhcNMjQxMTI1MDAwMDIyWhcNMjQxMTI2MDAwMDIyWjAzMTEwLwYDVQQD
EygyNTZhNWQwOTRiM2NmZmE5YWQ4Yjg2MDk1NTE4YTY3ZGQ0ZGFlODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1evdlaMQ0I3sAUQ0Qz1TL3glS9lY
GTdAtft2gOmDFqqcfJvxYYPr5gKFMU96Xfkvb0aft4quvSPUVp1sX1kcTpoyvIDH
UqGwoWIlmzkugx2LK0fg8jWHK13g4iGiQBpufnhb6C82GsWiLHlDHvvbiV/CfNyX
nK5QIBZb7q0LJcma2JYRmA4+rYhKuEcoVICa8aggABkDtNDzG5+Aya0/EXKsX1MF
yyNdAsCzXrUgp20kcvB0xnOmyLvSqg0mFUDY4he+bxM8kAMyagne9CI57cKwExp+
bF6+h7/TgWnmeLyCkf69Znm0CMKG8aiFVoBGt4awZHe3KSXImzWHEjsiAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVqXQlLPP+prYuGCVUYpn3U2uiJMB8GA1UdIwQY
MBaAFIBp2f/gSKcAA/FvBuJNm/LbhetSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWIt
ZTAyMmUzMDA5YTcxLzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWItZTAyMmUzMDA5YTcx
LzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSMaStAU
U2kAddh7d3C2SAMIgVGIYBwCXXK0/K8qi2XjJScoo9VaD1+tC7hbD6BjIcf3NSpI
WHEqEjl2EGfbeS2JzZ+H0plyh8kYUupXf4UDZ5hqxHDKgRvJDxog5z9yfbc9VQQK
gIIL0kZfMxWDyUsmNmJ0nvp/m7rOTNiH3E38FLL95nbv8YlXsha1/Y1cfR1SYomR
VahmgLFHmvJmpUci+MhaSsp0Z/YOONGlUpLNL635U8ValT8zedyrNe0SLil0Sizs
XR7b7RosOvS1w64Nk9wtx+sMo+brQNN0JzCbQWYVigUUFIw4OiDugzFOEPXDvFHb
W96fZ+aR6FC8JA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:33:10 2024 by rpki-client on console-ams.rpki-client.org